From fdc37f7cf395a3b9752dfbc164c5ed11c9be702e Mon Sep 17 00:00:00 2001
From: Marcin Siodelski <marcin@isc.org>
Date: Tue, 28 Nov 2017 15:20:30 +0100
Subject: [PATCH] [5407] Updated legal logging configuration for subnets.

---
 doc/guide/dhcp4-srv.xml |  2 +-
 doc/guide/dhcp6-srv.xml |  2 +-
 doc/guide/hooks.xml     | 53 +++++++++++++++++++++++++++++++++++++++++
 3 files changed, 55 insertions(+), 2 deletions(-)

diff --git a/doc/guide/dhcp4-srv.xml b/doc/guide/dhcp4-srv.xml
index b0070184be..572ed8f83f 100644
--- a/doc/guide/dhcp4-srv.xml
+++ b/doc/guide/dhcp4-srv.xml
@@ -4617,7 +4617,7 @@ autogenerated IDs are not stable across configuration changes.</para>
       </itemizedlist>
     </section>
 
-      <section>
+      <section id="dhcp4-user-contexts">
         <title>User contexts in IPv4</title>
         <para>
           Kea allows loading hook libraries that sometimes could benefit from
diff --git a/doc/guide/dhcp6-srv.xml b/doc/guide/dhcp6-srv.xml
index 06d5717aed..158c06bfdd 100644
--- a/doc/guide/dhcp6-srv.xml
+++ b/doc/guide/dhcp6-srv.xml
@@ -4578,7 +4578,7 @@ autogenerated IDs are not stable across configuration changes.
 
     </section>
 
-      <section>
+      <section id="dhcp6-user-contexts">
         <title>User contexts in IPv6</title>
         <para>
           Kea allows loading hook libraries that sometimes could benefit from
diff --git a/doc/guide/hooks.xml b/doc/guide/hooks.xml
index 3be72d337b..a288ec57c1 100644
--- a/doc/guide/hooks.xml
+++ b/doc/guide/hooks.xml
@@ -685,6 +685,59 @@ Administrator deleted a lease for a device identified by: duid of 1a:1b:1c:1d:1e
             </para></listitem>
           </itemizedlist>
           </para>
+
+          <para>
+            If it is desired to restrict forensic logging to certain subnets, the
+            "legal-logging" boolean parameter can be specified within a user context of
+            these subnets. For example:
+<screen>
+"Dhcpv4" {
+    "subnet4": [
+        {
+            "subnet": "192.0.2.0/24",
+            "pools": [
+                {
+                     "pool": "192.0.2.1 - 192.0.2.200"
+                }
+            ],
+            <userinput>"user-context": {
+                "legal-logging": false
+            }</userinput>
+        }
+    ]
+}
+</screen>
+              disables legal logging for the subnet "192.0.2.0/24". If this parameter
+              is not specified, it defaults to 'true', which enables legal logging for
+              the subnet.
+          </para>
+
+          <para>
+            The following example demonstrates how to selectively disable legal logging
+            for an IPv6 subnet.
+<screen>
+"Dhcpv6": {
+    "subnet6": [
+        {
+            "subnet": "2001:db8:1::/64",
+            "pools": [
+                 {
+                     "pool": "2001:db8:1::1-2001:db8:1::ffff"
+                 }
+            ],
+            <userinput>"user-context": {
+                "legal-logging": false
+            }</userinput>
+        }
+    ]
+}
+</screen>
+          </para>
+
+          <para>
+            See <xref linkend="dhcp4-user-contexts"/> and <xref linkend="dhcp6-user-contexts"/>
+            to learn more about user contexts in Kea configuration.
+          </para>
         </section>
       </section>
 
-- 
2.47.2