Ironclad registers one interface per valid device plus one for a loopback device. New addresses cannot be added manually, they may only be added and removde by the kernel. Some parameters are available for user control though, including per-interface configuration and enabling and disabling.
All interfaces but loopback
will be disabled by default, that is, they
will be setup and ready to go, but will refuse connectivity via kernel block,
as a security measure to avoid unexpected connectivity. They will need manual
enabling.