denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated ipsec.conf.5 with multiple left/rightsourceip support

Browse Source
This commit is contained in:
Martin Willi
2012-08-30 16:43:45 +02:00
parent 2df155958c
commit 26bc695806
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/ipsec.conf.5.in
+6 -6
View File
@@ -700,19 +700,19 @@ and
the latter meaning that the peer must send a certificate request payload in the latter meaning that the peer must send a certificate request payload in
order to get a certificate in return. order to get a certificate in return.
.TP .TP
.BR leftsourceip " = %config | %cfg | %modeconfig | %modecfg | <ip address>" .BR leftsourceip " = %config4 | %config6 | <ip address>"
The internal source IP to use in a tunnel, also known as virtual IP. If the Comma separated list of internal source IPs to use in a tunnel, also known as
value is one of the synonyms virtual IP. If the value is one of the synonyms
.BR %config , .BR %config ,
.BR %cfg , .BR %cfg ,
.BR %modeconfig , .BR %modeconfig ,
or or
.BR %modecfg , .BR %modecfg ,
an address is requested from the peer. an address (from the tunnel address family) is requested from the peer.
.TP .TP
.BR rightsourceip " = %config | <network>/<netmask> | %poolname" .BR rightsourceip " = %config | <network>/<netmask> | %poolname"
The internal source IP to use in a tunnel for the remote peer. If the Comma separated list of internal source IPs to use in a tunnel for the remote
value is peer. If the value is
.B %config .B %config
on the responder side, the initiator must propose an address which is then on the responder side, the initiator must propose an address which is then
echoed back. Also supported are address pools expressed as echoed back. Also supported are address pools expressed as