denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Option added to enforce a configured destination address for DHCP packets

Browse Source
This commit is contained in:
Tobias Brunner
2012-09-13 10:59:24 +02:00
parent 493f85b696
commit bc6ec4de73
2 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/strongswan.conf.5.in
+8
View File
@@ -323,6 +323,14 @@ Hashing algorithm to fingerprint coupled certificates
.BR charon.plugins.coupling.max " [1]"
Maximum number of coupling entries to create
.TP
.BR charon.plugins.dhcp.force_server_address " [no]"
Always use the configured server address. This might be helpful if the DHCP
server runs on the same host as strongSwan, and the DHCP daemon does not listen
on the loopback interface. In that case the server cannot be reached via
unicast (or even 255.255.255.255) as that would be routed via loopback.
Setting this option to yes and configuring the local broadcast address (e.g.
192.168.0.255) as server address might work.
.TP
.BR charon.plugins.dhcp.identity_lease " [no]"
Derive user-defined MAC address from hash of IKEv2 identity
.TP