summaryrefslogtreecommitdiff
path: root/docs/configuration/vpn
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-02-20 20:28:11 +0100
committerChristian Poessinger <christian@poessinger.com>2022-02-20 20:28:13 +0100
commit4395d0080a9238240c16657f711eb537195778eb (patch)
treed3fb9f95adaef64b3bde1aa28dd33991bc5801ce /docs/configuration/vpn
parent9ca9ddcb07ad9f2cbda516bb4cf801bcdcc84eb7 (diff)
downloadvyos-documentation-4395d0080a9238240c16657f711eb537195778eb.tar.gz
vyos-documentation-4395d0080a9238240c16657f711eb537195778eb.zip
openconnect: remove example b/c of missing PKI
OpenConnect lacks full documentation which would also include how to create and add use keys from the new PKI backend. For the time beeing we should not confuse users.
Diffstat (limited to 'docs/configuration/vpn')
-rw-r--r--docs/configuration/vpn/openconnect.rst27
1 files changed, 3 insertions, 24 deletions
diff --git a/docs/configuration/vpn/openconnect.rst b/docs/configuration/vpn/openconnect.rst
index 7ab53659..356b3322 100644
--- a/docs/configuration/vpn/openconnect.rst
+++ b/docs/configuration/vpn/openconnect.rst
@@ -54,30 +54,9 @@ Server Configuration
set vpn opneconnect network-settings client-ip-settings subnet <subnet>
set vpn openconnect network-settings name-server <address>
set vpn openconnect network-settings name-server <address>
- set vpn openconnect ssl ca-certificate <file>
- set vpn openconnect ssl certificate <file>
- set vpn openconnect ssl passphrase <file>
-
-
-*******
-Example
-*******
-
-Use local user name "user4" with password "SecretPassword"
-Client IP addresses will be provided from pool 100.64.0.0/24
-The Gateway IP Address must be in one of the routerĀ“s interfaces.
-
-.. code-block:: none
-
- set vpn openconnect authentication local-users username user4 password 'SecretPassword'
- set vpn openconnect authentication mode 'local'
- set vpn openconnect network-settings client-ip-settings subnet '100.64.0.0/24'
- set vpn openconnect network-settings name-server '10.1.1.1'
- set vpn openconnect network-settings name-server '10.1.1.2'
- set vpn openconnect ssl ca-certificate '/config/auth/fullchain.pem'
- set vpn openconnect ssl certificate '/config/auth/cert.pem'
- set vpn openconnect ssl passphrase '/config/auth/privkey.pem'
-
+ set vpn openconnect ssl ca-certificate <pki-ca-name>
+ set vpn openconnect ssl certificate <pki-cert-name>
+ set vpn openconnect ssl passphrase <pki-password>
************
Verification