sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-04 00:00:14 -04:00
Code Issues Projects Releases Wiki Activity

Updated ipsec.conf.5 with new ESN options

Browse Source
This commit is contained in:
Martin Willi 2011-04-18 16:11:40 +02:00
parent d3d21c29db
commit 378219546c
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
man/ipsec.conf.5.in
View File

@ -409,12 +409,20 @@ comma-separated list of ESP encryption/authentication algorithms to be used
for the connection, e.g.
.BR aes128-sha256 .
The notation is
.BR encryption-integrity-[dh-group] .
.BR encryption-integrity[-dhgroup][-esnmodes] .
.br
If
.B dh-group
is specified, CHILD_SA setup and rekeying include a separate diffe hellman
exchange (IKEv2 only).
exchange (IKEv2 only). Valid
.B esnmodes
(IKEv2 only) are
.B esn
and
.B noesn.
Specifying both negotiates Extended Sequence number support with the peer,
the defaut is
.B noesn.
.TP
.BR forceencaps " = yes | " no
force UDP encapsulation for ESP packets even if no NAT situation is detected.