From 69614d7d501811164010a83441ea807716903cf1 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 20 Jul 2021 20:58:05 +0200
Subject: ipsec: T1210: add op-mode command for macOS and iOS profile
 generation

generate ipsec mac-ios-profile <connection> remote <ip|fqdn>

will generate a matching IPSec profile which can be loaded on an iOS device.
---
 op-mode-definitions/generate-ipsec-profile.xml.in | 76 +++++++++++++++++++++++
 1 file changed, 76 insertions(+)
 create mode 100644 op-mode-definitions/generate-ipsec-profile.xml.in

(limited to 'op-mode-definitions/generate-ipsec-profile.xml.in')

diff --git a/op-mode-definitions/generate-ipsec-profile.xml.in b/op-mode-definitions/generate-ipsec-profile.xml.in
new file mode 100644
index 000000000..d1e5efd20
--- /dev/null
+++ b/op-mode-definitions/generate-ipsec-profile.xml.in
@@ -0,0 +1,76 @@
+<?xml version="1.0"?>
+<interfaceDefinition>
+  <node name="generate">
+    <children>
+      <node name="ipsec">
+        <properties>
+          <help>Generate IPsec related configurations</help>
+        </properties>
+        <children>
+          <tagNode name="mac-ios-profile">
+            <properties>
+              <help>Generate Apple iOS profile from IPsec connection profile</help>
+              <completionHelp>
+                <path>vpn ipsec remote-access connection</path>
+              </completionHelp>
+            </properties>
+            <children>
+              <tagNode name="remote">
+                <properties>
+                  <help>Remote address where the client will connect to</help>
+                  <completionHelp>
+                    <list>&lt;fqdn&gt;</list>
+                    <script>${vyos_completion_dir}/list_local_ips.sh --both</script>
+                  </completionHelp>
+                </properties>
+                <command>${vyos_op_scripts_dir}/ikev2_profile_generator.py --connection "$4" --remote "$6"</command>
+                <children>
+                  <tagNode name="name">
+                    <properties>
+                      <help>Connection name as seen in the VPN application</help>
+                      <completionHelp>
+                        <list>&lt;name&gt;</list>
+                      </completionHelp>
+                    </properties>
+                    <command>${vyos_op_scripts_dir}/ikev2_profile_generator.py --connection "$4" --remote "$6" --name "$8"</command>
+                    <children>
+                      <tagNode name="profile">
+                        <properties>
+                          <help>Profile name as seen under system profiles</help>
+                          <completionHelp>
+                            <list>&lt;name&gt;</list>
+                          </completionHelp>
+                        </properties>
+                        <command>${vyos_op_scripts_dir}/ikev2_profile_generator.py --connection "$4" --remote "$6" --name "$8" --profile "${10}"</command>
+                      </tagNode>
+                    </children>
+                  </tagNode>
+                  <tagNode name="profile">
+                    <properties>
+                      <help>Profile name as seen under system profiles</help>
+                      <completionHelp>
+                        <list>&lt;name&gt;</list>
+                      </completionHelp>
+                    </properties>
+                    <command>${vyos_op_scripts_dir}/ikev2_profile_generator.py --connection "$4" --remote "$6" --profile "$8"</command>
+                    <children>
+                      <tagNode name="name">
+                        <properties>
+                          <help>Connection name as seen in the VPN application</help>
+                          <completionHelp>
+                            <list>&lt;name&gt;</list>
+                          </completionHelp>
+                        </properties>
+                        <command>${vyos_op_scripts_dir}/ikev2_profile_generator.py --connection "$4" --remote "$6" --profile "$8" --name "${10}"</command>
+                      </tagNode>
+                    </children>
+                  </tagNode>
+                </children>
+              </tagNode>
+            </children>
+          </tagNode>
+        </children>
+      </node>
+    </children>
+  </node>
+</interfaceDefinition>
-- 
cgit v1.2.3