IKEv1 rightallowany flag introduced

2007-06-20 09:46:54 +00:00
parent cbbb71c4ac
commit 078ce348ae
1 changed files with 18 additions and 1 deletions
@@ -8,6 +8,23 @@ strongswan-4.1.4
  by NETKEY's IPsec policies. As a consequence the left|rightnexthop
  parameter is not required any more.
 - The new IKEv1 parameter right|leftallowany parameters helps to handle
  the case where both peers possess dynamic IP addresses that are
  usually resolved using DynDNS or a similar service. The configuration
    right=peer.foo.bar
    rightallowany=yes
  can be used by the initiator to start up a connection to a peer
  by resolving peer.foo.bar into the currently allocated IP address.
  Thanks to the rightallowany flag the connection behaves later on
  as
   right=%any
  so that the peer can rekey the connection as an initiator when his
  IP address changes.
 strongswan-4.1.3
 ----------------