anchor.diff:            "ListenPort"
             "FirewallMark"
           ])
  -        # The following check won't work on nix <= 2.2
  -        # see https://github.com/NixOS/nix/pull/2378
  -        #
  -        # Add this again when we'll have drop the
  -        # nix < 2.2 support.
  -        # (assertRange "FirewallMark" 1 4294967295)
  +        (assertInt "FirewallMark")
  +        (assertRange "FirewallMark" 1 4294967295)
         ];
   
         # NOTE The PresharedKey directive is missing on purpose here, please
  
positive.code:           "Endpoint"
            "PersistentKeepalive"
          ])
          (assertRange "PersistentKeepalive" 0 65535)
        ];
  
  
negative.code:         (assertValueOneOf "Encapsulation" ["FooOverUDP" "GenericUDPEncapsulation"])
          (assertValueOneOf "ISATAP" boolValues)
          (assertValueOneOf "SerializeTunneledPackets" boolValues)
          (assertInt "ERSPANIndex")
          (assertRange "ERSPANIndex" 1 1048575)
        ];
  
  