Update strongswan settings for IKE_SA duplicheck.

- update app logger level to INFO.
alibaba · Mar 31, 2015 · b6ff370 · b6ff370
1 parent 4aec468
commit b6ff370
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/rc/strongswan.conf b/rc/strongswan.conf
@@ -5,7 +5,7 @@
 # Configuration changes should be made in the included files
 
 charon {
-    duplicheck.enable = no
+    duplicheck.enable = yes
     load_modular = yes
     filelog {
         /var/log/strongswan.charon.log {

diff --git a/website/__init__.py b/website/__init__.py
@@ -26,6 +26,7 @@
 file_handler.setLevel(logging.INFO)
 file_handler.setFormatter(Formatter('%(asctime)s %(levelname)s: %(message)s'))
 app.logger.addHandler(file_handler)
+app.logger.setLevel(logging.INFO)
 
 from flask import request_started, got_request_exception
 from website.helpers import log_request, log_exception

diff --git a/website/vpn/sts/templates/sts/ipsec.conf b/website/vpn/sts/templates/sts/ipsec.conf
@@ -1,5 +1,5 @@
 config setup
-    uniqueids=never
+    uniqueids=yes
 
 conn %defualt
     ikelifetime=60h