AETHER-1094 Update strongswan role
- Update VTI up/down script
- Make reauth option configurable
- Make auto option configurable
Change-Id: Ibeb65403387fe56445ce3f93f078418522ea60cf
diff --git a/defaults/main.yml b/defaults/main.yml
index 5261e7a..617ebf6 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -31,6 +31,13 @@
# NOTE: only psk is supported
strongswan_conf_auth_type: "psk"
+# What operation should be done automatically at IPsec startup
+# Acceptable values are add, start, or route
+strongswan_conf_auto: "add"
+
+# Whether rekeying of an IKE_SA should also reauthenticate the peer
+strongswan_conf_reauth: "no"
+
# Handle routes in strongSwan or not
# Set no if VPNs are route based
strongswan_conf_install_routes: false