diff options
| author | Martin Willi <martin@revosec.ch> | 2014-11-04 16:32:33 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2015-02-20 13:34:57 +0100 |
| commit | 22e6a06b8c2d12374156a9559bbc7edd183a9040 (patch) | |
| tree | c39ec384ddc6e22d7fe1e98bb03233d1517b9cf7 /testing/tests | |
| parent | 3676023e54c75bab3d2787c78f8024704d4bb4c3 (diff) | |
| download | strongswan-22e6a06b8c2d12374156a9559bbc7edd183a9040.tar.bz2 strongswan-22e6a06b8c2d12374156a9559bbc7edd183a9040.tar.xz | |
mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth
With make-before-break IKEv2 re-authentication, virtual IP addresses must be
assigned overlapping to the same peer. With the remote IKE address, the backend
can detect re-authentication attempts by comparing the remote host address and
port. This allows proper reassignment of the virtual IP if it is re-requested.
This change removes the mem-pool.reassign_online option, as it is obsolete now.
IPs get automatically reassigned if a peer re-requests the same address, and
additionally connects from the same address and port.
Diffstat (limited to 'testing/tests')
0 files changed, 0 insertions, 0 deletions