From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 14 May 2025 08:13:44 +0000 (+0200)
Subject: vici: Make IP-TFS mode configurable
X-Git-Tag: 6.0.2dr1~4^2~8
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1afc76dd56e0d0d1dd01c4cc63136012a5eb4d04;p=thirdparty%2Fstrongswan.git

vici: Make IP-TFS mode configurable
---

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index a85cccd9d5..6ea239f0a1 100644
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -904,6 +904,7 @@ CALLBACK(parse_mode, bool,
 		{ "tunnel",				MODE_TUNNEL		},
 		{ "transport",			MODE_TRANSPORT	},
 		{ "transport_proxy",	MODE_TRANSPORT	},
+		{ "iptfs",				MODE_IPTFS		},
 		{ "beet",				MODE_BEET		},
 		{ "drop",				MODE_DROP		},
 		{ "pass",				MODE_PASS		},
diff --git a/src/swanctl/swanctl.opt b/src/swanctl/swanctl.opt
index cabc90f8c9..b13ef9b60d 100644
--- a/src/swanctl/swanctl.opt
+++ b/src/swanctl/swanctl.opt
@@ -920,12 +920,13 @@ connections.<conn>.children.<child>.hostaccess = no
 	Hostaccess variable to pass to **updown** script.
 
 connections.<conn>.children.<child>.mode = tunnel
-	IPsec Mode to establish (_tunnel_, _transport_, _transport_proxy_, _beet_,
-	_pass_ or _drop_).
+	IPsec Mode to establish (_tunnel_, _transport_, _transport_proxy_, _iptfs_,
+	_beet_, _pass_ or _drop_).
 
 	IPsec Mode to establish CHILD_SA with. _tunnel_ negotiates the CHILD_SA
 	in IPsec Tunnel Mode, whereas _transport_ uses IPsec Transport Mode.
 	_transport_proxy_ signifying the special Mobile IPv6 Transport Proxy Mode.
+	_iptfs_ is IP-TFS tunnel mode with aggregation and fragmentation,
 	_beet_ is the Bound End to End Tunnel mixture mode, working with fixed inner
 	addresses without the need to include them in each packet.