Page MenuHomeVyOS Platform

Support configuring IPSec SA bytes
Closed, ResolvedPublicFEATURE REQUEST

Description

Once can not only have the SA change after xx seconds, but also after yy bytes. This is supported by StrongSwan but missing on the CLI.

lifebytes = <number>
the number of bytes transmitted over an IPsec SA before it expires. Not supported for IKEv1 connections prior to 5.0.0.
lifepackets = <number>
the number of packets transmitted over an IPsec SA before it expires. Not supported for IKEv1 connections prior to 5.0.0.

https://wiki.strongswan.org/projects/strongswan/wiki/ExpiryRekey

Details

Version
1.2.3
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

c-po edited a custom field.
c-po changed Version from - to 1.2.3.
erkin set Issue type to Feature (new functionality).Aug 31 2021, 6:09 PM
Viacheslav changed the task status from Open to In progress.Feb 20 2022, 4:47 PM
Viacheslav claimed this task.