Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| docs:guide-user:services:vpn:strongswan:configuration [2021/07/24 04:42] – Correct typo in 'home' config; add DPD. philipp | docs:guide-user:services:vpn:strongswan:configuration [2022/12/12 00:25] – Fix examples: 'keyingtries' -> 'keyingretries' pcrump | ||
|---|---|---|---|
| Line 2: | Line 2: | ||
| Linux Charon IPsec daemon can be configured through ''/ | Linux Charon IPsec daemon can be configured through ''/ | ||
| - | **Note**: this has been updated to the '' | + | **Note**: this has been updated to the '' |
| ===== Sections ===== | ===== Sections ===== | ||
| Line 36: | Line 36: | ||
| |rekeytime|interval|no|(none)|IKEv2 interval to refresh keying material; also used to compute lifetime| | |rekeytime|interval|no|(none)|IKEv2 interval to refresh keying material; also used to compute lifetime| | ||
| |overtime|interval|no|(none)|Limit on time to complete rekeying/ | |overtime|interval|no|(none)|Limit on time to complete rekeying/ | ||
| + | |keyexchange|string|no|ikev2|Version of IKE to negotiation (" | ||
| ==== crypto_proposal ==== | ==== crypto_proposal ==== | ||
| Line 54: | Line 55: | ||
| |local_nat|subnet|no|(none)|NAT range for tunnels with [[docs: | |local_nat|subnet|no|(none)|NAT range for tunnels with [[docs: | ||
| |crypto_proposal|list|yes|(none)|List of ESP (phase two) proposals| | |crypto_proposal|list|yes|(none)|List of ESP (phase two) proposals| | ||
| - | |keyexchange|string|no|ikev2|Version of IKE to negotiation (" | ||
| |startaction|string|no|route|Action on initial configuration load (none, start, route)| | |startaction|string|no|route|Action on initial configuration load (none, start, route)| | ||
| |updown|string|no|(none)|Path to script to run on CHILD_SA up/down events| | |updown|string|no|(none)|Path to script to run on CHILD_SA up/down events| | ||
| Line 88: | Line 88: | ||
| option ' | option ' | ||
| option ' | option ' | ||
| - | option 'keyingtries' ' | + | option 'keyingretries' ' |
| option ' | option ' | ||
| option ' | option ' | ||
| Line 235: | Line 235: | ||
| option ' | option ' | ||
| option ' | option ' | ||
| - | option 'keyingtries' ' | + | option 'keyingretries' ' |
| option ' | option ' | ||
| list ' | list ' | ||