Piotr Jasiukajtis wrote:
> On Mon, Mar 9, 2009 at 6:47 AM, Akhil Jain <akhil_jain111 at yahoo.co.in> 
> wrote:
>> Hi All,
>>
>> Can anyone tell me how to check on my solaris m/c if IPsec module is running 
>> or not?

First, there are several modules implementing in-kernel IPsec:
   spdsock (PF_POLICY)
   keysock (PF_KEY)
   ipsecesp
   ipsecah

> Type 'ipsecconf -l' to show ipsec rules and 'modinfo | grep ipsec' to
> see if ipsec kernel modules are loaded.

Actually, just entering 'ipsecconf -l' will cause the IPsec modules 
(ipsecesp, ipsecah) to be loaded (see 
src/uts/common/inet/ip/ipsec_loader.c:ipsec_loader() for details). 
keysock module is always loaded by soconfig(1M) right after the system 
starts. spdsock is I believe loaded by ip module.


v.

Reply via email to