denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

swanctl: Describe what happens when a FQDN is specified in local|remote_addrs

Browse Source
This commit is contained in:
Tobias Brunner
2017-03-20 10:18:51 +01:00
parent 31456d1f85
commit d5a19a17dc
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/swanctl/swanctl.opt
+6
View File
@@ -28,6 +28,9 @@ connections.<conn>.local_addrs = %any
connection from. As responder, the local destination address must match at connection from. As responder, the local destination address must match at
least to one of the specified addresses, subnets or ranges. least to one of the specified addresses, subnets or ranges.
If FQDNs are assigned they are resolved every time a configuration lookup
is done. If DNS resolution times out, the lookup is delayed for that time.
connections.<conn>.remote_addrs = %any connections.<conn>.remote_addrs = %any
Remote address(es) to use for IKE communication, comma separated. Remote address(es) to use for IKE communication, comma separated.
@@ -38,6 +41,9 @@ connections.<conn>.remote_addrs = %any
connection to. As responder, the initiator source address must match at connection to. As responder, the initiator source address must match at
least to one of the specified addresses, subnets or ranges. least to one of the specified addresses, subnets or ranges.
If FQDNs are assigned they are resolved every time a configuration lookup
is done. If DNS resolution times out, the lookup is delayed for that time.
To initiate a connection, at least one specific address or DNS name must To initiate a connection, at least one specific address or DNS name must
be specified. be specified.