sstp: T2960: migrate to get_config_dict() and reusable templates

1 files changed, 36 insertions, 0 deletions

diff --git a/data/templates/accel-ppp/config_chap_secrets_radius.j2 b/data/templates/accel-ppp/config_chap_secrets_radius.j2
new file mode 100644
index 000000000..c94e75a23
--- /dev/null
+++ b/data/templates/accel-ppp/config_chap_secrets_radius.j2
@@ -0,0 +1,36 @@
+{% if authentication.mode is defined and authentication.mode == 'local' %}

+[chap-secrets]

+chap-secrets={{ chap_secrets_file }}

+{% elif authentication.mode is defined and authentication.mode == 'radius' %}

+[radius]

+verbose=1

+{%   for server, options in authentication.radius.server.items() if not options.disable is defined %}

+server={{ server }},{{ options.key }},auth-port={{ options.port }},acct-port={{ options.acct_port }},req-limit=0,fail-time={{ options.fail_time }}

+{%   endfor %}

+{%   if authentication.radius.acct_interim_jitter is defined and authentication.radius.acct_interim_jitter is not none %}

+acct-interim-jitter={{ authentication.radius.acct_interim_jitter }}

+{%   endif %}

+acct-timeout={{ authentication.radius.acct_timeout }}

+timeout={{ authentication.radius.timeout }}

+max-try={{ authentication.radius.max_try }}

+{%   if authentication.radius.nas_identifier is defined and authentication.radius.nas_identifier is not none %}

+nas-identifier={{ authentication.radius.nas_identifier }}

+{%   endif %}

+{%   if authentication.radius.nas_ip_address is defined and authentication.radius.nas_ip_address is not none %}

+nas-ip-address={{ authentication.radius.nas_ip_address }}

+{%   endif %}

+{%   if authentication.radius.source_address is defined and authentication.radius.source_address is not none %}

+bind={{ authentication.radius.source_address }}

+{%   endif %}

+{% if authentication.radius.called_sid_format is defined and authentication.radius.called_sid_format is not none %}

+called-sid={{ authentication.radius.called_sid_format }}

+{% endif %}

+{%   if authentication.radius.dynamic_author.server is defined and authentication.radius.dynamic_author.server is not none %}

+dae-server={{ authentication.radius.dynamic_author.server }}:{{ authentication.radius.dynamic_author.port }},{{ authentication.radius.dynamic_author.key }}

+{%   endif -%}

+{% endif %}

+{# Both chap-secrets and radius block required the gw-ip-address #}

+{% if gateway_address is defined and gateway_address is not none %}

+gw-ip-address={{ gateway_address }}

+{% endif %}

+