> Great. On that note, I've updated the document to describe the new > FLAGS field. I took the liberty of also defining an "IPsec policy > present" flag as it is generally useful to know whether or not IPsec > policy applies to a given tunnel link. See section 4.1.4 of the updated > doc: > > http://www.opensolaris.org/os/project/clearview/iptun/iptun-design.pdf > > Here are the example from that section:
A nit, but it might be good to move the FLAGS field to be after TYPE so that long IPv6 addresses in DESTINATION can just flow past the 80-column boundary. > # dladm show-iptun > LINK TYPE SOURCE DESTINATION FLAGS > vpn0 ipv4 63.1.2.3 192.4.5.6 s- > ipv6router0 6to4 63.4.5.6 -- -- > ipv6site2 ipv6 2001:db8:feed::1234 2001:db8:beef::4321 -- > ip.tun0 ipv4 10.0.0.1 10.0.0.2 -i > # dladm show-iptun vpn0 > LINK TYPE SOURCE DESTINATION FLAGS > vpn0 ipv4 63.1.2.3 192.4.5.6 s- -- meem
