diff options
| author | Martin Willi <martin@revosec.ch> | 2011-06-07 12:03:45 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-06-07 12:07:22 +0200 |
| commit | 4876f896a423d8b58266453cfa86194a13ca594d (patch) | |
| tree | 66ac15fab0071398a6f2e536b08a1e1792d6d51f | |
| parent | f34ebc845b6b71be4575b479a1ffe00d0d337ef4 (diff) | |
| download | strongswan-4876f896a423d8b58266453cfa86194a13ca594d.tar.bz2 strongswan-4876f896a423d8b58266453cfa86194a13ca594d.tar.xz | |
Added documentation and NEWS for closeaction
| -rw-r--r-- | NEWS | 3 | ||||
| -rw-r--r-- | man/ipsec.conf.5.in | 6 |
2 files changed, 9 insertions, 0 deletions
@@ -4,6 +4,9 @@ strongswan-4.5.3 - IMC/IMV test pair implementing the RFC 5792 PA-TNC (IF-M) protocol. (--enable-imc-test/--enable-imv-test). +- The IKEv2 close action does not use the same value as the ipsec.conf dpdaction + setting, but the value defined by its own closeaction keyword. The action + is triggered if the remote peer closes a CHILD_SA unexpectedly. strongswan-4.5.2 ---------------- diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in index 0390f0760..c80ad7fbf 100644 --- a/man/ipsec.conf.5.in +++ b/man/ipsec.conf.5.in @@ -367,6 +367,12 @@ See .IR strongswan.conf (5) for a description of the IKEv2 retransmission timeout. .TP +.BR closeaction " = " none " | clear | hold | restart" +defines the action to take if the remote peer unexpectedly closes a CHILD_SA +(IKEv2 only, see dpdaction for meaning of values). A closeaction should not be +used if the peer uses reauthentication or uniquids checking, as these events +might trigger a closeaction when not desired. +.TP .BR inactivity " = <time>" defines the timeout interval, after which a CHILD_SA is closed if it did not send or receive any traffic. Currently supported in IKEv2 connections only. |