Independent Verification of IPsec Functionality in FreeBSD

David Honig

3 May 1999

Legal Notice

You installed IPsec and it seems to be working. How do you know? I describe a method for experimentally verifying that IPsec is working.

1 The Problem

First, lets assume you have installed IPsec. How do you know it is working? Sure, your connection will not work if it is misconfigured, and it will work when you finally get it right. netstat(1) will list it. But can you independently confirm it?

This, and other documents, can be downloaded from

For questions about FreeBSD, read the documentation before contacting <>.
For questions about this documentation, e-mail <>.