Skip Navigation Links | |
Exit Print View | |
Securing the Network in Oracle Solaris 11.1 Oracle Solaris 11.1 Information Library |
1. Using Link Protection in Virtualized Environments
2. Tuning Your Network (Tasks)
3. Web Servers and the Secure Sockets Layer Protocol
4. IP Filter in Oracle Solaris (Overview)
6. IP Security Architecture (Overview)
8. IP Security Architecture (Reference)
Security Considerations for ipsecinit.conf and ipsecconf
Security Associations Database for IPsec
Utilities for SA Generation in IPsec
Security Considerations for ipseckey
9. Internet Key Exchange (Overview)
The Service Management Facility (SMF) provides the following services for IPsec:
svc:/network/ipsec/policy service – Manages IPsec policy. By default, this service is enabled. The value of the config_file property determines the location of the ipsecinit.conf file. The initial value is /etc/inet/ipsecinit.conf.
svc:/network/ipsec/ipsecalgs service – Manages the algorithms that are available to IPsec. By default, this service is enabled.
svc:/network/ipsec/manual-key service – Activates manual key management. By default, this service is disabled. The value of the config_file property determines the location of the ipseckeysconfiguration file. The initial value is /etc/inet/secret/ipseckeys.
svc:/network/ipsec/ike service – Manages IKE. By default, this service is disabled. For the configurable properties, see IKE Service.
For information about SMF, see Chapter 1, Managing Services (Overview), in Managing Services and Faults in Oracle Solaris 11.1. Also see the smf(5), svcadm(1M), and svccfg(1M) man pages.