denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

swanctl: Document replay_window option

Browse Source
This commit is contained in:
Martin Willi
2014-06-17 16:49:02 +02:00
parent d73a46171d
commit 5b7725f3b0
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/swanctl/swanctl.opt
+7
View File
@@ -629,6 +629,13 @@ connections.<conn>.children.<child>.tfc_padding = 0
The default value of 0 disables TFC padding, the special value _mtu_ adds
TFC padding to create a packet size equal to the Path Maximum Transfer Unit.
connections.<conn>.children.<child>.replay_window = 32
IPsec replay window to configure for this CHILD_SA.
IPsec replay window to configure for this CHILD_SA. Larger values than the
default of 32 are supported using the Netlink backend only, a value of 0
disables IPsec replay protection.
connections.<conn>.children.<child>.start_action = none
Action to perform after loading the configuration (_none_, _trap_, _start_).