Manual Pages for UNIX Darwin command on man vpnd

vpnd(8) BSD System Manager's Manual vpnd(8)

NAME

vvppnndd - Mac OS X VPN service daemon

SYNOPSIS

vvppnndd [-dd | -nn | -xx] [-ii serverid]

vvppnndd [-hh]

DESCRIPTION

vvppnndd allows external hosts to tunnel via L2TP over IPSec or via PPTP from an insecure external network (such as the Internet) into a "secure" internal network, such as a corporate network. All traffic through the tunnel is encrypted to provide secure communications, with L2TP/IPSec providing a higher level of security than PPTP. vvppnndd listens for incoming connections, pairs each one with an available

internal IP address, and passes the connection to pppd(8) with appropri-

ate parameters. Parameters for vvppnndd are specified in a system configura-

tion (plist) file in XML format. This file contains a dictionary of con-

figurations each identified by a key referred to as a serverid. Parame-

ters include the tunneling protocol, IP addresses to be assigned to clients, PPP parameters etc.

vvppnndd is launched for a particular configuration by using the -i option

which takes the serverid to be run as an argument. vvppnndd can also be run

without the -i option. In this case it will check the configuration file

for a special array which contains a list of configurations to be run and will fork and exec a copy of vvppnndd for each serverid to be run. Running multiple vvppnndd processes simultaneously for a particular protocol is not allowed. vvppnndd will be launched during the boot process by a startup item if the

field VVPPNNSSEERRVVEERR is defined in /etc/hostconfig with the value -YYEESS-. Typ-

ically, in this case it will be launched without the -i option and will

check the configuration file to determine which configuration(s) are to be run. vvppnndd logs items of interest to the system log. A different log path can be specified in the configuration file. OOPPTTIIOONNSS The following options are available:

-dd Do not move to background and print log strings to the terminal.

-hh Print usage summary and exit.

-ii Serverid in the plist file that defines the configuration to be

run.

-nn Do not move to background, print log information to the terminal,

and quit after validating the argument list.

-xx Do not move to background.

EEXXAAMMPPLLEESS The default invocation, vvppnndd will read the list of configurations to run from the configuration file and launch them. This default configuration may be enabled at startup by

defining VVPPNNSSEERRVVEERR to -YYEESS-.

To specify a particular configuration to run use

vvppnndd -i serverid

FILES & FOLDERS

/usr/sbin/vpnd

/etc/hostconfig /System/Library/StartupItems/NetworkExtensions