pluto is used to automatically build shared ``security associations'' on a system that has IPsec, the secure IP protocol. In other words, pluto can eliminate much of the work of manual keying. The actual secure transmission of packets is the responsibility of other parts of the system (see KLIPS, the companion implementation of IPsec). ipsec_auto(8) provides a more convenient interface to pluto and whack.
A Security Association (SA) is an agreement between two network nodes on how to process certain traffic between them. This processing involves encapsulation, authentication, encryption, or compression.
IKE can be deployed on a network node to negotiate Security Associations for that node. These IKE implementations can only negotiate with other IKE implementations, so IKE must be on each node that is to be an endpoint of an IKE-negotiated Security Association. No other nodes need to be running IKE.
An IKE instance (i.e. an IKE implementation on a particular network node) communicates with another IKE instance using UDP IP packets, so there must be a route between the nodes in each direction.
The negotiation of Security Associations requires a number of choices that involve tradeoffs between security, convenience, trust, and efficiency. These are policy issues and are normally specified to the IKE instance by the system administrator.
IKE deals with two kinds of Security Associations. The first part of a negotiation between IKE instances is to build an ISAKMP SA. An ISAKMP SA is used to protect communication between the two IKEs. IPsec SAs can then be built by the IKEs - these are used to carry protected IP traffic between the systems.
The negotiation of the ISAKMP SA is known as Phase 1. In theory, Phase 1 can be accomplished by a couple of different exchange types, but we only implement one called Main Mode (we don't implement Aggressive Mode).
Any negotiation under the protection of an ISAKMP SA, including the negotiation of IPsec SAs, is part of Phase 2. The exchange type that we use to negotiate an IPsec SA is called Quick Mode.
IKE instances must be able to authenticate each other as part of their negotiation of an ISAKMP SA. This can be done by several mechanisms described in the draft standards.
IKE negotiation can be initiated by any instance with any other. If both can find an agreeable set of characteristics for a Security Association, and both recognize each others authenticity, they can set up a Security Association. The standards do not specify what causes an IKE instance to initiate a negotiation.
In summary, an IKE instance is prepared to automate the management of Security Associations in an IPsec environment, but a number of issues are considered policy and are left in the system administrator's hands.
pluto is an implementation of IKE. It runs as a daemon on a network node. Currently, this network node must be a LINUX system running the KLIPS implementation of IPsec.
pluto only implements a subset of IKE. This is enough for it to interoperate with other instances of pluto, and many other IKE implementations. We are working on implementing more of IKE.
The policy for acceptable characteristics for Security Associations is mostly hardwired into the code of pluto (spdb.c). Eventually this will be moved into a security policy database with reasonable expressive power and more convenience.
pluto uses shared secrets or RSA signatures to authenticate peers with whom it is negotiating.
pluto initiates negotiation of a Security Association when it is manually prodded: the program whack is run to trigger this. It will also initiate a negotiation when KLIPS traps an outbound packet for Opportunistic Encryption.
pluto implements ISAKMP SAs itself. After it has negotiated the characteristics of an IPsec SA, it directs KLIPS to implement it. It also invokes a script to adjust any firewall and issue route(8) commands to direct IP packets through KLIPS.
When pluto shuts down, it closes all Security Associations.
pluto runs as a daemon with userid root. Before running it, a few things must be set up.
pluto requires KLIPS, the Openswan implementation of IPsec. All of the components of KLIPS and pluto should be installed.
pluto supports multiple public networks (that is, networks that are considered insecure and thus need to have their traffic encrypted or authenticated). It discovers the public interfaces to use by looking at all interfaces that are configured (the --interface option can be used to limit the interfaces considered). It does this only when whack tells it to --listen, so the interfaces must be configured by then. Each interface with a name of the form ipsec[0-9] is taken as a KLIPS virtual public interface. Another network interface with the same IP address (there should be only one) is taken as the corresponding real public interface. ifconfig(8) with the -a flag will show the name and status of each network interface.
pluto requires a database of preshared secrets and RSA private keys. This is described in the ipsec.secrets(5). pluto is told of RSA public keys via whack commands. If the connection is Opportunistic, and no RSA public key is known, pluto will attempt to fetch RSA keys using the Domain Name System.
The most basic network topology that pluto supports has two security gateways negotiating on behalf of client subnets. The diagram of RGB's testbed is a good example (see klips/doc/rgb_setup.txt).
The file INSTALL in the base directory of this distribution explains how to start setting up the whole system, including KLIPS.
Make sure that the security gateways have routes to each other. This is usually covered by the default route, but may require issuing route(8) commands. The route must go through a particular IP interface (we will assume it is eth0, but it need not be). The interface that connects the security gateway to its client must be a different one.
It is necessary to issue a ipsec_tncfg(8) command on each gateway. The required command is:
ipsec tncfg --attach --virtual ipsec0 --physical eth0
A command to set up the ipsec0 virtual interface will also need to be run. It will have the same parameters as the command used to set up the physical interface to which it has just been connected using ipsec_tncfg(8).
A pluto daemon and another IKE daemon (for example, another instance of pluto) must convince each other that they are who they are supposed to be before any negotiation can succeed. This authentication is accomplished by using either secrets that have been shared beforehand (manually) or by using RSA signatures. There are other techniques, but they have not been implemented in pluto.
The file /etc/ipsec.secrets is used to keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is an argument keep preshared secret keys and RSA private keys for authentication with other IKE daemons. For debugging, there is