added type=transport_proxy and installpolicy=yes|no to man page

This commit is contained in:
Andreas Steffen
2008-11-13 06:29:53 +00:00
parent 509e07c5bc
commit 84bec926a3
+16 -4
View File
@@ -397,6 +397,15 @@ may be included, such as
how long the keying channel of a connection ('ISAKMP/IKE SA') how long the keying channel of a connection ('ISAKMP/IKE SA')
should last before being renegotiated. should last before being renegotiated.
.TP .TP
.B installpolicy
decides whether IPsec policies are installed in the kernel by the IKEv2
charon daemon for a given connection. Allows peaceful co-existence e.g. with
the Mobile IPv6 daemon mip6d who wants to control the kernel policies.
Acceptable values are
.B yes
(the default) and
.BR no .
.TP
.B keyexchange .B keyexchange
method of key exchange; method of key exchange;
which protocol should be used to initialize the connection. Connections marked with which protocol should be used to initialize the connection. Connections marked with
@@ -782,17 +791,20 @@ are
signifying a host-to-host, host-to-subnet, or subnet-to-subnet tunnel; signifying a host-to-host, host-to-subnet, or subnet-to-subnet tunnel;
.BR transport , .BR transport ,
signifying host-to-host transport mode; signifying host-to-host transport mode;
.BR transport_proxy ,
signifying the special Mobile IPv6 transport proxy mode;
.BR passthrough , .BR passthrough ,
signifying that no IPsec processing should be done at all; signifying that no IPsec processing should be done at all;
.BR drop , .BR drop ,
signifying that packets should be discarded; and signifying that packets should be discarded; and
.BR reject , .BR reject ,
signifying that packets should be discarded and a diagnostic ICMP returned. signifying that packets should be discarded and a diagnostic ICMP returned.
Charon currently supports only Charon currently supports
.BR tunnel .BR tunnel ,
.BR transport ,
and and
.BR transport .BR tunnel_proxy
connection types. connection types, only .
.TP .TP
.B xauth .B xauth
specifies the role in the XAUTH protocol if activated by specifies the role in the XAUTH protocol if activated by