![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to kernel-libipsec.opt CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins|
Return to kernel-libipsec.opt CVS log | Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins |
Strongswan
charon.plugins.kernel-libipsec.allow_peer_ts = no Allow that the remote traffic selector equals the IKE peer. Allow that the remote traffic selector equals the IKE peer. The route installed for such traffic (via TUN device) usually prevents further IKE traffic. The fwmark options for the _kernel-netlink_ and _socket-default_ plugins can be used to circumvent that problem.