[src/trunk]: src/share/man/man7 Explain ipsec.enabled better.

[christos <christos%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/c389cffe5036
branches:  trunk
changeset: 329582:c389cffe5036
user:      christos <christos%NetBSD.org@localhost>
date:      Fri May 30 01:43:20 2014 +0000

description:
Explain ipsec.enabled better.

diffstat:

 share/man/man7/sysctl.7 |  12 ++++++++++--
 1 files changed, 10 insertions(+), 2 deletions(-)

diffs (26 lines):

diff -r 3dafd94a9ab6 -r c389cffe5036 share/man/man7/sysctl.7
--- a/share/man/man7/sysctl.7   Fri May 30 01:39:03 2014 +0000
+++ b/share/man/man7/sysctl.7   Fri May 30 01:43:20 2014 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: sysctl.7,v 1.80 2014/05/30 01:34:32 christos Exp $
+.\"    $NetBSD: sysctl.7,v 1.81 2014/05/30 01:43:20 christos Exp $
 .\"
 .\" Copyright (c) 1993
 .\"    The Regents of the University of California.  All rights reserved.
@@ -1909,7 +1909,15 @@
 The value is a bitmap, as defined in
 .In netkey/key_debug.h .
 .It Li enabled
-Turn on and off IPsec processing.
+Control processing of IPsec control messages.
+.Bl -tag -width indent
+.It 0
+Never allow IPsec processing
+.It 1
+Allow IPsec processing when SPD policies are present.
+.It 2
+Force IPsec processing even when SPD policies are not present.
+.El
 .It Li used
 Based on if IPsec is enabled, and SPD rule existance, show if
 IPsec is being used.