diff options
| author | Daniil Baturin <daniil@vyos.io> | 2025-07-22 15:37:28 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-07-22 15:37:28 +0100 |
| commit | ade8e4515f7f9204ce65d38e041cc013a9a49071 (patch) | |
| tree | ac3ceb1d56f011829903e15a2b54c5bb9ee29745 /data | |
| parent | 7a88b0b5b3af145cd6434881a34459d791f8af9b (diff) | |
| parent | f0ac13f3683d593e7700c46fc227cf223e0c79d5 (diff) | |
| download | vyos-1x-ade8e4515f7f9204ce65d38e041cc013a9a49071.tar.gz vyos-1x-ade8e4515f7f9204ce65d38e041cc013a9a49071.zip | |
Merge pull request #4601 from aapostoliuk/T7504-current
ipsec: T7504: Added IKEv2 retransmission options
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ipsec/charon.j2 | 19 |
1 files changed, 10 insertions, 9 deletions
diff --git a/data/templates/ipsec/charon.j2 b/data/templates/ipsec/charon.j2 index 388559af8..a9108eeda 100644 --- a/data/templates/ipsec/charon.j2 +++ b/data/templates/ipsec/charon.j2 @@ -202,15 +202,16 @@ charon { # Size of the AH/ESP replay window, in packets. # replay_window = 32 - # Base to use for calculating exponential back off, see IKEv2 RETRANSMISSION - # in strongswan.conf(5). - # retransmit_base = 1.8 - - # Timeout in seconds before sending first retransmit. - # retransmit_timeout = 4.0 - - # Number of times to retransmit a packet before giving up. - # retransmit_tries = 5 + # IKEv2 RETRANSMISSION +{% if options.retransmission.attempts is vyos_defined %} + retransmit_tries = {{ options.retransmission.attempts }} +{% endif %} +{% if options.retransmission.base is vyos_defined %} + retransmit_base = {{ options.retransmission.base }} +{% endif %} +{% if options.retransmission.timeout is vyos_defined %} + retransmit_timeout = {{ options.retransmission.timeout }} +{% endif %} # Interval in seconds to use when retrying to initiate an IKE_SA (e.g. if # DNS resolution failed), 0 to disable retries. |