From 166ed97cbbe76671372195d7365007b55e98d2e4 Mon Sep 17 00:00:00 2001 From: "Angelos D. Keromytis" Date: Tue, 19 Sep 2000 08:50:57 +0000 Subject: Add some explanatory text about the group operation. --- sbin/ipsecadm/ipsecadm.8 | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/sbin/ipsecadm/ipsecadm.8 b/sbin/ipsecadm/ipsecadm.8 index 482045d811f..129ec833152 100644 --- a/sbin/ipsecadm/ipsecadm.8 +++ b/sbin/ipsecadm/ipsecadm.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ipsecadm.8,v 1.28 2000/09/19 08:38:40 angelos Exp $ +.\" $OpenBSD: ipsecadm.8,v 1.29 2000/09/19 08:50:56 angelos Exp $ .\" .\" Copyright 1997 Niels Provos .\" All rights reserved. @@ -128,7 +128,13 @@ Allowed modifiers are: and .Fl keyfile . .It group -Group two SAs together. +Group two SAs together, such that whenever the first one is applied, the +second one will be applied as well (SA bundle). +Arbitrarily long SA bundles can thus be created. +Note that the last SA in the bundle is the one that is applied last. +Thus, if an ESP and an AH SA are bundled together (in that order), then +the resulting packet will have an AH header, followed by an ESP header, +followed by the encrypted payload. Allowed modifiers are: .Fl dst , .Fl spi , -- cgit v1.2.3