From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 18 Nov 2015 13:51:13 +0000 (+0100)
Subject: man: Update description of the actions performed for different dpdaction values
X-Git-Tag: 5.3.5~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=45c5b992e04a6b25c29c4f5fbe0d4934876d8a07;p=thirdparty%2Fstrongswan.git

man: Update description of the actions performed for different dpdaction values

For instance, charon does not unroute `auto=route` connections with
`dpdaction=clear`.
---

diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index 6ddb05728a..61804c8b3a 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -349,13 +349,14 @@ liveliness of the IPsec peer. The values
 .BR hold ,
 and
 .B restart
-all activate DPD. If no activity is detected, all connections with a dead peer
-are stopped and unrouted
-.RB ( clear ),
-put in the hold state
-.RB ( hold )
-or restarted
-.RB ( restart ).
+all activate DPD and determine the action to perform on a timeout. With
+.B clear
+the connection is closed with no further actions taken.
+.B hold
+installs a trap policy, which will catch matching traffic and tries to
+re-negotiate the connection on demand.
+.B restart
+will immediately trigger an attempt to re-negotiation the connection.
 The default is
 .B none
 which disables the active sending of DPD messages.