  <varlistentry>
  <term><emphasis remap='B'>accept-redirect</emphasis></term>
  <listitem>
<para>Whether requests of the remote peer to redirect IKE/IPsec SA's are accepted. Valid options are
	<emphasis remap='B'>no</emphasis> (the default) and <emphasis remap='B'>yes</emphasis>. See also <emphasis remap='B'>accept-redirect-to</emphasis>.
</para>
  </listitem>
  </varlistentry>
  <varlistentry>
  <term><emphasis remap='B'>accept-redirect-to</emphasis></term>
  <listitem>
<para>
Specify the comma separated list of addresses we accept being
redirected to. Both IPv4 and IPv6 addresses
are supported as well the FQDNs. The value
<emphasis remap='B'>%any</emphasis>, as well as not specifying
any address, signifes that we will redirect to any address
gateway sends us in REDIRECT notify payload.
</para>
<para>
The value of this option is not considered at all if
accept-redirect is set to no.
</para>
  </listitem>
  </varlistentry>
  <varlistentry>
  <term><emphasis remap='B'>send-redirect</emphasis></term>
  <listitem>
<para>Whether to send requests for the remote peer to redirect IKE/IPsec SA's during IKE_AUTH. Valid options are
	<emphasis remap='B'>no</emphasis> (the default) and <emphasis remap='B'>yes</emphasis>. If set, the option <emphasis remap='B'>redirect-to=</emphasis> must also be set to indicate where to redirect peers to. For redirection during IKE_SA_INIT exchange, see the <emphasis remap='B'>global-redirect=</emphasis> and
	<emphasis remap='B'>global-redirect-to=</emphasis> options. Runtime redirects can be triggered via the <emphasis remap='I'>ipsec whack --redirect</emphasis> command.
</para>
  </listitem>
  </varlistentry>
  <varlistentry>
  <term><emphasis remap='B'>redirect-to</emphasis></term>
  <listitem>
	  <para>Where to send remote peers to via the <emphasis remap='B'>send-redirect</emphasis> option. This can be an IP address or hostname (FQDN).
</para>
  </listitem>
  </varlistentry>
