sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-08 00:02:03 -04:00
Code Issues Projects Releases Wiki Activity

swanctl: Document replay_window option

Browse Source
This commit is contained in:
Martin Willi 2014-06-17 16:48:25 +02:00
parent d73a46171d
commit 5b7725f3b0
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/swanctl/swanctl.opt
View File

@ -629,6 +629,13 @@ connections.<conn>.children.<child>.tfc_padding = 0
The default value of 0 disables TFC padding, the special value _mtu_ adds The default value of 0 disables TFC padding, the special value _mtu_ adds
TFC padding to create a packet size equal to the Path Maximum Transfer Unit. TFC padding to create a packet size equal to the Path Maximum Transfer Unit.
connections.<conn>.children.<child>.replay_window = 32
IPsec replay window to configure for this CHILD_SA.
IPsec replay window to configure for this CHILD_SA. Larger values than the
default of 32 are supported using the Netlink backend only, a value of 0
disables IPsec replay protection.
connections.<conn>.children.<child>.start_action = none connections.<conn>.children.<child>.start_action = none
Action to perform after loading the configuration (_none_, _trap_, _start_). Action to perform after loading the configuration (_none_, _trap_, _start_).