diff options
| author | aapostoliuk <aapostoliuk@vyos.io> | 2025-07-09 18:06:13 +0300 |
|---|---|---|
| committer | aapostoliuk <a.apostoliuk@vyos.io> | 2025-07-18 13:08:10 +0300 |
| commit | f0ac13f3683d593e7700c46fc227cf223e0c79d5 (patch) | |
| tree | 9491a031b7d654610894832ef2f988bdace958cb /data | |
| parent | 4b34c65d4129eede784d5747653bd81f8d40f299 (diff) | |
| download | vyos-1x-f0ac13f3683d593e7700c46fc227cf223e0c79d5.tar.gz vyos-1x-f0ac13f3683d593e7700c46fc227cf223e0c79d5.zip | |
ipsec: T7504: Added IKEv2 retransmission options
Added IKEv2 retransmission options (base, tries, timeout).
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ipsec/charon.j2 | 19 |
1 files changed, 10 insertions, 9 deletions
diff --git a/data/templates/ipsec/charon.j2 b/data/templates/ipsec/charon.j2 index 388559af8..a9108eeda 100644 --- a/data/templates/ipsec/charon.j2 +++ b/data/templates/ipsec/charon.j2 @@ -202,15 +202,16 @@ charon { # Size of the AH/ESP replay window, in packets. # replay_window = 32 - # Base to use for calculating exponential back off, see IKEv2 RETRANSMISSION - # in strongswan.conf(5). - # retransmit_base = 1.8 - - # Timeout in seconds before sending first retransmit. - # retransmit_timeout = 4.0 - - # Number of times to retransmit a packet before giving up. - # retransmit_tries = 5 + # IKEv2 RETRANSMISSION +{% if options.retransmission.attempts is vyos_defined %} + retransmit_tries = {{ options.retransmission.attempts }} +{% endif %} +{% if options.retransmission.base is vyos_defined %} + retransmit_base = {{ options.retransmission.base }} +{% endif %} +{% if options.retransmission.timeout is vyos_defined %} + retransmit_timeout = {{ options.retransmission.timeout }} +{% endif %} # Interval in seconds to use when retrying to initiate an IKE_SA (e.g. if # DNS resolution failed), 0 to disable retries. |