denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

swanctl: Document the behavior of %unique[-dir] on IKE_SAs

Browse Source
This commit is contained in:
Tobias Brunner
2022-11-10 16:50:02 +01:00
parent 64b10dfb28
commit 284fc2f796
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/swanctl/swanctl.opt
+10
View File
@@ -301,12 +301,22 @@ connections.<conn>.if_id_in = 0
XFRM interface ID set on inbound policies/SA, can be overridden by child XFRM interface ID set on inbound policies/SA, can be overridden by child
config, see there for details. config, see there for details.
The special value _%unique_ allocates a unique interface ID per IKE_SA,
which is inherited by all its CHILD_SAs (unless overriden there), beyond
that the value _%unique-dir_ assigns a different unique interface ID for
each direction (in/out).
connections.<conn>.if_id_out = 0 connections.<conn>.if_id_out = 0
Default outbound XFRM interface ID for children. Default outbound XFRM interface ID for children.
XFRM interface ID set on outbound policies/SA, can be overridden by child XFRM interface ID set on outbound policies/SA, can be overridden by child
config, see there for details. config, see there for details.
The special value _%unique_ allocates a unique interface ID per IKE_SA,
which is inherited by all its CHILD_SAs (unless overriden there), beyond
that the value _%unique-dir_ assigns a different unique interface ID for
each direction (in/out).
connections.<conn>.mediation = no connections.<conn>.mediation = no
Whether this connection is a mediation connection. Whether this connection is a mediation connection.