Improve documentation of protected domains.

Required by and ok otto@, ok jmc@

1 files changed, 9 insertions, 3 deletions

diff --git a/sbin/ifconfig/ifconfig.8 b/sbin/ifconfig/ifconfig.8
index c98492d98e3..9e51bcec01b 100644
--- a/sbin/ifconfig/ifconfig.8
+++ b/sbin/ifconfig/ifconfig.8
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: ifconfig.8,v 1.296 2018/02/08 17:52:24 jmc Exp $
+.\"	$OpenBSD: ifconfig.8,v 1.297 2018/02/09 20:13:28 mpi Exp $
 .\"	$NetBSD: ifconfig.8,v 1.11 1996/01/04 21:27:29 pk Exp $
 .\"     $FreeBSD: ifconfig.8,v 1.16 1998/02/01 07:03:29 steve Exp $
 .\"
@@ -31,7 +31,7 @@
 .\"
 .\"     @(#)ifconfig.8	8.4 (Berkeley) 6/1/94
 .\"
-.Dd $Mdocdate: February 8 2018 $
+.Dd $Mdocdate: February 9 2018 $
 .Dt IFCONFIG 8
 .Os
 .Sh NAME
@@ -667,9 +667,15 @@ Put
 .Ar interface
 in protected domains.
 .Ar ids
-is a comma delimited list of domain IDs to put the interface in.
+is a comma delimited list of domain IDs, between 1 and 31, to put the
+interface in.
 Interfaces that are part of a protected domain cannot forward traffic to any
 other interface in that domain.
+Interfaces do not belong to any protected domain by default.
+.It Cm -protected Ar interface
+Remove
+.Ar interface
+from all protected domains.
 .It Cm proto Ar value
 Force the spanning tree protocol version.
 The available values are