First, lets assume you have
<link linkend="ipsec-install"> installed
<emphasis>IPsec
</emphasis></link>. How do you know it is
<link linkend="caveat">working
</link>? Sure, your connection will not work if it is misconfigured, and it will work when you finally get it right.
<citerefentry><refentrytitle>netstat
</refentrytitle><manvolnum>1
</manvolnum></citerefentry> will list it. But can you independently confirm it?