policy

---

ip/ipsec/policy

Type: Directory

Flag	Name	Description
T	template	template
B	backup	backup
X	disabled	disabled
D	dynamic	dynamic
I	invalid	invalid
A	active	active
*	default	default

Argument	Type	Description
peer	multi { array-id, peer: enum }	auto activates peer establishes connection, use with shunt policy
tunnel	bool
group	enum ()
src-address	alt { prefix6: ip6Prefix , prefix4: ipPrefix }
src-port	num
dst-address	alt { prefix6: ip6Prefix , prefix4: ipPrefix }
dst-port	num
protocol	enum (all) { all:255 }
action	enum (encrypt | discard | none) { encrypt:2, discard:0, none:1 }
level	enum (require | use | unique) { require:2, use:1, unique:3 }
ipsec-protocols	enum (ah | esp) { ah:1, esp:2 }	which ipsec protocol to use
sa-src-address	alt { ipv6: ip6Addr , ip: ipAddr }	endpoint address
sa-dst-address	alt { ipv6: ip6Addr , ip: ipAddr }	endpoint address
proposal	enum
template	bool

Read-only Argument	Type	Description
ph2-count	num
ph2-state	enum (spawning | starting | ready-to-send | getspi-sent | getspi-done | msg1-sent | ready-to-establish | commiting | adding-sa | established | expired | no-phase2) { spawning:0, starting:1, ready-to-send:2, getspi-sent:3, getspi-done:4, msg1-sent:5, ready-to-establish:6, commiting:7, adding-sa:8, established:9, expired:10, no-phase2:11 }