From: Tobias Brunner Date: Fri, 6 Jun 2025 12:19:09 +0000 (+0200) Subject: swanctl: Document that IP-TFS mode is subject to mode negotiation X-Git-Tag: android-2.5.6~2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e58ef258b506a16305b2aa48b0b4462dc9a597c9;p=thirdparty%2Fstrongswan.git swanctl: Document that IP-TFS mode is subject to mode negotiation --- diff --git a/src/swanctl/swanctl.opt b/src/swanctl/swanctl.opt index b13ef9b60d..7901b4ed28 100644 --- a/src/swanctl/swanctl.opt +++ b/src/swanctl/swanctl.opt @@ -926,12 +926,12 @@ connections..children..mode = tunnel IPsec Mode to establish CHILD_SA with. _tunnel_ negotiates the CHILD_SA in IPsec Tunnel Mode, whereas _transport_ uses IPsec Transport Mode. _transport_proxy_ signifying the special Mobile IPv6 Transport Proxy Mode. - _iptfs_ is IP-TFS tunnel mode with aggregation and fragmentation, + _iptfs_ is IP-TFS tunnel mode with aggregation and fragmentation. _beet_ is the Bound End to End Tunnel mixture mode, working with fixed inner addresses without the need to include them in each packet. - Both _transport_ and _beet_ modes are subject to mode negotiation; _tunnel_ - mode is negotiated if the preferred mode is not available. + The _transport_, _iptfs_ and _beet_ modes are subject to mode negotiation; + _tunnel_ mode is negotiated if the preferred mode is not available. _pass_ and _drop_ are used to install shunt policies which explicitly bypass the defined traffic from IPsec processing or drop it, respectively.