vici: Document attributes for additional KE methods in list-sa event

This commit is contained in:
Tobias Brunner
2026-02-20 12:44:55 +01:00
parent 1afd5a7d23
commit 116f36ba57
+11 -5
View File
@@ -776,12 +776,15 @@ command.
nat-any = <yes, if any endpoint is behind a NAT (also if faked)>
if-id-in = <hex encoded default inbound XFRM interface ID>
if-id-out = <hex encoded default outbound XFRM interface ID>
encr-alg = <IKE encryption algorithm string>
encr-alg = <IKE encryption algorithm name>
encr-keysize = <key size for encr-alg, if applicable>
integ-alg = <IKE integrity algorithm string>
integ-alg = <IKE integrity algorithm name>
integ-keysize = <key size for encr-alg, if applicable>
prf-alg = <IKE pseudo random function string>
dh-group = <IKE Diffie-Hellman group string>
prf-alg = <IKE pseudo random function name>
dh-group = <IKE key exchange method name>
ake1 = <first additional IKE key exchange method name, if any>
...
ake7 = <seventh additional IKE key exchange method name, if any>
established = <seconds the IKE_SA has been established>
rekey-time = <seconds before IKE_SA gets rekeyed>
reauth-time = <seconds before IKE_SA gets re-authenticated>
@@ -827,7 +830,10 @@ command.
integ-alg = <ESP or AH integrity algorithm name, if any>
integ-keysize = <ESP or AH integrity key size, if applicable>
prf-alg = <CHILD_SA pseudo random function name>
dh-group = <CHILD_SA PFS rekeying DH group name, if any>
dh-group = <CHILD_SA key exchange method name, if any>
ake1 = <first additional CHILD_SA key exchange method name, if any>
...
ake7 = <seventh additional CHILD_SA key exchange method name, if any>
esn = <1 if using extended sequence numbers>
bytes-in = <number of input bytes processed>
packets-in = <number of input packets processed>