Explain ipsec.enabled better.

This commit is contained in:
christos 2014-05-30 01:43:20 +00:00
parent 5d61e6c015
commit 2e958a7003
1 changed files with 10 additions and 2 deletions

View File

@ -1,4 +1,4 @@
.\" $NetBSD: sysctl.7,v 1.80 2014/05/30 01:34:32 christos Exp $
.\" $NetBSD: sysctl.7,v 1.81 2014/05/30 01:43:20 christos Exp $
.\"
.\" Copyright (c) 1993
.\" The Regents of the University of California. All rights reserved.
@ -1909,7 +1909,15 @@ Turn on debugging message from within the kernel.
The value is a bitmap, as defined in
.In netkey/key_debug.h .
.It Li enabled
Turn on and off IPsec processing.
Control processing of IPsec control messages.
.Bl -tag -width indent
.It 0
Never allow IPsec processing
.It 1
Allow IPsec processing when SPD policies are present.
.It 2
Force IPsec processing even when SPD policies are not present.
.El
.It Li used
Based on if IPsec is enabled, and SPD rule existance, show if
IPsec is being used.