From: Martin Willi <martin@revosec.ch>
Date: Mon, 27 Aug 2012 14:58:10 +0000 (+0200)
Subject: Updated ipsec.conf.5 with multiple left/rightsourceip support
X-Git-Tag: 5.0.1~153^2~2
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=26bc69580620084dfd6b20555a87b92aca30bf2e;p=thirdparty%2Fstrongswan.git

Updated ipsec.conf.5 with multiple left/rightsourceip support
---

diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index b3210baa47..8ad874f3b3 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -700,19 +700,19 @@ and
 the latter meaning that the peer must send a certificate request payload in
 order to get a certificate in return.
 .TP
-.BR leftsourceip " = %config | %cfg | %modeconfig | %modecfg | <ip address>"
-The internal source IP to use in a tunnel, also known as virtual IP. If the
-value is one of the synonyms
+.BR leftsourceip " = %config4 | %config6 | <ip address>"
+Comma separated list of internal source IPs to use in a tunnel, also known as
+virtual IP. If the value is one of the synonyms
 .BR %config ,
 .BR %cfg ,
 .BR %modeconfig ,
 or
 .BR %modecfg ,
-an address is requested from the peer.
+an address (from the tunnel address family) is requested from the peer.
 .TP
 .BR rightsourceip " = %config | <network>/<netmask> | %poolname"
-The internal source IP to use in a tunnel for the remote peer. If the
-value is
+Comma separated list of internal source IPs to use in a tunnel for the remote
+peer. If the value is
 .B %config
 on the responder side, the initiator must propose an address which is then
 echoed back. Also supported are address pools expressed as