added pfsgroup to ipsec.conf.5 man page

2008-07-15 13:07:27 +00:00
parent 4336a1c611
commit 0ef961b878
1 changed files with 6 additions and 0 deletions
@@ -705,6 +705,12 @@ IKEv2 always uses PFS for IKE_SA rekeying whereas for CHILD_SA rekeying
 PFS is enforced by defining a Diffie-Hellman modp group in the
 .B esp
 parameter.
+.TP
+.B pfsgroup 
+defines a Diffie-Hellman group for perfect forward secrecy in IKEv1 Quick Mode
+differing from the DH group used for IKEv1 Main Mode (IKEv1 only).
+
+
 .TP
 .B reauth
 whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1,