Module Name: src
Committed By: christos
Date: Fri May 30 01:34:32 UTC 2014
Modified Files:
src/share/man/man7: sysctl.7
Log Message:
mention new ipsec sysctls.
To generate a diff of this commit:
cvs rdiff -u -r1.79 -r1.80 src/share/man/man7/sysctl.7
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/share/man/man7/sysctl.7
diff -u src/share/man/man7/sysctl.7:1.79 src/share/man/man7/sysctl.7:1.80
--- src/share/man/man7/sysctl.7:1.79 Sun Dec 15 19:59:37 2013
+++ src/share/man/man7/sysctl.7 Thu May 29 21:34:32 2014
@@ -1,4 +1,4 @@
-.\" $NetBSD: sysctl.7,v 1.79 2013/12/16 00:59:37 wiz Exp $
+.\" $NetBSD: sysctl.7,v 1.80 2014/05/30 01:34:32 christos Exp $
.\"
.\" Copyright (c) 1993
.\" The Regents of the University of California. All rights reserved.
@@ -29,7 +29,7 @@
.\"
.\" @(#)sysctl.3 8.4 (Berkeley) 5/9/95
.\"
-.Dd December 14, 2013
+.Dd May 29, 2014
.Dt SYSCTL 7
.Os
.Sh NAME
@@ -1889,6 +1889,8 @@ The currently defined variable and names
.Bl -column "blockacq_lifetime" "integer" "Changeable" -offset indent
.It Sy Variable name Type Changeable
.It debug integer yes
+.It enabled integer yes
+.It used integer no
.It spi_try integer yes
.It spi_min_value integer yes
.It spi_max_value integer yes
@@ -1906,6 +1908,12 @@ The variables are as follows:
Turn on debugging message from within the kernel.
The value is a bitmap, as defined in
.In netkey/key_debug.h .
+.It Li enabled
+Turn on and off IPsec processing.
+.It Li used
+Based on if IPsec is enabled, and SPD rule existance, show if
+IPsec is being used.
+Note that currenly once IPsec is being used, it cannot be disabled.
.It Li spi_try
The number of times the kernel will try to obtain an unique SPI
when it generates it from random number generator.