<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/interface-definitions/include/ipsec, branch 1.4.0-rc3</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/marekm72/vyos-1x.git/atom?h=1.4.0-rc3</id>
<link rel='self' href='https://git.amelek.net/marekm72/vyos-1x.git/atom?h=1.4.0-rc3'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/'/>
<updated>2023-05-17T04:10:36+00:00</updated>
<entry>
<title>T5226: Combine ipv4-address and ipv6-address validators</title>
<updated>2023-05-17T04:10:36+00:00</updated>
<author>
<name>Indrajit Raychaudhuri</name>
<email>irc@indrajit.com</email>
</author>
<published>2023-05-17T01:49:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=96d846d27ac818ee9a23bb7194bb58cfb7093387'/>
<id>urn:sha1:96d846d27ac818ee9a23bb7194bb58cfb7093387</id>
<content type='text'>
Use a single ip-address validator to combine and replace ipv4-address
and ipv6-address validators.
</content>
</entry>
<entry>
<title>ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peer</title>
<updated>2022-09-16T11:53:41+00:00</updated>
<author>
<name>Viacheslav Hletenko</name>
<email>v.gletenko@vyos.io</email>
</author>
<published>2022-08-10T19:51:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=bd4588827b563022ce5fb98b1345b787b9194176'/>
<id>urn:sha1:bd4588827b563022ce5fb98b1345b787b9194176</id>
<content type='text'>
Migration and Change boolean nodes "enable/disable" to
disable-xxxx, enable-xxxx and just xxx for VPN IPsec
configurations

  - IKE changes:
      - replace 'ipsec ike-group &lt;tag&gt; mobike disable'
             =&gt; 'ipsec ike-group &lt;tag&gt; disable-mobike'
      - replace 'ipsec ike-group &lt;tag&gt; ikev2-reauth yes|no'
             =&gt; 'ipsec ike-group &lt;tag&gt; ikev2-reauth'
  - ESP changes:
      - replace 'ipsec esp-group &lt;tag&gt; compression enable'
             =&gt; 'ipsec esp-group &lt;tag&gt; compression'
  - PEER changes:
      - replace: 'peer &lt;tag&gt; id xxx'
              =&gt; 'peer &lt;tag&gt; local-id xxx'
      - replace: 'peer &lt;tag&gt; force-encapsulation enable'
              =&gt; 'peer &lt;tag&gt; force-udp-encapsulation'
      - add option: 'peer &lt;tag&gt; remote-address x.x.x.x'

Add 'peer &lt;name&gt; remote-address &lt;name&gt;' via migration script
</content>
</entry>
<entry>
<title>ipsec: T2816: add completion help for IP addresses to local-address node</title>
<updated>2022-05-19T18:57:16+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2022-05-19T18:57:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=55b075df8260b46541972d6f62bcc0956a7af50d'/>
<id>urn:sha1:55b075df8260b46541972d6f62bcc0956a7af50d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>xml: T4047: use full string match in the regex validator</title>
<updated>2022-04-29T17:51:50+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2022-04-29T17:51:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=80ecb1b7aaab47edeb355c3b74a763e940d88179'/>
<id>urn:sha1:80ecb1b7aaab47edeb355c3b74a763e940d88179</id>
<content type='text'>
</content>
</entry>
<entry>
<title>ipsec prefix: T4275: Fix for prefix val_help of remote-access and s2s vpn</title>
<updated>2022-03-07T09:44:08+00:00</updated>
<author>
<name>srividya0208</name>
<email>a.srividya@vyos.io</email>
</author>
<published>2022-03-07T09:44:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=27404f71c85187403b3ae1b73b95e6347e07ea97'/>
<id>urn:sha1:27404f71c85187403b3ae1b73b95e6347e07ea97</id>
<content type='text'>
It accepts network as the input value but the completion help is showing
ip address, continuation of previous commit
</content>
</entry>
<entry>
<title>xml: provide common "pre-shared-secret" include block</title>
<updated>2021-07-17T05:29:48+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2021-07-14T19:40:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=6a8080e1c0a7254ffb7046d543b9bff5618ff136'/>
<id>urn:sha1:6a8080e1c0a7254ffb7046d543b9bff5618ff136</id>
<content type='text'>
</content>
</entry>
<entry>
<title>pki: T3642: Migrate rsa-keys to PKI configuration</title>
<updated>2021-07-06T22:53:27+00:00</updated>
<author>
<name>sarthurdev</name>
<email>965089+sarthurdev@users.noreply.github.com</email>
</author>
<published>2021-07-06T21:19:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=5a7c46016a23387312b2c9e18528ad7bb20e8366'/>
<id>urn:sha1:5a7c46016a23387312b2c9e18528ad7bb20e8366</id>
<content type='text'>
</content>
</entry>
<entry>
<title>ipsec: T1210: T1251: add "local" traffic-selector include definition</title>
<updated>2021-07-04T19:02:54+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2021-07-04T19:02:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=1c727bd25ef28fb729f66072f026be560978853d'/>
<id>urn:sha1:1c727bd25ef28fb729f66072f026be560978853d</id>
<content type='text'>
Used by both site2site and remote-access/road-warrior VPN connections.
</content>
</entry>
<entry>
<title>ipsec: T2816: add include definition for ipsec local-address</title>
<updated>2021-07-04T18:52:36+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2021-07-04T18:52:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=3851818b7a2691f8cf016c4d15071cef8d235041'/>
<id>urn:sha1:3851818b7a2691f8cf016c4d15071cef8d235041</id>
<content type='text'>
</content>
</entry>
<entry>
<title>ipsec: T2816: provide x509 certificate base auth building blocks</title>
<updated>2021-07-03T17:09:47+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2021-07-03T17:08:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=2aec3e61c9130e942cb766aa0e5f4acf900dc921'/>
<id>urn:sha1:2aec3e61c9130e942cb766aa0e5f4acf900dc921</id>
<content type='text'>
</content>
</entry>
</feed>
