A.1 Guidelines for the User

A.1.1 General Guidelines

  • Do not modify the IKE configuration file ( /etc/racoon/racoon.conf).

  • Do not modify the XML files in / user's home directory/.turnpike/profiles .

  • Do not use the setkey command to alter the IPsec policies or IPsec security association (SA).

  • If you are exiting, a session (for instance GNOME* or KDE), disconnect from the VPN before logout. Otherwise, the VPN connection continues.

  • Use the CLI and the GUI options separately, because these features might not interact properly.

A.1.2 IKE Status

NOTE:You must log in as root to check the IKE status.

To check the IKE status, use the following command:

/etc/init.d/racoon status

Either of the following statuses is displayed

  • Running: IKE is up and running.

  • Unused/Dead: To start the IKE, use the following command:

    /etc/init.d/racoon start

    To stop the IKE daemon, use the following command:

    /etc/init.d/racoon stop

A.1.3 IKE Log

If IKE is running at the default log level, all information including the error messages is logged.

The IKE log can be accessed at /var/log/messages.