diff options
author | pstew@chromium.org <pstew@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2014-05-13 00:51:28 +0000 |
---|---|---|
committer | pstew@chromium.org <pstew@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2014-05-13 00:51:28 +0000 |
commit | 9d34bbbbcbf5d292c6e204ef4cf30de66a05546b (patch) | |
tree | 79392b9ccd709a429479d90615f1ff76f0b8855a /components/onc/docs/onc_spec.html | |
parent | 7a557a625546ebc36e7148e1b0aee1dca7847064 (diff) | |
download | chromium_src-9d34bbbbcbf5d292c6e204ef4cf30de66a05546b.zip chromium_src-9d34bbbbcbf5d292c6e204ef4cf30de66a05546b.tar.gz chromium_src-9d34bbbbcbf5d292c6e204ef4cf30de66a05546b.tar.bz2 |
Allow option to ignore default route
In OpenVPN, it is up to the client to decide whether or not to
create a default route through the OpenVPN server. Even when the
server supplies a gateway address, it isn't always clear if the
intent is for the client to set a default route through this
gateway.
By default, ChromeOS creates a default route to the gateway.
This CL adds an ONC configuration option to allow ONC to override
this default behavior, thus providing the means for a "split
tunnel" configuration in situations where the route configuration
provided by the VPN server is amenable to this. Supplying this
option does not override any explicit routes pushed by the server.
BUG=370460
R=pneubeck@chromium.org
Review URL: https://codereview.chromium.org/275723002
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@269942 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'components/onc/docs/onc_spec.html')
-rw-r--r-- | components/onc/docs/onc_spec.html | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/components/onc/docs/onc_spec.html b/components/onc/docs/onc_spec.html index 10b2f0f..b93b151 100644 --- a/components/onc/docs/onc_spec.html +++ b/components/onc/docs/onc_spec.html @@ -1022,6 +1022,22 @@ Disables adaptive compression. </dd> + <dt class="field">IgnoreDefaultRoute</dt> + <dd> + <span class="field_meta"> + (optional, defaults to <span class="value">false</span>) + <span class="type">bool</span> + </span> + Omits a default route to the VPN gateway while the connection is active. + By default, the client creates a default route to the gateway address + advertised by the VPN server. Setting this value to + <span class="value">true</span> will allow split tunnelling for + configurations where the VPN server omits explicit default routes. + This is roughly equivalent to omitting "redirect-gateway" OpenVPN client + configuration option. If the server pushes a "redirect-gateway" + configuration flag to the client, this option is ignored. + </dd> + <dt class="field">KeyDirection</dt> <dd> <span class="field_meta"> |