Documentation for eap-dynamic added

diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index ca77ee7dedfd9d489b3d17dc0de87ecd9849edde..837a2055abf90166ec31386730ff00dcc66ed4fb 100644 (file)
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -523,6 +523,7 @@ an optional EAP method can be appended. Currently defined methods are
 .BR eap-sim ,
 .BR eap-tls ,
 .BR eap-ttls ,
+.BR eap-dynamic ,
 and
 .BR eap-radius .
 Alternatively, IANA assigned EAP method numbers are accepted. Vendor specific

diff --git a/man/strongswan.conf.5.in b/man/strongswan.conf.5.in
index 4fba2344b5ac6bd9bb9aa2a0e40e69fc4c361cb3..8df6cf1fa6c143a449c0609eaa54d636be3bdf9d 100644 (file)
--- a/man/strongswan.conf.5.in
+++ b/man/strongswan.conf.5.in
@@ -302,6 +302,16 @@ enable loaded duplicheck plugin
 .TP
 .BR charon.plugins.eap-aka-3ggp2.seq_check
 
+.TP
+.BR charon.plugins.eap-dynamic.preferred
+The preferred EAP method(s) to be used.  If it is not given the first
+registered method will be used initially.  If a comma separated list is given
+the methods are tried in the given order before trying the rest of the
+registered methods.
+.TP
+.BR charon.plugins.eap-dynamic.prefer_user " [no]"
+If enabled the EAP methods proposed in an EAP-Nak message sent by the peer are
+preferred over the methods registered locally.
 .TP
 .BR charon.plugins.eap-gtc.backend " [pam]"
 XAuth backend to be used for credential verification