Annotation of embedaddon/strongswan/conf/plugins/kernel-libipsec.opt, revision 1.1
1.1 ! misho 1: charon.plugins.kernel-libipsec.allow_peer_ts = no
! 2: Allow that the remote traffic selector equals the IKE peer.
! 3:
! 4: Allow that the remote traffic selector equals the IKE peer. The route
! 5: installed for such traffic (via TUN device) usually prevents further IKE
! 6: traffic. The fwmark options for the _kernel-netlink_ and _socket-default_
! 7: plugins can be used to circumvent that problem.
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>