IPSEC_SPIGRP - Online Linux Manual PageSection : 5
Updated : 10/04/2017
Source : libreswan
Note : Executable programs
NAMEipsec_spigrp − list IPSEC Security Association groupings
SYNOPSISipsec spigrp
cat/proc/net/ipsec_spigrp
OBSOLETENote that spigrp is only supported on the classic KLIPS stack​. It is not supported on any other stack and will be completely removed in future versions​. A replacement command still needs to be designed
DESCRIPTION/proc/net/ipsec_spigrp is a read−only file that lists groups of IPSEC Security Associations (SAs)​. An entry in the IPSEC extended routing table can only point (via an SAID) to one SA​. If more than one transform must be applied to a given type of packet, this can be accomplished by setting up several SAs with the same destination address but potentially different SPIs and protocols, and grouping them with ipsec_spigrp(8)​. The SA groups are listed, one line per connection/group, as a sequence of SAs to be applied (or that should have been applied, in the case of an incoming packet) from inside to outside the packet​. An SA is identified by its SAID, which consists of protocol ("ah", "esp", "comp" or "tun"), SPI (with ´​.´ for IPv4 or ´:´ for IPv6 prefixed hexadecimal number ) and destination address (IPv4 dotted quad or IPv6 coloned hex) prefixed by ´@´, in the format <proto><af><spi>@<dest>​.
EXAMPLEStun​.3d0@192​.168​.2​.110 comp​.3d0@192​.168​.2​.110 esp​.187a101b@192​.168​.2​.110 ah​.187a101a@192​.168​.2​.110 is a group of 3 SAs, destined for 192​.168​.2​.110 with an IPv4−in−IPv4 tunnel SA applied first with an SPI of 3d0 in hexadecimal, followed by a Deflate compression header to compress the packet with CPI of 3d0 in hexadecimal, followed by an Encapsulating Security Payload header to encrypt the packet with SPI 187a101b in hexadecimal, followed by an Authentication Header to authenticate the packet with SPI 187a101a in hexadecimal, applied from inside to outside the packet​. This could be an incoming or outgoing group, depending on the address of the local machine​. tun:3d0@3049:1::2 comp:3d0@3049:1::2 esp:187a101b@3049:1::2 ah:187a101a@3049:1::2 is a group of 3 SAs, destined for 3049:1::2 with an IPv6−in−IPv6 tunnel SA applied first with an SPI of 3d0 in hexadecimal, followed by a Deflate compression header to compress the packet with CPI of 3d0 in hexadecimal, followed by an Encapsulating Security Payload header to encrypt the packet with SPI 187a101b in hexadecimal, followed by an Authentication Header to authenticate the packet with SPI 187a101a in hexadecimal, applied from inside to outside the packet​. This could be an incoming or outgoing group, depending on the address of the local machine​.
FILES/proc/net/ipsec_spigrp, /usr/local/bin/ipsec
SEE ALSOipsec(8), ipsec_tncfg(5), ipsec_eroute(5), ipsec_spi(5), ipsec_klipsdebug(5), ipsec_spigrp(8), ipsec_version(5), ipsec_pf_key(5)
HISTORYWritten for the Linux FreeS/WAN project <http://www​.freeswan​.org/> by Richard Guy Briggs​.
BUGS:−)
AUTHORPaul Wouters placeholder to suppress warning 0
Johanes Gumabo
Data Size   :   11,526 byte
man-ipsec_spigrp.5Build   :   2024-12-05, 20:55   :  
Visitor Screen   :   x
Visitor Counter ( page / site )   :   3 / 182,501
Visitor ID   :     :  
Visitor IP   :   18.118.32.6   :  
Visitor Provider   :   AMAZON-02   :  
Provider Position ( lat x lon )   :   39.962500 x -83.006100   :   x
Provider Accuracy Radius ( km )   :   1000   :  
Provider City   :   Columbus   :  
Provider Province   :   Ohio ,   :   ,
Provider Country   :   United States   :  
Provider Continent   :   North America   :  
Visitor Recorder   :   Version   :  
Visitor Recorder   :   Library   :  
Online Linux Manual Page   :   Version   :   Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page   :   Library   :   lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page   :   Library   :   lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base   :   Version   :   Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base   :   Library   :   lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36
Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .
If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.