From 0ef961b878331194e29390d4668a1f2b69dc2172 Mon Sep 17 00:00:00 2001
From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Tue, 15 Jul 2008 13:07:27 +0000
Subject: [PATCH] added pfsgroup to ipsec.conf.5 man page

---
 src/starter/ipsec.conf.5 | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/starter/ipsec.conf.5 b/src/starter/ipsec.conf.5
index 795dc9b7c..8157e2680 100644
--- a/src/starter/ipsec.conf.5
+++ b/src/starter/ipsec.conf.5
@@ -705,6 +705,12 @@ IKEv2 always uses PFS for IKE_SA rekeying whereas for CHILD_SA rekeying
 PFS is enforced by defining a Diffie-Hellman modp group in the
 .B esp
 parameter.
+.TP
+.B pfsgroup 
+defines a Diffie-Hellman group for perfect forward secrecy in IKEv1 Quick Mode
+differing from the DH group used for IKEv1 Main Mode (IKEv1 only).
+
+
 .TP
 .B reauth
 whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1,