denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev2: Trigger make-before-break reauthentication instead of reauth task

Browse Source
This commit is contained in:
Martin Willi
2015-02-20 13:34:57 +01:00
parent c8e7dbcb56
commit 349f7f2412
3 changed files with 89 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/options/charon.opt
+10
View File
@@ -196,6 +196,16 @@ charon.load_modular = no
charon.max_packet = 10000
Maximum packet size accepted by charon.
charon.make_before_break = no
Initiate IKEv2 reauthentication with a make-before-break scheme.
Initiate IKEv2 reauthentication with a make-before-break instead of a
break-before-make scheme. Make-before-break uses overlapping IKE and
CHILD_SA during reauthentication by first recreating all new SAs before
deleting the old ones. This behavior can be beneficial to avoid connectivity
gaps during reauthentication, but requires support for overlapping SAs by
the peer. strongSwan can handle such overlapping SAs since version 5.3.0.
charon.mem-pool.reassign_online = no
Reassign an online IP address lease from an in-memory address pool if a
client with the same identity requests it explicitly.