diff options
| author | Jason Wright <jason@cvs.openbsd.org> | 2000-10-26 18:32:30 +0000 |
|---|---|---|
| committer | Jason Wright <jason@cvs.openbsd.org> | 2000-10-26 18:32:30 +0000 |
| commit | dcdc4be9ab19b7220be44fac1a51924c1b495945 (patch) | |
| tree | bf5f14c752590df67006671cb2b5a6c751a0f022 /sbin | |
| parent | 5cfde6ecdf5e01a1fe979955837b971f820467cb (diff) | |
update and fix ipsecadm usage example
Diffstat (limited to 'sbin')
| -rw-r--r-- | sbin/brconfig/brconfig.8 | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/sbin/brconfig/brconfig.8 b/sbin/brconfig/brconfig.8 index 56f235f1da8..5f586bf6fa9 100644 --- a/sbin/brconfig/brconfig.8 +++ b/sbin/brconfig/brconfig.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: brconfig.8,v 1.15 2000/10/24 18:39:34 provos Exp $ +.\" $OpenBSD: brconfig.8,v 1.16 2000/10/26 18:32:29 jason Exp $ .\" .\" Copyright (c) 1999, 2000 Jason L. Wright (jason@thought.net) .\" All rights reserved. @@ -261,22 +261,22 @@ Create Security Associations (SAs) between the external IP address of each bridge: .Bd -literal # ipsecadm new esp -spi 4242 -dst 4.3.2.1 -src 1.2.3.4 \e\ - -enc 3des -auth md5 -keyfile keyfile -authkey authkeyfile + -enc 3des -auth md5 -keyfile keyfile -authkeyfile authkeyfile .Ed .Pp .Bd -literal # ipsecadm new esp -spi 4243 -dst 1.2.3.4 -src 4.3.2.1 \e\ - -enc 3des -auth md5 -keyfile keyfile -authkey authkeyfile + -enc 3des -auth md5 -keyfile keyfile -authkeyfile authkeyfile .Ed .Pp Setup ingress flows so that traffic is allowed between the two bridges for the above associations: .Bd -literal -(on bridge1) # ipsecadm flow -dst 1.2.3.4 -spi 4243 -ingress \e\ - -transport etherip \e\ +(on bridge1) # ipsecadm flow -dst 1.2.3.4 -in \e\ + -transport etherip -require \e\ -addr 4.3.2.1 255.255.255.255 1.2.3.4 255.255.255.255 -(on bridge2) # ipsecadm flow -dst 4.3.2.1 -spi 4242 -ingress \e\ - -transport etherip \e\ +(on bridge2) # ipsecadm flow -dst 4.3.2.1 -in \e\ + -transport etherip -require \e\ -addr 1.2.3.4 255.255.255.255 4.3.2.1 255.255.255.255 .Ed .Pp |