Update docs

README-zh.md

@@ -131,6 +131,13 @@ VPN_PASSWORD='你的VPN密码' \
 sh vpn.sh
 ```
 
+<details>
+<summary>
+高级用户可以自定义 IKEv2 选项。
+</summary>
+
+如果你想要自定义 [IKEv2 模式](docs/ikev2-howto-zh.md) 的选项，首先选择上面的选项之一安装 VPN，但是将 `git.io/vpnstart` 替换为 `git.io/vpnsetup`。这样会安装 VPN 但是不配置 IKEv2。在完成后，运行 `sudo ikev2.sh` 配置 IKEv2。
+</details>
 <details>
 <summary>
 如果无法通过 wget 下载，点这里查看解决方案。

README.md

@@ -131,6 +131,13 @@ VPN_PASSWORD='your_vpn_password' \
 sh vpn.sh
 ```
 
+<details>
+<summary>
+Advanced users can customize IKEv2 options.
+</summary>
+
+If you want to customize options for [IKEv2 mode](docs/ikev2-howto.md), first install the VPN using one of the options above, but replace `git.io/vpnstart` with `git.io/vpnsetup`. This will install the VPN without IKEv2. After that, run `sudo ikev2.sh` to set up IKEv2.
+</details>
 <details>
 <summary>
 Click here if you are unable to download using wget.

docs/ikev2-howto-zh.md

@@ -418,7 +418,7 @@ sudo chmod 600 ikev2vpnca.cer vpnclient.cer vpnclient.key
 
 如果要列出已有的 IKEv2 客户端的名称，运行 [辅助脚本](#使用辅助脚本配置-ikev2) 并添加 `--listclients` 选项。使用参数 `-h` 显示使用信息。
 
-```
+```bash
 sudo ikev2.sh --listclients
 ```
 
@@ -426,7 +426,7 @@ sudo ikev2.sh --listclients
 
 如果要为更多的 IKEv2 客户端生成证书，只需重新运行 [辅助脚本](#使用辅助脚本配置-ikev2)。要自定义客户端证书选项，可以在不添加参数的情况下运行脚本。
 
-```
+```bash
 sudo ikev2.sh --addclient [client name]
 ```
 
@@ -436,7 +436,7 @@ sudo ikev2.sh --addclient [client name]
 
 在默认情况下，IKEv2 [辅助脚本](#使用辅助脚本配置-ikev2) 在运行后会导出客户端配置。如果之后你想要为一个已有的客户端导出配置，可以运行：
 
-```
+```bash
 sudo ikev2.sh --exportclient [client name]
 ```
 
@@ -484,7 +484,7 @@ sudo ikev2.sh --exportclient [client name]
 
 在某些情况下，你可能需要吊销一个之前生成的 VPN 客户端证书。要吊销证书，重新运行辅助脚本并选择适当的选项。或者你也可以运行：
 
-```
+```bash
 sudo ikev2.sh --revokeclient [client name]
 ```
 
@@ -881,7 +881,11 @@ chmod +x /opt/src/ikev2.sh && ln -s /opt/src/ikev2.sh /usr/bin 2>/dev/null
 
 ## 移除 IKEv2
 
-如果你想要从 VPN 服务器移除 IKEv2，但是保留 [IPsec/L2TP](clients-zh.md) 和 [IPsec/XAuth ("Cisco IPsec")](clients-xauth-zh.md) 模式（如果已安装），请重新运行 [辅助脚本](#使用辅助脚本配置-ikev2) 并选择 "Remove IKEv2" 选项。**警告：** 这将**永久删除**所有的 IKEv2 配置（包括证书和密钥），并且**不可撤销**！
+如果你想要从 VPN 服务器移除 IKEv2，但是保留 [IPsec/L2TP](clients-zh.md) 和 [IPsec/XAuth ("Cisco IPsec")](clients-xauth-zh.md) 模式（如果已安装），请重新运行 [辅助脚本](#使用辅助脚本配置-ikev2) 并选择适当的选项。**警告：** 这将**永久删除**所有的 IKEv2 配置（包括证书和密钥），并且**不可撤销**！
+
+```bash
+sudo ikev2.sh --removeikev2
+```
 
 <details>
 <summary>

docs/ikev2-howto.md

@@ -420,7 +420,7 @@ If you get an error when trying to connect, see [Troubleshooting](#troubleshooti
 
 If you want to list the names of existing IKEv2 clients, run the [helper script](#set-up-ikev2-using-helper-script) with the `--listclients` option. Use option `-h` to show usage information.
 
-```
+```bash
 sudo ikev2.sh --listclients
 ```
 
@@ -428,7 +428,7 @@ sudo ikev2.sh --listclients
 
 To generate certificates for additional IKEv2 clients, just run the [helper script](#set-up-ikev2-using-helper-script) again. To customize client certificate options, run the script without arguments.
 
-```
+```bash
 sudo ikev2.sh --addclient [client name]
 ```
 
@@ -438,7 +438,7 @@ Alternatively, you may manually add a client certificate. Refer to step 4 in [th
 
 By default, the IKEv2 [helper script](#set-up-ikev2-using-helper-script) exports client configuration after running. If later you want to export configuration for an existing client, you may use:
 
-```
+```bash
 sudo ikev2.sh --exportclient [client name]
 ```
 
@@ -486,7 +486,7 @@ To delete a client certificate:
 
 In certain circumstances, you may need to revoke a previously generated VPN client certificate. To revoke a certificate, run the helper script again and select the appropriate option. Or you may run:
 
-```
+```bash
 sudo ikev2.sh --revokeclient [client name]
 ```
 
@@ -883,7 +883,11 @@ Before continuing, you **must** restart the IPsec service. The IKEv2 setup on th
 
 ## Remove IKEv2
 
-If you want to remove IKEv2 from the VPN server, but keep the [IPsec/L2TP](clients.md) and [IPsec/XAuth ("Cisco IPsec")](clients-xauth.md) modes (if installed), run the [helper script](#set-up-ikev2-using-helper-script) again and select the "Remove IKEv2" option. **Warning:** All IKEv2 configuration including certificates and keys will be **permanently deleted**. This **cannot be undone**!
+If you want to remove IKEv2 from the VPN server, but keep the [IPsec/L2TP](clients.md) and [IPsec/XAuth ("Cisco IPsec")](clients-xauth.md) modes (if installed), run the [helper script](#set-up-ikev2-using-helper-script) again and select the appropriate option. **Warning:** All IKEv2 configuration including certificates and keys will be **permanently deleted**. This **cannot be undone**!
+
+```bash
+sudo ikev2.sh --removeikev2
+```
 
 <details>
 <summary>