diff options
| author | Markus Friedl <markus@cvs.openbsd.org> | 2006-03-31 14:02:09 +0000 |
|---|---|---|
| committer | Markus Friedl <markus@cvs.openbsd.org> | 2006-03-31 14:02:09 +0000 |
| commit | d441e66f862a8a56c7ee1d20fdbf083499797d30 (patch) | |
| tree | 75f10afd7891a545622c816dcf3bfc840e275c45 /sbin/ipsecctl/ipsec.conf.5 | |
| parent | 4193800499a773cb21ecccea32ccd539e6d0bf43 (diff) | |
allow specification of encapsulated protocol for ike; ok hshoexer
Diffstat (limited to 'sbin/ipsecctl/ipsec.conf.5')
| -rw-r--r-- | sbin/ipsecctl/ipsec.conf.5 | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/sbin/ipsecctl/ipsec.conf.5 b/sbin/ipsecctl/ipsec.conf.5 index 7ab9e38ca64..29f61671b9a 100644 --- a/sbin/ipsecctl/ipsec.conf.5 +++ b/sbin/ipsecctl/ipsec.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ipsec.conf.5,v 1.36 2006/03/31 13:13:51 markus Exp $ +.\" $OpenBSD: ipsec.conf.5,v 1.37 2006/03/31 14:02:08 markus Exp $ .\" .\" Copyright (c) 2004 Mathieu Sauve-Frankel All rights reserved. .\" @@ -353,6 +353,19 @@ warriors or dialup hosts. If omitted, .Ar active mode will be used. +.It Ar proto Aq Ar protocol +The optional +.Ar proto +parameter restricts the flow to a specific IP protocol. +Common protocols are +.Xr icmp 4 , +.Xr tcp 4 , +and +.Xr udp 4 . +For a list of all the protocol name to number mappings used by +.Xr ipsecctl 8 , +see the file +.Em /etc/protocols . .It Xo .Ar from .Aq Ar src @@ -576,6 +589,9 @@ tcpmd5 from 192.168.3.14 to 192.168.3.27 spi 0x1000:0x1001 \e ike esp from 10.1.1.0/24 to 10.1.2.0/24 peer 192.168.3.2 ike esp from 192.168.3.1 to 192.168.3.2 +# Protect remote bridges (IP over ethernet) +ike esp proto etherip from 192.168.100.1 to 192.168.200.1 + # Use bypass flow to exclude local subnets from larger VPNs flow in from 192.168.62.0/24 to 192.168.62.0/24 type bypass ike dynamic esp from 192.168.62.0/24 to 192.168.48.0/20 peer 192.168.3.12 |