Lines Matching full:policy

63 as well as Security Policy Database (SPD) entries in the kernel.
192 .Ar src_range Ar dst_range Ar upperspec Ar policy
306 Specify the identifier of the policy entry in SPD.
308 .Ar policy .
455 The following example shows a policy where IPSec is not required for
470 .It Ar policy
471 .Ar policy
482 .Bl -tag -compact -width "policy level"
486 of a policy must be specified as one of:
490 .It Ar policy level
491 The direction is followed by one of the following policy levels:
500 policy level means that packets matching the supplied indices will
505 policy level means that IPsec operations will not take place on
510 policy level means that IPsec operation will take place onto
583 that matches the policy.
589 but, in addition, it allows the policy to bind with the unique out-bound SA.
591 For example, if you specify the policy level
594 will configure the SA for the policy.
595 If you configure the SA by manual keying for that policy,
596 you can put the decimal number as the policy identifier after
602 In order to bind this policy to the SA,
735 Add a security policy between two networks that uses ESP in tunnel mode: