summaryrefslogtreecommitdiffstats
path: root/components/onc/docs
diff options
context:
space:
mode:
authorpstew@chromium.org <pstew@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2014-05-13 00:51:28 +0000
committerpstew@chromium.org <pstew@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2014-05-13 00:51:28 +0000
commit9d34bbbbcbf5d292c6e204ef4cf30de66a05546b (patch)
tree79392b9ccd709a429479d90615f1ff76f0b8855a /components/onc/docs
parent7a557a625546ebc36e7148e1b0aee1dca7847064 (diff)
downloadchromium_src-9d34bbbbcbf5d292c6e204ef4cf30de66a05546b.zip
chromium_src-9d34bbbbcbf5d292c6e204ef4cf30de66a05546b.tar.gz
chromium_src-9d34bbbbcbf5d292c6e204ef4cf30de66a05546b.tar.bz2
Allow option to ignore default route
In OpenVPN, it is up to the client to decide whether or not to create a default route through the OpenVPN server. Even when the server supplies a gateway address, it isn't always clear if the intent is for the client to set a default route through this gateway. By default, ChromeOS creates a default route to the gateway. This CL adds an ONC configuration option to allow ONC to override this default behavior, thus providing the means for a "split tunnel" configuration in situations where the route configuration provided by the VPN server is amenable to this. Supplying this option does not override any explicit routes pushed by the server. BUG=370460 R=pneubeck@chromium.org Review URL: https://codereview.chromium.org/275723002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@269942 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'components/onc/docs')
-rw-r--r--components/onc/docs/onc_spec.html16
1 files changed, 16 insertions, 0 deletions
diff --git a/components/onc/docs/onc_spec.html b/components/onc/docs/onc_spec.html
index 10b2f0f..b93b151 100644
--- a/components/onc/docs/onc_spec.html
+++ b/components/onc/docs/onc_spec.html
@@ -1022,6 +1022,22 @@
Disables adaptive compression.
</dd>
+ <dt class="field">IgnoreDefaultRoute</dt>
+ <dd>
+ <span class="field_meta">
+ (optional, defaults to <span class="value">false</span>)
+ <span class="type">bool</span>
+ </span>
+ Omits a default route to the VPN gateway while the connection is active.
+ By default, the client creates a default route to the gateway address
+ advertised by the VPN server. Setting this value to
+ <span class="value">true</span> will allow split tunnelling for
+ configurations where the VPN server omits explicit default routes.
+ This is roughly equivalent to omitting "redirect-gateway" OpenVPN client
+ configuration option. If the server pushes a "redirect-gateway"
+ configuration flag to the client, this option is ignored.
+ </dd>
+
<dt class="field">KeyDirection</dt>
<dd>
<span class="field_meta">