<varlistentry>
<term><emphasis remap='B'>auto</emphasis></term>
  <listitem>
<para>what operation, if any, should be done automatically at IPsec startup;
currently-accepted values are
<emphasis remap='B'>add</emphasis>
(signifying an
<emphasis remap='B'>ipsec auto</emphasis> <option>--add</option>),
<emphasis remap='B'>ondemand</emphasis>
(signifying that plus an
<emphasis remap='B'>ipsec auto</emphasis> <option>--ondemand</option>),
<emphasis remap='B'>start</emphasis>
(signifying that plus an
<emphasis remap='B'>ipsec auto</emphasis> <option>--up</option>),
and
<emphasis remap='B'>ignore</emphasis>
(also the default) (signifying no automatic startup operation),
and
<emphasis remap='B'>keep</emphasis>
(signifying an add plus an attempt to keep the connection up once the remote peer brought it up).
See the
<emphasis remap='B'>config setup</emphasis>
discussion below.
Relevant only locally, other end need not agree on it
(but in general, for an intended-to-be-permanent connection,
both ends should use
<emphasis remap='B'>auto=start</emphasis>
to ensure that any reboot causes immediate renegotiation).</para>
<para>
The option <emphasis remap='B'>ondemand</emphasis> used to be called <emphasis remap='B'>route</emphasis>
</para>
  </listitem>
  </varlistentry>

