Action to perform after loading the configuration.
- The default of
noneloads the connection only, which then can be manually initiated or used as a responder configuration. - The value
trapinstalls a trap policy, which triggers the tunnel as soon as matching traffic has been detected. - The value
startinitiates the connection actively. - Since version 5.9.6 two modes above can be combined with
trap|start, to immediately initiate a connection for which trap policies have been installed.
When unloading or replacing a CHILD_SA configuration having a start_action different from none, the inverse action is performed. Configurations with start get closed, while such with trap get uninstalled.
StrongSwan default: "none"
Declarations
Type
null or one of "none", "trap", "start", "trap|start"Default
null