]> git.ipfire.org Git - thirdparty/strongswan.git/blob - doc/src/forwardingstate.txt
- import of strongswan-2.7.0
[thirdparty/strongswan.git] / doc / src / forwardingstate.txt
1
2
3 .--------------.
4 | non-existant |
5 | policy |
6 `--------------'
7 |
8 | PF_ACQUIRE
9 |
10 |<---------.
11 V | new packet
12 .--------------. | (maybe resend PF_ACQUIRE)
13 | hold policy |--'
14 | |--.
15 `--------------' \ pass
16 | | \ msg .---------.
17 | | \ V | forward
18 | | .-------------. | packet
19 create | | | pass policy |--'
20 IPsec | | `-------------'
21 SA | |
22 | \
23 | \
24 V \ deny
25 .---------. \ msg
26 | encrypt | \
27 | policy | \ ,---------.
28 `---------' \ | | discard
29 \ V | packet
30 .-------------. |
31 | deny policy |--'
32 '-------------'
33
34
35 $Id: forwardingstate.txt,v 1.1 2004/03/15 20:35:24 as Exp $