From e3ea7245c381ce4be7c5147ea11a7a997b089e17 Mon Sep 17 00:00:00 2001
From: Francesco Giudici <fgiudici@redhat.com>
Date: Wed, 14 Nov 2018 16:46:41 +0100
Subject: [PATCH] man: add OTP-based VPN activation example

---
 man/nmcli-examples.xml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/man/nmcli-examples.xml b/man/nmcli-examples.xml
index 0b15f112d..32fc567b0 100644
--- a/man/nmcli-examples.xml
+++ b/man/nmcli-examples.xml
@@ -178,6 +178,19 @@ B,DISPATCH</screen>
       </para>
     </example>
 
+    <example><title>Activating a VPN connection profile requiring interactive password input</title>
+<screen><prompt>$ </prompt><userinput>nmcli --ask con up my-vpn-con</userinput></screen>
+      <para>
+        This command activates a VPN connection profile enabling nmcli to interact with the user
+        ('--ask'): this will allow nmcli to prompt for the VPN password on the command line when
+        the <emphasis>password-flags</emphasis> are set to '0x02' ('always ask', see
+        <link linkend='nm-settings'><citerefentry><refentrytitle>nm-settings</refentrytitle><manvolnum>5</manvolnum></citerefentry></link>
+        ).
+        This is particularly useful for OTP based VPNs, as the user needs to be prompted for the
+        password each time the connection is activated.
+      </para>
+    </example>
+
     <example><title>Adding a bonding master and two slave connection profiles</title>
 <screen><prompt>$ </prompt><userinput>nmcli con add type bond ifname mybond0 mode active-backup</userinput>
 <prompt>$ </prompt><userinput>nmcli con add type ethernet ifname eth1 master mybond0</userinput>