diff options
author | Martin Willi <martin@strongswan.org> | 2007-10-01 12:19:39 +0000 |
---|---|---|
committer | Martin Willi <martin@strongswan.org> | 2007-10-01 12:19:39 +0000 |
commit | 9dae1bed004cc5d3d064fe3f735240afe8f44894 (patch) | |
tree | 9e0505849b3780fd22067aa8218c23146fc72cf8 /src/stroke | |
parent | 92232dab33c6f1212e5b0b30cf590ad42246cffa (diff) | |
download | strongswan-9dae1bed004cc5d3d064fe3f735240afe8f44894.tar.bz2 strongswan-9dae1bed004cc5d3d064fe3f735240afe8f44894.tar.xz |
implemented IKEv2 force_encap connection parameter
enforces UDP encapsulation by faking NAT detection payloads
to hurdle restrictive firewalls
Diffstat (limited to 'src/stroke')
-rw-r--r-- | src/stroke/stroke.c | 1 | ||||
-rw-r--r-- | src/stroke/stroke.h | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/src/stroke/stroke.c b/src/stroke/stroke.c index 14f2e548f..d984f66ab 100644 --- a/src/stroke/stroke.c +++ b/src/stroke/stroke.c @@ -110,6 +110,7 @@ static int add_connection(char *name, msg.add_conn.eap_type = 0; msg.add_conn.mode = 1; msg.add_conn.mobike = 1; + msg.add_conn.force_encap = 0; msg.add_conn.rekey.reauth = 0; msg.add_conn.rekey.ipsec_lifetime = 0; diff --git a/src/stroke/stroke.h b/src/stroke/stroke.h index f903379cd..46bd12965 100644 --- a/src/stroke/stroke.h +++ b/src/stroke/stroke.h @@ -183,6 +183,7 @@ struct stroke_msg_t { int eap_type; int mode; int mobike; + int force_encap; struct { char *ike; char *esp; |