diff options
author | Aaron Campbell <aaron@cvs.openbsd.org> | 2000-03-18 22:56:07 +0000 |
---|---|---|
committer | Aaron Campbell <aaron@cvs.openbsd.org> | 2000-03-18 22:56:07 +0000 |
commit | 16b21db4d33ff08e914df52000c560f64ef0e39d (patch) | |
tree | a11f2d1036bb85a2c46891708f459ae9eedcd2af /sbin/startkey | |
parent | 404d4678be49dbab2ac44d8d6ae087f87036f9d6 (diff) |
Remove hard sentence breaks, and some other cleanup along the way.
Diffstat (limited to 'sbin/startkey')
-rw-r--r-- | sbin/startkey/startkey.1 | 34 |
1 files changed, 22 insertions, 12 deletions
diff --git a/sbin/startkey/startkey.1 b/sbin/startkey/startkey.1 index 2253a9c05c4..39405261b3d 100644 --- a/sbin/startkey/startkey.1 +++ b/sbin/startkey/startkey.1 @@ -1,4 +1,5 @@ -.\" $OpenBSD: startkey.1,v 1.6 1999/09/23 04:12:03 alex Exp $ +.\" $OpenBSD: startkey.1,v 1.7 2000/03/18 22:56:05 aaron Exp $ +.\" .\" Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de> .\" All rights reserved. .\" @@ -44,14 +45,16 @@ The .Nm utility attempts to contact the .Xr photurisd 8 -daemon and initialize a key exchange. The flags are: +daemon and initialize a key exchange. +The flags are: .Bl -tag -width Ds .It Fl d Ar directory The .Fl d option specifies the directory in which .Xr photurisd -looks for its startup files. The default is +looks for its startup files. +The default is .Pa /etc/photuris/ . .El .Pp @@ -75,7 +78,8 @@ The port number of the destination .Xr photuris daemon. .It Ic options -The options to be used in the exchange. Possible values are +The options to be used in the exchange. +Possible values are .Dq enc and .Dq auth . @@ -84,10 +88,12 @@ If both .Ic tsrc and .Ic tdst -(see below) are specified, a tunnel (IP over IP) is setup. The +(see below) are specified, a tunnel (IP over IP) is setup. +The .Ic tsrc option is a network address with netmask used for matching the source -IP address of a packet. When both the source and the destination +IP address of a packet. +When both the source and the destination addresses match their respective options the packet will be routed into the tunnel. .It Ic tdst @@ -95,18 +101,22 @@ If both .Ic tsrc (see above) and .Ic tdst -are specified, a tunnel (IP over IP) is setup. The +are specified, a tunnel (IP over IP) is setup. +The .Ic tdst option is a network address with netmask used for matching the destination -IP address of a packet. When both the source and the destination +IP address of a packet. +When both the source and the destination addresses match their respective options the packet will be routed into the tunnel. .It Ic exchange_lifetime -Determines the lifetime of the exchange. After an exchange expires +Determines the lifetime of the exchange. +After an exchange expires no new SPIs are created, which means the transport or tunnel is torn down as soon as the current SPI times out (see .Ic spi_lifetime -below). The default value is gotten from the +below). +The default value is gotten from the .Ic exchange_lifetime parameter given in .Pa photuris.conf . @@ -114,8 +124,8 @@ If it is not given there the default is 1800 seconds. .It Ic spi_lifetime Determines the lifetime of each created SPI in the exchange. .It Ic user -The user name for whom the keying shall be done. Preconfigured -secrets are taken from the users secret file. +The user name for whom the keying shall be done. +Preconfigured secrets are taken from the users secret file. .El .Sh EXAMPLE startkey dst=169.200.12.23 options=auth |