aboutsummaryrefslogtreecommitdiffstats
path: root/man/ipsec.conf.5.in
diff options
context:
space:
mode:
authorMartin Willi <martin@revosec.ch>2012-09-17 11:43:11 +0200
committerMartin Willi <martin@revosec.ch>2012-09-18 17:17:48 +0200
commit55f126fd55794775cba7285c10d75b76aa871220 (patch)
treed85a1c5e8246adb9de8cddf4b7b2b4c9f4597ff7 /man/ipsec.conf.5.in
parent77c37ea5e0d60276847f316138b3ba8cedf49caf (diff)
downloadstrongswan-55f126fd55794775cba7285c10d75b76aa871220.tar.bz2
strongswan-55f126fd55794775cba7285c10d75b76aa871220.tar.xz
Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity
Diffstat (limited to 'man/ipsec.conf.5.in')
-rw-r--r--man/ipsec.conf.5.in5
1 files changed, 3 insertions, 2 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index ea935b6c3..f4d7ed1d6 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -756,8 +756,9 @@ signifying that the left end of the connection goes to the left participant
only. Configured subnets of the peers may differ, the protocol narrows it to
the greatest common subnet. In IKEv1, this may lead to problems with other
implementations, make sure to configure identical subnets in such
-configurations. IKEv2 supports multiple subnets separated by commas, IKEv1 only
-interprets the first subnet of such a definition.
+configurations. IKEv2 supports multiple subnets separated by commas. IKEv1 only
+interprets the first subnet of such a definition, unless the Cisco Unity
+extension plugin is enabled.
.TP
.BR leftupdown " = <path>"
what ``updown'' script to run to adjust routing and/or firewalling