From 0aabfe07809d061b5c415e9b5b01b7915704d53a Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Wed, 12 Oct 2016 15:56:12 +0200 Subject: bypass-lan: Allow ignoring or only considering subnets of specific interfaces The config can also be reloaded by sending a SIGHUP to charon. --- conf/Makefile.am | 1 + conf/plugins/bypass-lan.opt | 8 ++++++++ 2 files changed, 9 insertions(+) create mode 100644 conf/plugins/bypass-lan.opt (limited to 'conf') diff --git a/conf/Makefile.am b/conf/Makefile.am index c4b2c02fd..80fa31e73 100644 --- a/conf/Makefile.am +++ b/conf/Makefile.am @@ -32,6 +32,7 @@ plugins = \ plugins/attr.opt \ plugins/attr-sql.opt \ plugins/bliss.opt \ + plugins/bypass-lan.opt \ plugins/certexpire.opt \ plugins/coupling.opt \ plugins/dhcp.opt \ diff --git a/conf/plugins/bypass-lan.opt b/conf/plugins/bypass-lan.opt new file mode 100644 index 000000000..8c72facde --- /dev/null +++ b/conf/plugins/bypass-lan.opt @@ -0,0 +1,8 @@ +charon.plugins.bypass-lan.interfaces_ignore + A comma-separated list of network interfaces for which connected subnets + should be ignored, if **interfaces_use** is specified this option has no + effect. + +charon.plugins.bypass-lan.interfaces_use + A comma-separated list of network interfaces for which connected subnets + should be considered. All other interfaces are ignored. -- cgit v1.2.3