From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 20 Mar 2013 14:57:13 +0000 (+0100)
Subject: Add an option to disable the farp plugin
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6ea4f85f76543fb7c6c73359a13c773aa7cb5db0;p=thirdparty%2Fstrongswan.git

Add an option to disable the farp plugin
---

diff --git a/man/strongswan.conf.5.in b/man/strongswan.conf.5.in
index 3d80d7602c..db19c7ef89 100644
--- a/man/strongswan.conf.5.in
+++ b/man/strongswan.conf.5.in
@@ -539,6 +539,9 @@ Start phase2 EAP TNC protocol after successful client authentication
 .BR charon.plugins.eap-ttls.request_peer_auth " [no]"
 Request peer authentication based on a client certificate
 .TP
+.BR charon.plugins.farp.enable " [yes]"
+Enable faking of ARP responses for remote IP addresses of established CHILD_SAs
+.TP
 .BR charon.plugins.ha.fifo_interface " [yes]"
 
 .TP
diff --git a/src/libcharon/plugins/farp/farp_plugin.c b/src/libcharon/plugins/farp/farp_plugin.c
index a30c119628..cc8599c9fb 100644
--- a/src/libcharon/plugins/farp/farp_plugin.c
+++ b/src/libcharon/plugins/farp/farp_plugin.c
@@ -65,6 +65,12 @@ plugin_t *farp_plugin_create()
 {
 	private_farp_plugin_t *this;
 
+	if (!lib->settings->get_bool(lib->settings, "%s.plugins.farp.enable", TRUE,
+								 charon->name))
+	{
+		return NULL;
+	}
+
 	INIT(this,
 		.public = {
 			.plugin = {