From 0b93fce06526a2826c19adcbb25874e51cccf68e Mon Sep 17 00:00:00 2001
From: sarthurdev <965089+sarthurdev@users.noreply.github.com>
Date: Mon, 5 Jul 2021 16:22:54 +0200
Subject: ipsec: T1210: T1251: Add more features to remote-access connections
- Adds client/server authentication methods.
- Adds basic verification to remote-access.
- Adds DHCP pool and options to remote-access.
- Cleanup unused PKI files.
---
interface-definitions/vpn_ipsec.xml.in | 82 ++++++++++++++++++++++++++++++++++
1 file changed, 82 insertions(+)
(limited to 'interface-definitions/vpn_ipsec.xml.in')
diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in
index f6b18d1d5..4425ab02a 100644
--- a/interface-definitions/vpn_ipsec.xml.in
+++ b/interface-definitions/vpn_ipsec.xml.in
@@ -648,6 +648,37 @@
+
+
+ remote-access global options
+
+
+
+
+ DHCP pool options for remote-access
+
+
+
+
+ Interface with DHCP server to use
+
+
+
+
+
+
+
+ DHCP server address
+
+ ipv4
+ IPv4 address of the DHCP server
+
+
+
+
+
+
+
@@ -720,6 +751,26 @@
#include
#include
+
+
+ Client authentication mode
+
+ eap-tls eap-mschapv2
+
+
+ eap-tls
+ EAP-TLS
+
+
+ eap-mschapv2
+ EAP-MSCHAPv2
+
+
+ ^(eap-tls|eap-mschapv2)$
+
+
+ eap-mschapv2
+
Local user authentication for PPPoE server
@@ -740,6 +791,31 @@
+
+
+ Server authentication mode
+
+ pre-shared-secret x509
+
+
+ pre-shared-secret
+ pre-shared-secret_description
+
+
+ x509
+ x509_description
+
+
+ ^(pre-shared-secret|x509)$
+
+
+ x509
+
+
+
+ Pre-shared-secret used for server authentication
+
+
#include
@@ -753,6 +829,12 @@
IP address pool for remote-access users
+
+
+ Enable DHCP pool for clients on this connection
+
+
+
Local IPv4 or IPv6 pool prefix exclusions
--
cgit v1.2.3