diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2022-09-29 17:02:30 +0300 |
|---|---|---|
| committer | Viacheslav Hletenko <v.gletenko@vyos.io> | 2022-09-29 17:16:28 +0300 |
| commit | 4dabe5123f53386874b8c7da03ad69c51d4d71ff (patch) | |
| tree | 18521f6f83955675567fdc010d1438c6a4a52588 /docs/configuration/vpn/rsa-keys.rst | |
| parent | 380ad169a9f8bb4c4860d9e635bef6923c9ffc71 (diff) | |
| download | vyos-documentation-4dabe5123f53386874b8c7da03ad69c51d4d71ff.tar.gz vyos-documentation-4dabe5123f53386874b8c7da03ad69c51d4d71ff.zip | |
ipsec: T4118: Change IPSec syntax
Migration and Change boolean nodes "enable/disable" to
disable-xxxx, enable-xxxx and just xxx for VPN IPsec
configurations
- IKE changes:
- replace 'ipsec ike-group <tag> mobike disable'
=> 'ipsec ike-group <tag> disable-mobike'
- replace 'ipsec ike-group <tag> ikev2-reauth yes|no'
=> 'ipsec ike-group <tag> ikev2-reauth'
- ESP changes:
- replace 'ipsec esp-group <tag> compression enable'
=> 'ipsec esp-group <tag> compression'
- PEER changes:
- replace: 'peer <tag> id xxx'
=> 'peer <tag> local-id xxx'
- replace: 'peer <tag> force-encapsulation enable'
=> 'peer <tag> force-udp-encapsulation'
- add option: 'peer <tag> remote-address x.x.x.x'
If peer name is IPv4 or IPv6 address add remote-address via
migration script
Diffstat (limited to 'docs/configuration/vpn/rsa-keys.rst')
0 files changed, 0 insertions, 0 deletions