Add uniqueids=never to ignore INITIAL_CONTACT notifies

With uniqueids=no the daemon still deletes any existing IKE_SA with the
same peer if an INITIAL_CONTACT notify is received.  With this new option
it also ignores these notifies.
This commit is contained in:
Tobias Brunner
2012-09-10 17:37:18 +02:00
parent c51af950b1
commit f4cc7ea11b
6 changed files with 28 additions and 14 deletions
+5 -3
View File
@@ -81,11 +81,13 @@ extern enum_name_t *cert_policy_names;
* Uniqueness of an IKE_SA, used to drop multiple connections with one peer.
*/
enum unique_policy_t {
/** do not check for client uniqueness */
/** never check for client uniqueness */
UNIQUE_NEVER,
/** only check for client uniqueness when receiving an INITIAL_CONTACT */
UNIQUE_NO,
/** replace unique IKE_SAs if new ones get established */
/** replace existing IKE_SAs when new ones get established by a client */
UNIQUE_REPLACE,
/** keep existing IKE_SAs, close the new ones on connection attept */
/** keep existing IKE_SAs, close the new ones on connection attempt */
UNIQUE_KEEP,
};