diff options
| -rw-r--r-- | testing/tests/ikev2/nat-two-rw-mark-in-out/description.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/testing/tests/ikev2/nat-two-rw-mark-in-out/description.txt b/testing/tests/ikev2/nat-two-rw-mark-in-out/description.txt index 5b5aa99f8..dc0bccff6 100644 --- a/testing/tests/ikev2/nat-two-rw-mark-in-out/description.txt +++ b/testing/tests/ikev2/nat-two-rw-mark-in-out/description.txt @@ -5,7 +5,7 @@ after ESP decryption to map these subnets to 10.3.0.10 and 10.3.0.20, respective <p/> In order to differentiate between the tunnels to <b>alice</b> and <b>venus</b>, respectively, <b>XFRM marks</b> are defined for both the inbound and outbound IPsec SAs and policies using -the <b>mark_in</b> and <b>mark_out/b> parameters in ipsec.conf. +the <b>mark_in</b> and <b>mark_out</b> parameters in ipsec.conf. <p/> <b>iptables -t mangle</b> rules are then used in the PREROUTING chain to mark the traffic to and from <b>alice</b> and <b>venus</b>, respectively. |