From d5a19a17dc3a8ce17825f690777aaa3c9298b7b3 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Fri, 10 Mar 2017 16:03:14 +0100 Subject: [PATCH] swanctl: Describe what happens when a FQDN is specified in local|remote_addrs --- src/swanctl/swanctl.opt | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/swanctl/swanctl.opt b/src/swanctl/swanctl.opt index cd2d9142d..142a27170 100644 --- a/src/swanctl/swanctl.opt +++ b/src/swanctl/swanctl.opt @@ -28,6 +28,9 @@ connections..local_addrs = %any connection from. As responder, the local destination address must match at least to one of the specified addresses, subnets or ranges. + If FQDNs are assigned they are resolved every time a configuration lookup + is done. If DNS resolution times out, the lookup is delayed for that time. + connections..remote_addrs = %any Remote address(es) to use for IKE communication, comma separated. @@ -38,6 +41,9 @@ connections..remote_addrs = %any connection to. As responder, the initiator source address must match at least to one of the specified addresses, subnets or ranges. + If FQDNs are assigned they are resolved every time a configuration lookup + is done. If DNS resolution times out, the lookup is delayed for that time. + To initiate a connection, at least one specific address or DNS name must be specified.