denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added description for flush_auth_cfg and acct_port plus some minor editorial changes

Browse Source
This commit is contained in:
Tobias Brunner
2012-09-25 12:22:05 +02:00
parent 2d39f79b9b
commit 358104a47f
1 changed files with 16 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/strongswan.conf.5.in
+16 -6
View File
@@ -159,7 +159,10 @@ Enable Denial of Service protection using cookies and aggressiveness checks
Section to define file loggers, see LOGGER CONFIGURATION Section to define file loggers, see LOGGER CONFIGURATION
.TP .TP
.BR charon.flush_auth_cfg " [no]" .BR charon.flush_auth_cfg " [no]"
If enabled objects used during authentication (certificates, identities etc.)
are released to free memory once an IKE_SA is established.
Enabling this might conflict with plugins that later need access to e.g. the
used certificates.
.TP .TP
.BR charon.half_open_timeout " [30]" .BR charon.half_open_timeout " [30]"
Timeout in seconds for connecting IKE_SAs (also see IKE_SA_INIT DROPPING). Timeout in seconds for connecting IKE_SAs (also see IKE_SA_INIT DROPPING).
@@ -204,10 +207,11 @@ If not specified the addresses will be installed on the outbound interface.
.TP .TP
.BR charon.interfaces_ignore .BR charon.interfaces_ignore
A comma-separated list of network interfaces that should be ignored, if A comma-separated list of network interfaces that should be ignored, if
charon.interfaces_use is specified this option has no effect. .B charon.interfaces_use
is specified this option has no effect.
.TP .TP
.BR charon.interfaces_use .BR charon.interfaces_use
A comma-separated list of network interfaces that sould be used by charon. A comma-separated list of network interfaces that should be used by charon.
All other interfaces are ignored. All other interfaces are ignored.
.TP .TP
.BR charon.keep_alive " [20s]" .BR charon.keep_alive " [20s]"
@@ -391,7 +395,6 @@ Start phase2 EAP TNC protocol after successful client authentication
.TP .TP
.BR charon.plugins.eap-peap.request_peer_auth " [no]" .BR charon.plugins.eap-peap.request_peer_auth " [no]"
Request peer authentication based on a client certificate Request peer authentication based on a client certificate
.TP .TP
.BR charon.plugins.eap-radius.accounting " [no]" .BR charon.plugins.eap-radius.accounting " [no]"
Send RADIUS accounting information to RADIUS servers. Send RADIUS accounting information to RADIUS servers.
@@ -439,7 +442,9 @@ name or attribute number, a colon can be used to specify vendor-specific
attributes, e.g. Reply-Message, or 11, or 36906:12). attributes, e.g. Reply-Message, or 11, or 36906:12).
.TP .TP
.BR charon.plugins.eap-radius.forward.radius_to_ike .BR charon.plugins.eap-radius.forward.radius_to_ike
Same as charon.plugins.eap-radius.forward.ike_to_radius but from RADIUS to Same as
.B charon.plugins.eap-radius.forward.ike_to_radius
but from RADIUS to
IKEv2, a strongSwan specific private notify (40969) is used to transmit the IKEv2, a strongSwan specific private notify (40969) is used to transmit the
attributes. attributes.
.TP .TP
@@ -466,10 +471,15 @@ Section to specify multiple RADIUS servers. The
.B sockets .B sockets
and and
.B port .B port
(or
.BR auth_port )
options can be specified for each server. A server's IP/Hostname can be options can be specified for each server. A server's IP/Hostname can be
configured using the configured using the
.B address .B address
option. For each RADIUS server a priority can be specified using the option. The
.BR acct_port " [1813]"
option can be used to specify the port used for RADIUS accounting.
For each RADIUS server a priority can be specified using the
.BR preference " [0]" .BR preference " [0]"
option. option.
.TP .TP