From 78ea623df20b44309cc6ac9848ed18e97fc4ed03 Mon Sep 17 00:00:00 2001
From: Alex W <embezzle.dev@proton.me>
Date: Sun, 21 Apr 2024 21:59:56 +0100
Subject: T6237: IPSec remote access VPN: ability to set EAP ID of clients

---
 interface-definitions/vpn_ipsec.xml.in | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

(limited to 'interface-definitions')

diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in
index 833019d68..7f425d982 100644
--- a/interface-definitions/vpn_ipsec.xml.in
+++ b/interface-definitions/vpn_ipsec.xml.in
@@ -768,6 +768,26 @@
                     <children>
                       #include <include/ipsec/authentication-id.xml.i>
                       #include <include/ipsec/authentication-x509.xml.i>
+                      <leafNode name="eap-id">
+                        <properties>
+                          <help>Remote EAP ID for client authentication</help>
+                          <valueHelp>
+                            <format>txt</format>
+                            <description>Remote EAP ID for client authentication</description>
+                          </valueHelp>
+                          <completionHelp>
+                            <list>any</list>
+                          </completionHelp>
+                          <valueHelp>
+                            <format>any</format>
+                            <description>Allow any EAP ID</description>
+                          </valueHelp>
+                          <constraint>
+                            <regex>[[:ascii:]]{1,64}</regex>
+                          </constraint>
+                        </properties>
+                        <defaultValue>any</defaultValue>
+                      </leafNode>
                       <leafNode name="client-mode">
                         <properties>
                           <help>Client authentication mode</help>
-- 
cgit v1.2.3