From: Tobias Brunner Date: Fri, 10 Mar 2017 15:03:14 +0000 (+0100) Subject: swanctl: Describe what happens when a FQDN is specified in local|remote_addrs X-Git-Tag: 5.5.2rc1~6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d5a19a17dc3a8ce17825f690777aaa3c9298b7b3;p=thirdparty%2Fstrongswan.git swanctl: Describe what happens when a FQDN is specified in local|remote_addrs --- diff --git a/src/swanctl/swanctl.opt b/src/swanctl/swanctl.opt index cd2d9142dd..142a271709 100644 --- a/src/swanctl/swanctl.opt +++ b/src/swanctl/swanctl.opt @@ -28,6 +28,9 @@ connections..local_addrs = %any connection from. As responder, the local destination address must match at least to one of the specified addresses, subnets or ranges. + If FQDNs are assigned they are resolved every time a configuration lookup + is done. If DNS resolution times out, the lookup is delayed for that time. + connections..remote_addrs = %any Remote address(es) to use for IKE communication, comma separated. @@ -38,6 +41,9 @@ connections..remote_addrs = %any connection to. As responder, the initiator source address must match at least to one of the specified addresses, subnets or ranges. + If FQDNs are assigned they are resolved every time a configuration lookup + is done. If DNS resolution times out, the lookup is delayed for that time. + To initiate a connection, at least one specific address or DNS name must be specified.