summaryrefslogtreecommitdiff
path: root/interface-definitions/include
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2023-09-29 07:26:31 +0200
committerGitHub <noreply@github.com>2023-09-29 07:26:31 +0200
commit400df973d3518e9f18cb84b52ca89e08a399e461 (patch)
tree9b9e06d73009065ecbac1d5a4da2cb94018d7e53 /interface-definitions/include
parentfed59f9bddead060275f368de69e4e4470015ca9 (diff)
parent784fb7dc2ccc63789ed85d803e3ae41eef0e0253 (diff)
downloadvyos-1x-400df973d3518e9f18cb84b52ca89e08a399e461.tar.gz
vyos-1x-400df973d3518e9f18cb84b52ca89e08a399e461.zip
Merge pull request #2256 from zdc/T5577-circinus
T5577: Optimized PAM configs for RADIUS/TACACS+
Diffstat (limited to 'interface-definitions/include')
-rw-r--r--interface-definitions/include/radius-server-ipv4-ipv6.xml.i20
1 files changed, 20 insertions, 0 deletions
diff --git a/interface-definitions/include/radius-server-ipv4-ipv6.xml.i b/interface-definitions/include/radius-server-ipv4-ipv6.xml.i
index efd418bb2..a0cdcd7c3 100644
--- a/interface-definitions/include/radius-server-ipv4-ipv6.xml.i
+++ b/interface-definitions/include/radius-server-ipv4-ipv6.xml.i
@@ -46,6 +46,26 @@
<multi/>
</properties>
</leafNode>
+ <leafNode name="security-mode">
+ <properties>
+ <help>Security mode for RADIUS authentication</help>
+ <completionHelp>
+ <list>mandatory optional</list>
+ </completionHelp>
+ <valueHelp>
+ <format>mandatory</format>
+ <description>Deny access immediately if RADIUS answers with Access-Reject</description>
+ </valueHelp>
+ <valueHelp>
+ <format>optional</format>
+ <description>Pass to the next authentication method if RADIUS answers with Access-Reject</description>
+ </valueHelp>
+ <constraint>
+ <regex>(mandatory|optional)</regex>
+ </constraint>
+ </properties>
+ <defaultValue>optional</defaultValue>
+ </leafNode>
</children>
</node>
<!-- include end -->