diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-02-21 19:21:01 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-03-02 08:52:56 +0100 |
| commit | 6d86d0f51699612ad886b3f1b8773e81324e3b2a (patch) | |
| tree | 5cc6f0ccd3420c2cf6732cb77e6e1c85eeade7c7 /conf | |
| parent | 4b5cbb3db1582fd14d09e55d344e78aa0c6344a0 (diff) | |
| download | strongswan-6d86d0f51699612ad886b3f1b8773e81324e3b2a.tar.bz2 strongswan-6d86d0f51699612ad886b3f1b8773e81324e3b2a.tar.xz | |
kernel: Make range of SPIs for IPsec SAs configurable
Diffstat (limited to 'conf')
| -rw-r--r-- | conf/options/charon.opt | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/conf/options/charon.opt b/conf/options/charon.opt index 7c56fc1e5..493d73f16 100644 --- a/conf/options/charon.opt +++ b/conf/options/charon.opt @@ -350,6 +350,12 @@ charon.signature_authentication_constraints = yes certificate chain, are also used as constraints against the signature scheme used by peers during IKEv2. +charon.spi_min = 0xc0000000 + The lower limit for SPIs requested from the kernel for IPsec SAs. + +charon.spi_max = 0xcfffffff + The upper limit for SPIs requested from the kernel for IPsec SAs. + charon.start-scripts {} Section containing a list of scripts (name = path) that are executed when the daemon is started. |