denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-netlink: Optionally install protocol and ports on transport mode SAs

Browse Source
This commit is contained in:
Tobias Brunner committed 2014-09-12 10:45:50 +02:00
1 parent 5dec7d2f9d
commit 90e6675a65
2 files changed
+27 -6
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

conf/plugins/kernel-netlink.opt
+9
View File
@@ -16,6 +16,15 @@ charon.plugins.kernel-netlink.mtu = 0
charon.plugins.kernel-netlink.roam_events = yes
Whether to trigger roam events when interfaces, addresses or routes change.
charon.plugins.kernel-netlink.set_proto_port_transport_sa = no
Whether to set protocol and ports in the selector installed on transport
mode IPsec SAs in the kernel.
Whether to set protocol and ports in the selector installed on transport
mode IPsec SAs in the kernel. While doing so enforces policies for inbound
traffic, it also prevents the use of a single IPsec SA by more than one
traffic selector.
charon.plugins.kernel-netlink.xfrm_acq_expires = 165
Lifetime of XFRM acquire state in kernel.