denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

man: Fix documentation of inbound mark behavior in ipsec.conf(5)

Browse Source
This commit is contained in:
Tobias Brunner
2017-11-02 09:59:38 +01:00
parent 2d244f178f
commit 2269444b56
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/ipsec.conf.5.in
+5 -5
View File
@@ -1031,8 +1031,8 @@ Relevant only locally, other end need not agree on it. Also see EXPIRY/REKEY
below. below.
.TP .TP
.BR mark " = <value>[/<mask>]" .BR mark " = <value>[/<mask>]"
sets an XFRM mark in the inbound and outbound sets an XFRM mark on the inbound policy and outbound
IPsec SAs and policies. If the mask is missing then a default IPsec SA and policy. If the mask is missing then a default
mask of mask of
.B 0xffffffff .B 0xffffffff
is assumed. The special value is assumed. The special value
@@ -1043,13 +1043,13 @@ make the mark unique for each IPsec SA direction (in/out) the special value
may be used. may be used.
.TP .TP
.BR mark_in " = <value>[/<mask>]" .BR mark_in " = <value>[/<mask>]"
sets an XFRM mark in the inbound IPsec SA and sets an XFRM mark on the inbound policy (not on the SA). If the mask is missing
policy. If the mask is missing then a default mask of then a default mask of
.B 0xffffffff .B 0xffffffff
is assumed. is assumed.
.TP .TP
.BR mark_out " = <value>[/<mask>]" .BR mark_out " = <value>[/<mask>]"
sets an XFRM mark in the outbound IPsec SA and sets an XFRM mark on the outbound IPsec SA and
policy. If the mask is missing then a default mask of policy. If the mask is missing then a default mask of
.B 0xffffffff .B 0xffffffff
is assumed. is assumed.