Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity

diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index ea935b6..f4d7ed1 100644 (file)
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -756,8 +756,9 @@ signifying that the left end of the connection goes to the left participant
 only. Configured subnets of the peers may differ, the protocol narrows it to
 the greatest common subnet. In IKEv1, this may lead to problems with other
 implementations, make sure to configure identical subnets in such
 only. Configured subnets of the peers may differ, the protocol narrows it to
 the greatest common subnet. In IKEv1, this may lead to problems with other
 implementations, make sure to configure identical subnets in such

-configurations. IKEv2 supports multiple subnets separated by commas, IKEv1 only
-interprets the first subnet of such a definition.
+configurations. IKEv2 supports multiple subnets separated by commas. IKEv1 only
+interprets the first subnet of such a definition, unless the Cisco Unity
+extension plugin is enabled.

 .TP
 .BR leftupdown " = <path>"
 what ``updown'' script to run to adjust routing and/or firewalling
 .TP
 .BR leftupdown " = <path>"
 what ``updown'' script to run to adjust routing and/or firewalling