vici: Document attributes for additional KE methods in list-sa event
This commit is contained in:
@@ -776,12 +776,15 @@ command.
|
||||
nat-any = <yes, if any endpoint is behind a NAT (also if faked)>
|
||||
if-id-in = <hex encoded default inbound XFRM interface ID>
|
||||
if-id-out = <hex encoded default outbound XFRM interface ID>
|
||||
encr-alg = <IKE encryption algorithm string>
|
||||
encr-alg = <IKE encryption algorithm name>
|
||||
encr-keysize = <key size for encr-alg, if applicable>
|
||||
integ-alg = <IKE integrity algorithm string>
|
||||
integ-alg = <IKE integrity algorithm name>
|
||||
integ-keysize = <key size for encr-alg, if applicable>
|
||||
prf-alg = <IKE pseudo random function string>
|
||||
dh-group = <IKE Diffie-Hellman group string>
|
||||
prf-alg = <IKE pseudo random function name>
|
||||
dh-group = <IKE key exchange method name>
|
||||
ake1 = <first additional IKE key exchange method name, if any>
|
||||
...
|
||||
ake7 = <seventh additional IKE key exchange method name, if any>
|
||||
established = <seconds the IKE_SA has been established>
|
||||
rekey-time = <seconds before IKE_SA gets rekeyed>
|
||||
reauth-time = <seconds before IKE_SA gets re-authenticated>
|
||||
@@ -827,7 +830,10 @@ command.
|
||||
integ-alg = <ESP or AH integrity algorithm name, if any>
|
||||
integ-keysize = <ESP or AH integrity key size, if applicable>
|
||||
prf-alg = <CHILD_SA pseudo random function name>
|
||||
dh-group = <CHILD_SA PFS rekeying DH group name, if any>
|
||||
dh-group = <CHILD_SA key exchange method name, if any>
|
||||
ake1 = <first additional CHILD_SA key exchange method name, if any>
|
||||
...
|
||||
ake7 = <seventh additional CHILD_SA key exchange method name, if any>
|
||||
esn = <1 if using extended sequence numbers>
|
||||
bytes-in = <number of input bytes processed>
|
||||
packets-in = <number of input packets processed>
|
||||
|
||||
Reference in New Issue
Block a user