<varlistentry>
<term><emphasis remap='B'>auto</emphasis></term>
  <listitem>
<para>what operation, if any, should be done automatically at IPsec startup;
currently-accepted values are
<emphasis remap='B'>add</emphasis>
(signifying an
<emphasis remap='B'>ipsec auto</emphasis>
<option>--add</option>),
<emphasis remap='B'>ondemand</emphasis>
(signifying that plus an
<emphasis remap='B'>ipsec auto</emphasis>
<option>--ondemand</option>),
<emphasis remap='B'>start</emphasis>
(signifying that plus an
<emphasis remap='B'>ipsec auto</emphasis>
<option>--up</option>),
and
<emphasis remap='B'>ignore</emphasis>
(also the default) (signifying no automatic startup operation).
See the
<emphasis remap='B'>config</emphasis>
<emphasis remap='B'>setup</emphasis>
discussion below.
Relevant only locally, other end need not agree on it
(but in general, for an intended-to-be-permanent connection,
both ends should use
<emphasis remap='B'>auto=start</emphasis>
to ensure that any reboot causes immediate renegotiation).</para>
<para>
The option <emphasis remap='B'>ondemand</emphasis> used to be called <emphasis remap='B'>route</emphasis>
</para>
  </listitem>
  </varlistentry>

