kernel-netlink: Don't install routes for CHILD_SAs with interface ID

2019-04-04 09:31:38 +02:00
parent 5b2078ad09
commit 801a5d3133
2 changed files with 5 additions and 1 deletions
@@ -934,6 +934,8 @@ connections.<conn>.children.<child>.if_id_out = 0
 	instance, beyond that the value _%unique-dir_ assigns a different unique
 	interface ID for each CHILD_SA direction (in/out).

+	The daemon will not install routes for CHILD_SAs that have this option set.
+
 connections.<conn>.children.<child>.set_mark_in = 0/0x00000000
 	Netfilter mark applied to packets after the inbound IPsec SA processed them.