Table of Contents
Advertisement
IPsec Debug settings
klipsdebug
One of the following debug information can be selected using the klipsdibug selection field:
• no debug
• Tunnel - Messages of the tunnel code.
• Tunnel-xmit - Messages of the packets sent in the tunnel.
• pfkey - Communication with the command line commands.
• xform - Selection of the transformation of the packages.
• eroute - Manipulation of the IPsec routes (eroute).
• spi - Manipulation of the Security Association Database.
• radij - Manipulation of the Radij Database.
• esp - Encapsulation Security Payload Protokoll.
• ah - Authentication Header Protokoll.
• ipcomp - Compression of the IP packets before encryption.
• verbose -provides most of the information.
Caution! This function also outputs authentication and encryption keys in the log files.
plutodebug
One of the following debug information can be selected via the plutodibug selection field:
• no debug
• control - logs the decisions made by Pluto (useful for troubleshooting).
• crypt - logs the encryption and decryption of the messages.
• dns - shows the DNS requests for KEY and TXT entries (with rsasigkey =% dns and opportunistic en-
cryption, useful for troubleshooting).
• emitting - shows the structure of the outgoing messages.
• klips - logs communication with KLIPS. However, KLIPS is no longer used on the 2.6 kernel.
VPN | Page 193 of 324
Advertisement
Table of Contents
