ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

ike: Optionally use DPD to check if the current path still works 

We could maybe check the duration of the last stale condition or when
the last packet was sent as filter to avoid unnecessary updates.
This commit is contained in:
Tobias Brunner 2020-03-19 16:04:01 +01:00
parent 664389ebc4
commit 6524bd3cd5
2 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
conf/options/charon.opt
View File

@ -40,6 +40,17 @@ charon.cache_crls = no
Certification Authority (CA) to **/etc/ipsec.d/crls** (stroke) or
**/etc/swanctl/x509crl** (vici), respectively.
charon.check_current_path = no
Whether to use DPD to check if the current path still works after any
changes to interfaces/addresses.
By default, after detecting any changes to interfaces and/or addresses no
action is taken if the current path to the remote peer still looks usable.
Enabling this option will use DPD to check if the path actually still works,
or, for instance, the peer removed the state after a longer phase without
connectivity. It will also trigger a MOBIKE update if NAT mappings were
removed during the downtime.
charon.cisco_unity = no
Send Cisco Unity vendor ID payload (IKEv1 only).

8
src/libcharon/sa/ike_sa.c
View File

@ -2708,6 +2708,14 @@ METHOD(ike_sa_t, roam, status_t,
this->task_manager->queue_mobike(this->task_manager, FALSE, TRUE);
return this->task_manager->initiate(this->task_manager);
}
if (lib->settings->get_bool(lib->settings,
"%s.check_current_path", FALSE, lib->ns) &&
!this->task_manager->busy(this->task_manager))
{
DBG1(DBG_IKE, "checking if current path still works using DPD");
this->task_manager->queue_dpd(this->task_manager);
return this->task_manager->initiate(this->task_manager);
}
return SUCCESS;
}