aboutsummaryrefslogtreecommitdiffstats
path: root/conf
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2017-03-23 17:29:47 +0100
committerTobias Brunner <tobias@strongswan.org>2017-03-23 18:29:19 +0100
commitdb12675ec45c9c9bfe5b6ae000a38c76bdf6aad5 (patch)
tree974e5e792a251eff475bc812ba25a6cbff4b6280 /conf
parent93700d93fa4afaf28c9fe6e9d948ba13edfc8e79 (diff)
downloadstrongswan-db12675ec45c9c9bfe5b6ae000a38c76bdf6aad5.tar.bz2
strongswan-db12675ec45c9c9bfe5b6ae000a38c76bdf6aad5.tar.xz
conf: Document recommended lower limit for SPIs
Diffstat (limited to 'conf')
-rw-r--r--conf/options/charon.opt4
1 files changed, 4 insertions, 0 deletions
diff --git a/conf/options/charon.opt b/conf/options/charon.opt
index 493d73f16..4c4311e81 100644
--- a/conf/options/charon.opt
+++ b/conf/options/charon.opt
@@ -353,6 +353,10 @@ charon.signature_authentication_constraints = yes
charon.spi_min = 0xc0000000
The lower limit for SPIs requested from the kernel for IPsec SAs.
+ The lower limit for SPIs requested from the kernel for IPsec SAs. Should not
+ be set lower than 0x00000100 (256), as SPIs between 1 and 255 are reserved
+ by IANA.
+
charon.spi_max = 0xcfffffff
The upper limit for SPIs requested from the kernel for IPsec SAs.