aboutsummaryrefslogtreecommitdiffstats
path: root/man/strongswan.conf.5.in
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2010-09-09 18:50:24 +0200
committerTobias Brunner <tobias@strongswan.org>2010-09-10 12:01:20 +0200
commitfa8c06903f39e0dd84d98b4892d18ddcb385d687 (patch)
tree15a96b061e2a45c6980f886bffd7478fc5586404 /man/strongswan.conf.5.in
parent320cecd2dd66cb0fcaafb541e44e6409d805b0de (diff)
downloadstrongswan-fa8c06903f39e0dd84d98b4892d18ddcb385d687.tar.bz2
strongswan-fa8c06903f39e0dd84d98b4892d18ddcb385d687.tar.xz
More information about IKEv2 retransmissions added.
Diffstat (limited to 'man/strongswan.conf.5.in')
-rw-r--r--man/strongswan.conf.5.in39
1 files changed, 38 insertions, 1 deletions
diff --git a/man/strongswan.conf.5.in b/man/strongswan.conf.5.in
index 95555fa16..f73dd6004 100644
--- a/man/strongswan.conf.5.in
+++ b/man/strongswan.conf.5.in
@@ -123,7 +123,7 @@ WINS servers assigned to peer via configuration payload (CP)
Process RTM_NEWROUTE and RTM_DELROUTE events
.TP
.BR charon.retransmit_base " [1.8]"
-Base to use for calculating exponential back off
+Base to use for calculating exponential back off, see IKEv2 RETRANSMISSION below
.TP
.BR charon.retransmit_timeout " [4.0]
Timeout in seconds before sending first retransmit
@@ -419,6 +419,43 @@ Plugins to load in ipsec scepclient tool
.BR starter.load_warning " [yes]"
Disable charon/pluto plugin load option warning
+.SH IKEv2 RETRANSMISSION
+Retransmission timeouts in the IKEv2 daemon charon can be configured globally
+using the three keys listed below:
+.PP
+.RS
+.nf
+.BR charon.retransmit_base " [1.8]"
+.BR charon.retransmit_timeout " [4.0]"
+.BR charon.retransmit_tries " [5]"
+.fi
+.RE
+.PP
+The following algorithm is used to calculate the timeout:
+.PP
+.EX
+ relative timeout = retransmit_timeout * retransmit_base ^ (n-1)
+.EE
+.PP
+Where
+.I n
+is the current retransmission count.
+.PP
+Using the default values, packets are retransmitted in:
+
+.TS
+l r r
+---
+lB r r.
+Retransmission Relative Timeout Absolute Timeout
+1 4s 4s
+2 7s 11s
+3 13s 24s
+4 23s 47s
+5 42s 89s
+giving up 76s 165s
+.TE
+
.SH FILES
/etc/strongswan.conf