denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add an option to en-/disable IKE fragmentation

Browse Source 
Fragments are always accepted but will not be sent if disabled.  The
vendor ID is only sent if the option is enabled.
This commit is contained in:
Tobias Brunner
2012-12-24 12:29:31 +01:00
parent 5cafefcd5d
commit 2f62bb1549
3 changed files with 25 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/strongswan.conf.5.in
+5
View File
@@ -178,6 +178,11 @@ openly transmitted hash of the PSK)
.BR charon.ignore_routing_tables
A space-separated list of routing tables to be excluded from route lookups
.TP
.BR charon.ike_fragmentation " [no]"
Enables IKE fragmentation (proprietary IKEv1 extension). Fragmented messages
are always accepted irrespective of the value of this option. If the peer
supports it larger messages will be sent in fragments.
.TP
.BR charon.ikesa_table_segments " [1]"
Number of exclusively locked segments in the hash table
.TP