summaryrefslogtreecommitdiff
path: root/sbin/iked/iked.conf.5
diff options
context:
space:
mode:
authortobhe <tobhe@cvs.openbsd.org>2020-08-25 15:08:09 +0000
committertobhe <tobhe@cvs.openbsd.org>2020-08-25 15:08:09 +0000
commit02c74a75a370179b6764962e426f9c9f2fd9eaff (patch)
tree46068b3e9a2ea9416b8ae62a7a3b3d2c5e80f1cf /sbin/iked/iked.conf.5
parentaed1bc55800be23dd5d00d34ca73fbb1027c5ea5 (diff)
Add dpd_check_interval configuration option. If for any IKE SA no IPsec
or IKE message has been received within the specified time interval, iked will start sending DPD messages. ok patrick@
Diffstat (limited to 'sbin/iked/iked.conf.5')
-rw-r--r--sbin/iked/iked.conf.57
1 files changed, 5 insertions, 2 deletions
diff --git a/sbin/iked/iked.conf.5 b/sbin/iked/iked.conf.5
index dbe1a4c6c6e..0f815b4befe 100644
--- a/sbin/iked/iked.conf.5
+++ b/sbin/iked/iked.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: iked.conf.5,v 1.75 2020/08/23 19:16:08 tobhe Exp $
+.\" $OpenBSD: iked.conf.5,v 1.76 2020/08/25 15:08:07 tobhe Exp $
.\"
.\" Copyright (c) 2010 - 2014 Reyk Floeter <reyk@openbsd.org>
.\" Copyright (c) 2004 Mathieu Sauve-Frankel All rights reserved.
@@ -15,7 +15,7 @@
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: August 23 2020 $
+.Dd $Mdocdate: August 25 2020 $
.Dt IKED.CONF 5
.Os
.Sh NAME
@@ -148,6 +148,9 @@ This is the default.
.It Ic set decouple
Don't load the negotiated SAs and flows from the kernel.
This mode is only useful for testing and debugging.
+.It Ic set dpd_check_interval Ar time
+Specify the liveness check interval, in seconds.
+The default value is 60 seconds.
.It Ic set enforcesingleikesa
Allow only a single active IKE SA for each
.Ic dstid .