aboutsummaryrefslogtreecommitdiffstats
path: root/src/swanctl
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2016-11-11 10:40:53 +0100
committerTobias Brunner <tobias@strongswan.org>2017-02-16 19:23:31 +0100
commit44fcc83310ed7a032d2cf0fa315f3f7bd36c0f69 (patch)
treed75fcf8aeb5bd93d9b1f09559d75c9d5ac130d3b /src/swanctl
parentd460ab2bff5c49cc2e5fbffe79f59d9a1d9918a6 (diff)
downloadstrongswan-44fcc83310ed7a032d2cf0fa315f3f7bd36c0f69.tar.bz2
strongswan-44fcc83310ed7a032d2cf0fa315f3f7bd36c0f69.tar.xz
vici: Add missing dscp setting for IKE_SAs
Fixes #2170.
Diffstat (limited to 'src/swanctl')
-rw-r--r--src/swanctl/swanctl.opt8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/swanctl/swanctl.opt b/src/swanctl/swanctl.opt
index a7d6d9fc3..e882e60ba 100644
--- a/src/swanctl/swanctl.opt
+++ b/src/swanctl/swanctl.opt
@@ -102,6 +102,14 @@ connections.<conn>.pull = yes
Push mode is currently supported for IKEv1, but not in IKEv2. It is used
by a few implementations only, pull mode is recommended.
+connections.<conn>.dscp = 000000
+ Differentiated Services Field Codepoint to set on outgoing IKE packets (six
+ binary digits).
+
+ Differentiated Services Field Codepoint to set on outgoing IKE packets for
+ this connection. The value is a six digit binary encoded string specifying
+ the Codepoint to set, as defined in RFC 2474.
+
connections.<conn>.encap = no
Enforce UDP encapsulation by faking NAT-D payloads.