From b72ff4a149b233c39c52c26263e5d94cb62f8ed7 Mon Sep 17 00:00:00 2001 From: "Andrey V. Elsukov" Date: Tue, 4 Apr 2017 23:28:22 +0000 Subject: [PATCH] In the example section show that TCP-MD5 connection needs SA for both directions. Submitted by: Mike Tancsa MFC after: 1 week --- sbin/setkey/setkey.8 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sbin/setkey/setkey.8 b/sbin/setkey/setkey.8 index afaa753ecbe..1cfc51860a7 100644 --- a/sbin/setkey/setkey.8 +++ b/sbin/setkey/setkey.8 @@ -29,7 +29,7 @@ .\" .\" $FreeBSD$ .\" -.Dd March 7, 2017 +.Dd April 5, 2017 .Dt SETKEY 8 .Os .\" @@ -696,6 +696,7 @@ spdadd 10.0.11.41/32[21] 10.0.11.33/32[any] any Use TCP MD5 between two numerically specified hosts: .Bd -literal -offset indent add 10.1.10.34 10.1.10.36 tcp 0x1000 -A tcp-md5 "TCP-MD5 BGP secret" ; +add 10.1.10.36 10.1.10.34 tcp 0x1000 -A tcp-md5 "TCP-MD5 BGP secret" ; .Ed .\" .Sh SEE ALSO