denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ike: Add configuration option to switch to preferring supplied proposals over local ones

Browse Source
This commit is contained in:
Tobias Brunner
2016-06-17 18:48:07 +02:00
parent f2ea230b91
commit 0a954d6789
6 changed files with 26 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/options/charon.opt
+5
View File
@@ -253,6 +253,11 @@ charon.port_nat_t = 4500
allocated. Has to be different from **charon.port**, otherwise a random
port will be allocated.
charon.prefer_configured_proposals = yes
Prefer locally configured proposals for IKE/IPsec over supplied ones as
responder (disabling this can avoid keying retries due to INVALID_KE_PAYLOAD
notifies).
charon.prefer_temporary_addrs = no
By default public IPv6 addresses are preferred over temporary ones (RFC
4941), to make connections more stable. Enable this option to reverse this.