diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-08-23 11:41:50 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-11-02 09:59:38 +0100 |
| commit | 2269444b5668cfdb898b21a5624884f85f42b6ff (patch) | |
| tree | 71e3d978f990bda42477c8bf20a2a3da505a0cef /man/ipsec.conf.5.in | |
| parent | 2d244f178f20a6aa0ab3afd32e5b6c366fc181f4 (diff) | |
| download | strongswan-2269444b5668cfdb898b21a5624884f85f42b6ff.tar.bz2 strongswan-2269444b5668cfdb898b21a5624884f85f42b6ff.tar.xz | |
man: Fix documentation of inbound mark behavior in ipsec.conf(5)
Diffstat (limited to 'man/ipsec.conf.5.in')
| -rw-r--r-- | man/ipsec.conf.5.in | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in index 69aeba8cb..85340f2da 100644 --- a/man/ipsec.conf.5.in +++ b/man/ipsec.conf.5.in @@ -1031,8 +1031,8 @@ Relevant only locally, other end need not agree on it. Also see EXPIRY/REKEY below. .TP .BR mark " = <value>[/<mask>]" -sets an XFRM mark in the inbound and outbound -IPsec SAs and policies. If the mask is missing then a default +sets an XFRM mark on the inbound policy and outbound +IPsec SA and policy. If the mask is missing then a default mask of .B 0xffffffff is assumed. The special value @@ -1043,13 +1043,13 @@ make the mark unique for each IPsec SA direction (in/out) the special value may be used. .TP .BR mark_in " = <value>[/<mask>]" -sets an XFRM mark in the inbound IPsec SA and -policy. If the mask is missing then a default mask of +sets an XFRM mark on the inbound policy (not on the SA). If the mask is missing +then a default mask of .B 0xffffffff is assumed. .TP .BR mark_out " = <value>[/<mask>]" -sets an XFRM mark in the outbound IPsec SA and +sets an XFRM mark on the outbound IPsec SA and policy. If the mask is missing then a default mask of .B 0xffffffff is assumed. |