From ce3847239493d76bd0462e2a7b1f5cca41c57457 Mon Sep 17 00:00:00 2001 From: Christian Poessinger Date: Sat, 3 Jul 2021 22:29:46 +0200 Subject: ipsec: T2816: remove erroneously added config snipped for road-warriors Commit 32fab6c7c ("ipsec: T2816: provide esp and ike-group XML building block") by accident added an IKEv2 road-warrior configuration to swanctl template. The config blog was never activate as the CLI nodes are still missing. Still unclean :(. --- data/templates/ipsec/swanctl.conf.tmpl | 22 ---------------------- 1 file changed, 22 deletions(-) (limited to 'data/templates') diff --git a/data/templates/ipsec/swanctl.conf.tmpl b/data/templates/ipsec/swanctl.conf.tmpl index 06fd8e8c2..cafe52e78 100644 --- a/data/templates/ipsec/swanctl.conf.tmpl +++ b/data/templates/ipsec/swanctl.conf.tmpl @@ -13,28 +13,6 @@ connections { {{ peer_tmpl.conn(peer, peer_conf, ike_group, esp_group) }} {% endfor %} {% endif %} -{% if remote_access is defined and remote_access is not none %} -{% set ike = ike_group[peer_conf.ike_group] %} - road_warrior { - proposals = {{ ike | get_esp_ike_cipher | join(',') }} - version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }} - local_addrs = 192.168.0.1 - local { - auth = eap-peap - certs = moonCert.pem - } - remote { - auth = eap-peap - } - send_certreq = no - children { - net { - local_ts = 10.1.0.0/16 - esp_proposals = {{ esp_group[peer_conf.default_esp_group] | get_esp_ike_cipher | join(',') }} - } - } - } -{% endif %} } secrets { -- cgit v1.2.3