On Mon, Dec 04, 2006 at 02:26:21PM -0600, Jacob Yocom-Piatt wrote: > this is easy enough to setup using isakmpd.conf files, but i don't know how to > do it with ipsec.conf yet. a "rosetta stone" for such translations would be > nice.
ipsecctl -nvf /etc/ipsec.conf will show you all of the FIFO commands that ipsecctl will write to /var/run/isakmpd.fifo, you can also get a dump of isakmpd's config state by running pkill -USR1 isakmpd and looking at /var/run/isakmpd.report -- Mathieu Sauve-Frankel