Usage: ./vpnc [--version] [--print-config] [--help] [--long-help] [options] [config files]

Legend:
  commandline option, argument type
  configfile variable, argument type
      description
    Default: default value for this option

  --gateway <ip/hostname>
  IPSec gateway <ip/hostname>
      IP/name of your IPSec gateway

  --id <ASCII string>
  IPSec ID <ASCII string>
      your group name

  (configfile only option) 
  IPSec secret <ASCII string>
      your group password (cleartext, no support for obfuscated strings)

  --username <ASCII string>
  Xauth username <ASCII string>
      your username

  (configfile only option) 
  Xauth password <ASCII string>
      your password (cleartext, no support for obfuscated strings)

  --udp 
  UDP Encapsulate
      Use Cisco-UDP encapsulation of IPSEC traffic

  --domain <ASCII string>
  Domain <ASCII string>
      (NT-) Domain name for authentication

  --xauth-inter 
  Xauth interactive
      enable interactive extended authentication (for challange response auth)

  --script <command>
  Script <command>
      command is executed using system() to configure the interface,
      routing and so on. Device name, IP, etc. are passed using enviroment
      variables, see README. This script is executed right after ISAKMP is
      done, but befor tunneling is enabled. It is called when vpnc
      terminates too
    Default: /etc/vpnc/vpnc-script

  --dh <dh1/dh2/dh5>
  IKE DH Group <dh1/dh2/dh5>
      name of the IKE DH Group
    Default: dh2

  --pfs <nopfs/dh1/dh2/dh5/server>
  Perfect Forward Secrecy <nopfs/dh1/dh2/dh5/server>
      Diffie-Hellman group to use for PFS
    Default: server

  --enable-1des 
  Enable Single DES
      enables weak single DES encryption

  --application-version <ASCII string>
  Application version <ASCII string>
      Application Version to report
    Default: Cisco Systems VPN Client 0.3.3:Linux

  --ifname <ASCII string>
  Interface name <ASCII string>
      visible name of the TUN interface

  --debug <0/1/2/3/99>
  Debug <0/1/2/3/99>
      Show verbose debug messages

  --no-detach 
  No Detach
      Don't detach from the console after login

  --pid-file <filename>
  Pidfile <filename>
      store the pid of background process in <filename>
    Default: /var/run/vpnc/pid

  --local-port <0-65535>
  Local Port <0-65535>
      local ISAKMP port number to use (0 == use random port)
    Default: 500

  --udp-port <0-65535>
  UDP Encapsulation Port <0-65535>
      local UDP port number to use (0 == use random port)
    Default: 10000

  --disable-natt 
  Disable NAT Traversal
      disable use of NAT-T

  --non-inter 
  Noninteractive
      Don't ask anything, exit on missing options

Report bugs to vpnc@unix-ag.uni-kl.de