denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

conf: Document recommended lower limit for SPIs

Browse Source
This commit is contained in:
Tobias Brunner
2017-03-23 18:29:19 +01:00
parent 93700d93fa
commit db12675ec4
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/options/charon.opt
+4
View File
@@ -353,6 +353,10 @@ charon.signature_authentication_constraints = yes
charon.spi_min = 0xc0000000 charon.spi_min = 0xc0000000
The lower limit for SPIs requested from the kernel for IPsec SAs. The lower limit for SPIs requested from the kernel for IPsec SAs.
The lower limit for SPIs requested from the kernel for IPsec SAs. Should not
be set lower than 0x00000100 (256), as SPIs between 1 and 255 are reserved
by IANA.
charon.spi_max = 0xcfffffff charon.spi_max = 0xcfffffff
The upper limit for SPIs requested from the kernel for IPsec SAs. The upper limit for SPIs requested from the kernel for IPsec SAs.