diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2014-08-25 14:45:40 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2014-09-12 10:45:50 +0200 |
| commit | 90e6675a657c4ffdebc39b23f64922bad81bcc03 (patch) | |
| tree | 33e2e44b2f022398fc01746b6fb7d1710711e66a /conf | |
| parent | 5dec7d2f9d3bf93aa9002fbb6ae9f119a7ec2dd8 (diff) | |
| download | strongswan-90e6675a657c4ffdebc39b23f64922bad81bcc03.tar.bz2 strongswan-90e6675a657c4ffdebc39b23f64922bad81bcc03.tar.xz | |
kernel-netlink: Optionally install protocol and ports on transport mode SAs
Diffstat (limited to 'conf')
| -rw-r--r-- | conf/plugins/kernel-netlink.opt | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/conf/plugins/kernel-netlink.opt b/conf/plugins/kernel-netlink.opt index 2a755db22..7d44581a5 100644 --- a/conf/plugins/kernel-netlink.opt +++ b/conf/plugins/kernel-netlink.opt @@ -16,6 +16,15 @@ charon.plugins.kernel-netlink.mtu = 0 charon.plugins.kernel-netlink.roam_events = yes Whether to trigger roam events when interfaces, addresses or routes change. +charon.plugins.kernel-netlink.set_proto_port_transport_sa = no + Whether to set protocol and ports in the selector installed on transport + mode IPsec SAs in the kernel. + + Whether to set protocol and ports in the selector installed on transport + mode IPsec SAs in the kernel. While doing so enforces policies for inbound + traffic, it also prevents the use of a single IPsec SA by more than one + traffic selector. + charon.plugins.kernel-netlink.xfrm_acq_expires = 165 Lifetime of XFRM acquire state in kernel. |