aboutsummaryrefslogtreecommitdiffstats
path: root/man/ipsec.conf.5.in
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2013-10-14 17:10:16 +0200
committerTobias Brunner <tobias@strongswan.org>2013-10-17 16:57:39 +0200
commit69560611971e547ad8c5f0f1f79715ff07786c18 (patch)
tree838ff04d570a318e09a55017177428c31f3c2967 /man/ipsec.conf.5.in
parent4c185d11add87c1f0b11be9a46097446d0a6ca2d (diff)
downloadstrongswan-69560611971e547ad8c5f0f1f79715ff07786c18.tar.bz2
strongswan-69560611971e547ad8c5f0f1f79715ff07786c18.tar.xz
ipsec.conf.5: Note about ICMP[v6] message type/code added
Diffstat (limited to 'man/ipsec.conf.5.in')
-rw-r--r--man/ipsec.conf.5.in8
1 files changed, 8 insertions, 0 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index f83c45116..92be67000 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -858,6 +858,14 @@ Instead of omitting either value
can be used to the same effect, e.g.
.BR leftsubnet=fec1::1[udp/%any],10.0.0.0/16[%any/53] .
+If the protocol is
+.B icmp
+or
+.B ipv6-icmp
+the port is interpreted as ICMP message type if it is less than 256 or as type
+and code if it is greater or equal to 256, with the type in the most significant
+8 bits and the code in the least significant 8 bits.
+
The port value can alternatively take the value
.B %opaque
for RFC 4301 OPAQUE selectors, or a numerical range in the form