aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndreas Steffen <andreas.steffen@strongswan.org>2010-07-13 09:15:53 +0200
committerAndreas Steffen <andreas.steffen@strongswan.org>2010-07-13 09:15:53 +0200
commitd5f29da3d23fa97a3977db176a01f478803fbbea (patch)
tree028ec081c815ba0107248c82680c655e6a34ce66
parentc1918dc28f0d264c2f946bf26752a160c3aabe3d (diff)
downloadstrongswan-d5f29da3d23fa97a3977db176a01f478803fbbea.tar.bz2
strongswan-d5f29da3d23fa97a3977db176a01f478803fbbea.tar.xz
added mark, mark_in, and mark_out to the ipsec.conf.5 man page
-rw-r--r--src/starter/ipsec.conf.5.in19
1 files changed, 19 insertions, 0 deletions
diff --git a/src/starter/ipsec.conf.5.in b/src/starter/ipsec.conf.5.in
index 1bb5ab4fb..3d2940a66 100644
--- a/src/starter/ipsec.conf.5.in
+++ b/src/starter/ipsec.conf.5.in
@@ -821,6 +821,25 @@ begin; acceptable values as for
.BR 9m ).
Relevant only locally, other end need not agree on it.
.TP
+.B mark
+sets an XFRM mark of the form <value>[/<mask>] in the inbound and outbound
+IPsec SAs and policies (IKEv2 only). If the mask is missing then a default
+mask of
+.B 0xffffffff
+is assumed.
+.TP
+.B mark_in
+sets an XFRM mark of the form <value>[/<mask>] in the inbound IPsec SA and policy
+(IKEv2 only). If the mask is missing then a default mask of
+.B 0xffffffff
+is assumed.
+.TP
+.B mark_out
+sets an XFRM mark of the form <value>[/<mask>] in the outbound IPsec SA and policy
+(IKEv2 only). If the mask is missing then a default mask of
+.B 0xffffffff
+is assumed.
+.TP
.B mobike
enables the IKEv2 MOBIKE protocol defined by RFC 4555. Accepted values are
.B yes