From 5a09a105b5832e0a804ab403fc287e19ad782bb5 Mon Sep 17 00:00:00 2001
From: Daniil Baturin <daniil@baturin.org>
Date: Sun, 5 Aug 2018 01:30:08 +0200
Subject: T71: initial implementation of global IPsec settings. Only
 disable-route-autoinstall (install_routes = yes/no) for now.

---
 interface-definitions/ipsec-settings.xml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 interface-definitions/ipsec-settings.xml

(limited to 'interface-definitions/ipsec-settings.xml')

diff --git a/interface-definitions/ipsec-settings.xml b/interface-definitions/ipsec-settings.xml
new file mode 100644
index 000000000..8fb23940a
--- /dev/null
+++ b/interface-definitions/ipsec-settings.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0"?>
+<interfaceDefinition>
+  <node name="vpn">
+    <children>
+      <node name="ipsec">
+        <children>
+          <node name="settings" owner="${vyos_conf_scripts_dir}/ipsec-settings.py">
+            <properties>
+              <help>Global IPsec settings</help>
+            </properties>
+            <children>
+              <leafNode name="disable-route-autoinstall">
+                <properties>
+                  <valueless/>
+                  <help>Do not automatically install routes to remote networks</help>
+                </properties>
+              </leafNode>
+            </children>
+          </node>
+        </children>
+      </node>
+    </children>
+  </node>
+</interfaceDefinition>
-- 
cgit v1.2.3