From d5f29da3d23fa97a3977db176a01f478803fbbea Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 13 Jul 2010 09:15:53 +0200 Subject: [PATCH] added mark, mark_in, and mark_out to the ipsec.conf.5 man page --- src/starter/ipsec.conf.5.in | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/src/starter/ipsec.conf.5.in b/src/starter/ipsec.conf.5.in index 1bb5ab4fb..3d2940a66 100644 --- a/src/starter/ipsec.conf.5.in +++ b/src/starter/ipsec.conf.5.in @@ -821,6 +821,25 @@ begin; acceptable values as for .BR 9m ). Relevant only locally, other end need not agree on it. .TP +.B mark +sets an XFRM mark of the form [/] in the inbound and outbound +IPsec SAs and policies (IKEv2 only). If the mask is missing then a default +mask of +.B 0xffffffff +is assumed. +.TP +.B mark_in +sets an XFRM mark of the form [/] in the inbound IPsec SA and policy +(IKEv2 only). If the mask is missing then a default mask of +.B 0xffffffff +is assumed. +.TP +.B mark_out +sets an XFRM mark of the form [/] in the outbound IPsec SA and policy +(IKEv2 only). If the mask is missing then a default mask of +.B 0xffffffff +is assumed. +.TP .B mobike enables the IKEv2 MOBIKE protocol defined by RFC 4555. Accepted values are .B yes