diff options
| author | Martin Willi <martin@revosec.ch> | 2011-06-07 12:03:45 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-06-07 12:07:22 +0200 |
| commit | 4876f896a423d8b58266453cfa86194a13ca594d (patch) | |
| tree | 66ac15fab0071398a6f2e536b08a1e1792d6d51f /man/ipsec.conf.5.in | |
| parent | f34ebc845b6b71be4575b479a1ffe00d0d337ef4 (diff) | |
| download | strongswan-4876f896a423d8b58266453cfa86194a13ca594d.tar.bz2 strongswan-4876f896a423d8b58266453cfa86194a13ca594d.tar.xz | |
Added documentation and NEWS for closeaction
Diffstat (limited to 'man/ipsec.conf.5.in')
| -rw-r--r-- | man/ipsec.conf.5.in | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in index 0390f0760..c80ad7fbf 100644 --- a/man/ipsec.conf.5.in +++ b/man/ipsec.conf.5.in @@ -367,6 +367,12 @@ See .IR strongswan.conf (5) for a description of the IKEv2 retransmission timeout. .TP +.BR closeaction " = " none " | clear | hold | restart" +defines the action to take if the remote peer unexpectedly closes a CHILD_SA +(IKEv2 only, see dpdaction for meaning of values). A closeaction should not be +used if the peer uses reauthentication or uniquids checking, as these events +might trigger a closeaction when not desired. +.TP .BR inactivity " = <time>" defines the timeout interval, after which a CHILD_SA is closed if it did not send or receive any traffic. Currently supported in IKEv2 connections only. |