Return to kernel-libipsec.opt CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins

Annotation of embedaddon/strongswan/conf/plugins/kernel-libipsec.opt, revision 1.1.1.1

1.1       misho       1: charon.plugins.kernel-libipsec.allow_peer_ts = no
                      2:        Allow that the remote traffic selector equals the IKE peer.
                      3: 
                      4:        Allow that the remote traffic selector equals the IKE peer. The route
                      5:        installed for such traffic (via TUN device) usually prevents further IKE
                      6:        traffic. The fwmark options for the _kernel-netlink_ and _socket-default_
                      7:        plugins can be used to circumvent that problem.