document that tunnel and transport mode can be specified for SAs.

1 files changed, 19 insertions, 1 deletions

diff --git a/sbin/ipsecctl/ipsec.conf.5 b/sbin/ipsecctl/ipsec.conf.5
index 63e1ed45496..f628daf7429 100644
--- a/sbin/ipsecctl/ipsec.conf.5
+++ b/sbin/ipsecctl/ipsec.conf.5
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: ipsec.conf.5,v 1.38 2006/03/31 16:30:47 jmc Exp $
+.\"	$OpenBSD: ipsec.conf.5,v 1.39 2006/04/12 14:48:12 hshoexer Exp $
 .\"
 .\" Copyright (c) 2004 Mathieu Sauve-Frankel  All rights reserved.
 .\"
@@ -188,6 +188,24 @@ Parameters specify the peers, Security Parameter Index (SPI),
 cryptographic transforms, and key material to be used.
 .Bl -tag -width xxxx
 .It Xo
+.Aq Ar mode
+.Xc
+For
+.Ar esp ,
+.Ar ah
+and
+.Ar ipcomp
+the encapsulation mode to be used can be specified.
+Possible modes are
+.Ar tunnel
+and
+.Ar transport .
+When left out,
+.Ar tunnel
+is chosen.
+For details on modes see
+.Xr ipsec 4 .
+.It Xo
 .Ar from
 .Aq Ar src
 .Ar to