diff options
| author | Angelos D. Keromytis <angelos@cvs.openbsd.org> | 2000-09-19 08:50:57 +0000 |
|---|---|---|
| committer | Angelos D. Keromytis <angelos@cvs.openbsd.org> | 2000-09-19 08:50:57 +0000 |
| commit | 166ed97cbbe76671372195d7365007b55e98d2e4 (patch) | |
| tree | 076622c825c659c07f075714d0ffd0188bc847e4 /sbin/ipsecadm | |
| parent | f321eda5c92c49dbb6486d55305ca3a50962a3f8 (diff) | |
Add some explanatory text about the group operation.
Diffstat (limited to 'sbin/ipsecadm')
| -rw-r--r-- | sbin/ipsecadm/ipsecadm.8 | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/sbin/ipsecadm/ipsecadm.8 b/sbin/ipsecadm/ipsecadm.8 index 482045d811f..129ec833152 100644 --- a/sbin/ipsecadm/ipsecadm.8 +++ b/sbin/ipsecadm/ipsecadm.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ipsecadm.8,v 1.28 2000/09/19 08:38:40 angelos Exp $ +.\" $OpenBSD: ipsecadm.8,v 1.29 2000/09/19 08:50:56 angelos Exp $ .\" .\" Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de> .\" All rights reserved. @@ -128,7 +128,13 @@ Allowed modifiers are: and .Fl keyfile . .It group -Group two SAs together. +Group two SAs together, such that whenever the first one is applied, the +second one will be applied as well (SA bundle). +Arbitrarily long SA bundles can thus be created. +Note that the last SA in the bundle is the one that is applied last. +Thus, if an ESP and an AH SA are bundled together (in that order), then +the resulting packet will have an AH header, followed by an ESP header, +followed by the encrypted payload. Allowed modifiers are: .Fl dst , .Fl spi , |