Firewall: correct ipv4/6 ipsec match parameter

vyos · Nov 3, 2024 · 2707e9a · 2707e9a
1 parent 9fd263a
commit 2707e9a
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/docs/configuration/firewall/ipv4.rst b/docs/configuration/firewall/ipv4.rst
@@ -771,13 +771,13 @@ geoip) to keep database and rules updated.
    invert the criteria to match is also supported. For example ``!IFACE_GROUP``
 
 .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999>
-   ipsec [match-ipsec | match-none]
+   ipsec [match-ipsec-in | match-ipsec-out | match-none-in | match-none-out]
 .. cfgcmd:: set firewall ipv4 input filter rule <1-999999>
-   ipsec [match-ipsec | match-none]
+   ipsec [match-ipsec-in | match-none-in]
 .. cfgcmd:: set firewall ipv4 output filter rule <1-999999>
-   ipsec [match-ipsec | match-none]
+   ipsec [match-ipsec-out | match-none-out]
 .. cfgcmd:: set firewall ipv4 name <name> rule <1-999999>
-   ipsec [match-ipsec | match-none]
+   ipsec [match-ipsec-in | match-ipsec-out | match-none-in | match-none-out]
 
    Match based on ipsec.
 

diff --git a/docs/configuration/firewall/ipv6.rst b/docs/configuration/firewall/ipv6.rst
@@ -762,13 +762,13 @@ geoip) to keep database and rules updated.
    invert the criteria to match is also supported. For example ``!IFACE_GROUP``
 
 .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999>
-   ipsec [match-ipsec | match-none]
+   ipsec [match-ipsec-in | match-ipsec-out | match-none-in | match-none-out]
 .. cfgcmd:: set firewall ipv6 input filter rule <1-999999>
-   ipsec [match-ipsec | match-none]
+   ipsec [match-ipsec-in | match-none-in]
 .. cfgcmd:: set firewall ipv6 output filter rule <1-999999>
-   ipsec [match-ipsec | match-none]
+   ipsec [match-ipsec-out | match-none-out]
 .. cfgcmd:: set firewall ipv6 name <name> rule <1-999999>
-   ipsec [match-ipsec | match-none]
+   ipsec [match-ipsec-in | match-ipsec-out | match-none-in | match-none-out]
 
    Match based on ipsec.