(racoon 794) AW: Does racoon update its configuration from ra coon.conf?
Lockenvitz Jan EXT <[email protected]> Tue, 5 Oct 2004 14:26:57 +0200
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <47D438A0510BD611B9470002A58EDAE706B3B2D4@mchh2a6e.mchh.siemens.de> |
Hi, what is about this option in racoon.conf: path backupsa <file> If my understanding is correct Racoon will save all running SAs in this file. And if you start it agin with the option "-B" it should load the SAs from this file. Isn't this a possibility to change the racoon.conf and keep the existing tunnels alive with only a short interruption? Jan > -----Ursprüngliche Nachricht----- > Von: [email protected] [mailto:[email protected]] Im > Auftrag von Brian Buesker > Gesendet: Freitag, 1. Oktober 2004 16:58 > An: [email protected] > Betreff: (racoon 790) Re: Does racoon update its > configuration from racoon.conf? > > > One word of warning. Although sending racoon a SIGHUP will > cause it to > re-read it's config file, before it does so, racoon will flush all of > the phase 1 and phase 2 SAs that it had established, so > you'll wind up > having to renegotiate them. There is currently no way to update the > config file without losing SAs. There have been some > discussions on the > ipsec-tools-devel mailing list about this, and it is a > feature we would > like to add at some point, but there is currently no time frame for > adding it. If you'd like to work on such support, feel free > to do so and > contribute it back. > > Brian > > Juan Antonio Martínez Navarro wrote: > > >Thank you, i've solved on my own. > > > >If you send a hup signal to racoon it reads its configuration file. > > > >You only have to type: kill -1 PID of racoon. > > > > > >El vie, 01-10-2004 a las 10:22, Juan Antonio Martínez > Navarro escribió: > > > > > >>Hi everybody, > >> > >>I'd like to know if racoon can update its configuration > from racoon.conf > >>dynamically. Because I'm interested in modifying racoon > configuration > >>file while racoon is running. > >> > >>Thanks > >> > >> > > > > > > >