ipsec: add ability to configure "none" SA

Also added myself as co-maintainer Signed-Off-By: Vitaly Protsko <villy@sft.ru> --- Makefile | 5 +++-- files/functions.sh | 35 +++++++++++++++++++++++++++++++++++ files/racoon | 4 ++++ files/racoon.init | 12 ++++++++---- 4 files changed, 50 insertions(+), 6 deletions(-)
2026-04-29 23:18:42 +01:00 · 2017-06-05 08:25:09 +03:00
parent 4eec08f225
commit df0e0bc17b
4 changed files with 50 additions and 6 deletions
@@ -51,6 +51,10 @@ config sainfo 'office'
 	option	p2_proposal	'example_prop2'
 	option	local_net	'192.168.8.0/24'
 	option	remote_net	'192.168.1.0/24'
+# you can exclude some local or remote
+# addresses from SA rules
+	list	local_exclude	'192.168.8.0/30'
+	list	remote_exclude	'192.168.1.128/29'

 config sainfo 'welcome'
 	option	p2_proposal	'example_in2'