diff options
| -rw-r--r-- | src/starter/ipsec.conf.5 | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/src/starter/ipsec.conf.5 b/src/starter/ipsec.conf.5 index f0363803b..63d26b9bd 100644 --- a/src/starter/ipsec.conf.5 +++ b/src/starter/ipsec.conf.5 @@ -600,7 +600,16 @@ value is .B %modeconfig or .B %config, -an address is requested from the peer. +an address is requested from the peer. In IKEv2, a defined address is requested, +but the server may change it. If the server does not support it, the address +is enforced. +.TP +.B leftsourceip +The internal source IP to use in a tunnel for the remote peer. If the +value is +.B %config +on the responder side, the initiator must propose a address which is then echoed +back. .TP .B leftsubnetwithin Not relevant for IKEv2, as subnets are narrowed. |