From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 30 Jun 2014 12:49:21 +0000 (+0200)
Subject: man: Document replay_window ipsec.conf option
X-Git-Tag: 5.2.0~24
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8b123d2e4a48412a18dc2bb68f2437f4dd53f12a;p=thirdparty%2Fstrongswan.git

man: Document replay_window ipsec.conf option
---

diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index a0be75536e..0f8564a1e8 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -1049,6 +1049,15 @@ below.
 synonym for
 .BR margintime .
 .TP
+.BR replay_window " = " \-1 " | <number>"
+The IPsec replay window size for this connection. With the default of \-1
+the value configured with
+.I charon.replay_window
+in
+.BR strongswan.conf (5)
+is used. Larger values than 32 are supported using the Netlink backend only,
+a value of 0 disables IPsec replay protection.
+.TP
 .BR reqid " = <number>"
 sets the reqid for a given connection to a pre-configured fixed value.
 .TP