diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index ca77ee7de..837a2055a 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -523,6 +523,7 @@ an optional EAP method can be appended. Currently defined methods are
 .BR eap-sim ,
 .BR eap-tls ,
 .BR eap-ttls ,
+.BR eap-dynamic ,
 and
 .BR eap-radius .
 Alternatively, IANA assigned EAP method numbers are accepted. Vendor specific
diff --git a/man/strongswan.conf.5.in b/man/strongswan.conf.5.in
index 4fba2344b..8df6cf1fa 100644
--- a/man/strongswan.conf.5.in
+++ b/man/strongswan.conf.5.in
@@ -302,6 +302,16 @@ enable loaded duplicheck plugin
 .TP
 .BR charon.plugins.eap-aka-3ggp2.seq_check
 
+.TP
+.BR charon.plugins.eap-dynamic.preferred
+The preferred EAP method(s) to be used.  If it is not given the first
+registered method will be used initially.  If a comma separated list is given
+the methods are tried in the given order before trying the rest of the
+registered methods.
+.TP
+.BR charon.plugins.eap-dynamic.prefer_user " [no]"
+If enabled the EAP methods proposed in an EAP-Nak message sent by the peer are
+preferred over the methods registered locally.
 .TP
 .BR charon.plugins.eap-gtc.backend " [pam]"
 XAuth backend to be used for credential verification