vici: Add missing dscp setting for IKE_SAs

Fixes #2170.
This commit is contained in:
Tobias Brunner
2017-02-16 19:23:31 +01:00
parent d460ab2bff
commit 44fcc83310
2 changed files with 47 additions and 5 deletions
+8
View File
@@ -102,6 +102,14 @@ connections.<conn>.pull = yes
Push mode is currently supported for IKEv1, but not in IKEv2. It is used
by a few implementations only, pull mode is recommended.
connections.<conn>.dscp = 000000
Differentiated Services Field Codepoint to set on outgoing IKE packets (six
binary digits).
Differentiated Services Field Codepoint to set on outgoing IKE packets for
this connection. The value is a six digit binary encoded string specifying
the Codepoint to set, as defined in RFC 2474.
connections.<conn>.encap = no
Enforce UDP encapsulation by faking NAT-D payloads.