services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.policies_fwd_out

Whether to install outbound FWD IPsec policies or not. Enabling this is required in case there is a drop policy that would match and block forwarded traffic for this CHILD_SA. Since 5.5.1.

StrongSwan default: false

Type
null or boolean
Default
null
Declared
<nixpkgs/nixos/modules/services/networking/strongswan-swanctl/module.nix>