aboutsummaryrefslogtreecommitdiffstats
path: root/conf
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2014-03-14 15:41:52 +0100
committerTobias Brunner <tobias@strongswan.org>2014-06-19 14:16:41 +0200
commit3bf98189d7d5b1207f746c86059d241cc025179a (patch)
tree53b0aa180fa3ed2c86d0c03bb1f7e36af6eae410 /conf
parent6364219281371eb1cd942c97f07e859431bdcde2 (diff)
downloadstrongswan-3bf98189d7d5b1207f746c86059d241cc025179a.tar.bz2
strongswan-3bf98189d7d5b1207f746c86059d241cc025179a.tar.xz
kernel-netlink: Follow RFC 6724 when selecting IPv6 source addresses
Instead of using the first address we find on an interface we should consider properties like an address' scope or whether it is temporary or public. Fixes #543.
Diffstat (limited to 'conf')
-rw-r--r--conf/options/charon.opt4
1 files changed, 4 insertions, 0 deletions
diff --git a/conf/options/charon.opt b/conf/options/charon.opt
index aaf4fdc14..d187383b6 100644
--- a/conf/options/charon.opt
+++ b/conf/options/charon.opt
@@ -211,6 +211,10 @@ charon.port_nat_t = 4500
allocated. Has to be different from **charon.port**, otherwise a random
port will be allocated.
+charon.prefer_temporary_addrs = no
+ By default public IPv6 addresses are preferred over temporary ones (RFC
+ 4941), to make connections more stable. Enable this option to reverse this.
+
charon.process_route = yes
Process RTM_NEWROUTE and RTM_DELROUTE events.