summaryrefslogtreecommitdiff
path: root/templates/vpn/ipsec
diff options
context:
space:
mode:
authorJeff Leung <jleung@v10networks.ca>2014-05-21 21:34:31 -0500
committerJeff Leung <jleung@v10networks.ca>2014-05-21 21:47:43 -0500
commit000a81bb28ed23b4d4ee359cf5f12bfbb0275841 (patch)
treec99dcf9fbf514f111512e22d3e2e97ebffc41aea /templates/vpn/ipsec
parentbdf73b3e470ea69332d69e67a757792ce5af3dbd (diff)
downloadvyatta-cfg-vpn-000a81bb28ed23b4d4ee359cf5f12bfbb0275841.tar.gz
vyatta-cfg-vpn-000a81bb28ed23b4d4ee359cf5f12bfbb0275841.zip
Adding initial support for IKEv2/IKEv1 Site-to-Site VPN's by adding the optional "vpn ipsec ike-group <IKEGROUP> key-exchange" parameter.
Diffstat (limited to 'templates/vpn/ipsec')
-rw-r--r--templates/vpn/ipsec/ike-group/node.tag/key-exchange/node.def7
1 files changed, 7 insertions, 0 deletions
diff --git a/templates/vpn/ipsec/ike-group/node.tag/key-exchange/node.def b/templates/vpn/ipsec/ike-group/node.tag/key-exchange/node.def
new file mode 100644
index 0000000..e3555d4
--- /dev/null
+++ b/templates/vpn/ipsec/ike-group/node.tag/key-exchange/node.def
@@ -0,0 +1,7 @@
+help: Key Exchange Version
+type: txt
+default: "ikev1"
+syntax:expression: $VAR(@) in "ike", "ikev1", "ikev2"; "must be ike, ikev1 or ikev2"
+val_help: ike; Automatically negoiatate Key Exchange version
+val_help: ikev1; Force IKEv1 for Key Exchange [DEFAULT]
+val_help: ikev2; Force IKEv2 for Key Exchange