From e58ef258b506a16305b2aa48b0b4462dc9a597c9 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Fri, 6 Jun 2025 14:19:09 +0200 Subject: [PATCH] swanctl: Document that IP-TFS mode is subject to mode negotiation --- src/swanctl/swanctl.opt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/swanctl/swanctl.opt b/src/swanctl/swanctl.opt index b13ef9b60d..7901b4ed28 100644 --- a/src/swanctl/swanctl.opt +++ b/src/swanctl/swanctl.opt @@ -926,12 +926,12 @@ connections..children..mode = tunnel IPsec Mode to establish CHILD_SA with. _tunnel_ negotiates the CHILD_SA in IPsec Tunnel Mode, whereas _transport_ uses IPsec Transport Mode. _transport_proxy_ signifying the special Mobile IPv6 Transport Proxy Mode. - _iptfs_ is IP-TFS tunnel mode with aggregation and fragmentation, + _iptfs_ is IP-TFS tunnel mode with aggregation and fragmentation. _beet_ is the Bound End to End Tunnel mixture mode, working with fixed inner addresses without the need to include them in each packet. - Both _transport_ and _beet_ modes are subject to mode negotiation; _tunnel_ - mode is negotiated if the preferred mode is not available. + The _transport_, _iptfs_ and _beet_ modes are subject to mode negotiation; + _tunnel_ mode is negotiated if the preferred mode is not available. _pass_ and _drop_ are used to install shunt policies which explicitly bypass the defined traffic from IPsec processing or drop it, respectively.