STARTKEY(1)                OpenBSD Reference Manual                STARTKEY(1)

NAME
     startkey - start keying with photurisd



SYNOPSIS
     startkey [-d directory] options ...

DESCRIPTION
     The startkey utility attempts to contact the photurisd(8) daemon and ini-
     tialize a key exchange. The flags are:

     -d directory
             The -d option specifies the directory in which photurisd looks
             for its startup files. The default is /etc/photuris/.

     The options dst, port, options, tsrc, tdst, exchange_lifetime,
     spi_lifetime and user are understood by the daemon.  The meanings are as
     follows:

           dst      The destination IP address with which the exchange is to
                    be established.

           port     The port number of the destination photuris daemon.

           options  The options to be used in the exchange. Possible values
                    are ``enc'' and ``auth''.

           tsrc     If both tsrc and tdst (see below) are specified, a tunnel
                    (IP over IP) is setup.  The tsrc option is a network ad-
                    dress with netmask used for matching the source IP address
                    of a packet.  When both the source and the destination ad-
                    dresses match their respective options the packet will be
                    routed into the tunnel.

           tdst     If both tsrc (see above) and tdst are specified, a tunnel
                    (IP over IP) is setup.  The tdst option is a network ad-
                    dress with netmask used for matching the destination IP
                    address of a packet.  When both the source and the desti-
                    nation addresses match their respective options the packet
                    will be routed into the tunnel.

           exchange_lifetime
                    Determines the lifetime of the exchange. After an exchange
                    expires no new SPIs are created, which means the transport
                    or tunnel is torn down as soon as the current SPI times
                    out (see spi_lifetime below).  The default value is gotten
                    from the exchange_lifetime parameter given in
                    photuris.conf. If it is not given there the default is
                    1800 seconds.

           spi_lifetime
                    Determines the lifetime of each created SPI in the ex-
                    change.

           user     The user name for whom the keying shall be done. Precon-
                    figured secrets are taken from the users secret file.

EXAMPLE
     startkey dst=169.200.12.23 options=auth

FILES
     /etc/photuris/photuris.pipe  FIFO in which keying requests are written

SEE ALSO
     photurisd(8)


OpenBSD 2.6                      July 18, 1997                               2