summaryrefslogtreecommitdiff
path: root/templates/vpn
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@baturin.org>2015-05-04 00:35:54 +0200
committerDaniil Baturin <daniil@baturin.org>2015-05-04 00:35:54 +0200
commita914ffc44c888dc2591965c36363aa2a8de4a3bd (patch)
tree5b0d62f4566e607a96674c0710ff02bb985f0e3b /templates/vpn
parent158f7b865099010be751517d65c223c12c60dbdd (diff)
downloadvyatta-cfg-vpn-a914ffc44c888dc2591965c36363aa2a8de4a3bd.tar.gz
vyatta-cfg-vpn-a914ffc44c888dc2591965c36363aa2a8de4a3bd.zip
Bug #469: add options for AES-128/256-GCM mode.
Diffstat (limited to 'templates/vpn')
-rw-r--r--templates/vpn/ipsec/esp-group/node.tag/proposal/node.tag/encryption/node.def3
-rw-r--r--templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/encryption/node.def3
2 files changed, 6 insertions, 0 deletions
diff --git a/templates/vpn/ipsec/esp-group/node.tag/proposal/node.tag/encryption/node.def b/templates/vpn/ipsec/esp-group/node.tag/proposal/node.tag/encryption/node.def
index 1c02803..0e8fd2d 100644
--- a/templates/vpn/ipsec/esp-group/node.tag/proposal/node.tag/encryption/node.def
+++ b/templates/vpn/ipsec/esp-group/node.tag/proposal/node.tag/encryption/node.def
@@ -2,6 +2,9 @@ help: Encryption algorithm
type: txt
default: "aes128"
syntax:expression: $VAR(@) in "aes128", "aes256", "3des"; "must be aes128, or aes256, or 3des"
+syntax:expression: $VAR(@) in "aes128", "aes256", "3des", "aes128gcm128", "aes256gcm128"; "must be aes128, or aes128gcm128, or aes256, or aes256gcm128, or 3des"
val_help: aes128; AES-128 encryption (default)
val_help: aes256; AES-256 encryption
+val_help: aes128gcm128; AES-128 encryption with Galois Counter Mode 128-bit
+val_help: aes256gcm128; AES-256 encryption with Galois Counter Mode 128-bit
val_help: 3des; 3DES encryption
diff --git a/templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/encryption/node.def b/templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/encryption/node.def
index 1c02803..0e8fd2d 100644
--- a/templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/encryption/node.def
+++ b/templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/encryption/node.def
@@ -2,6 +2,9 @@ help: Encryption algorithm
type: txt
default: "aes128"
syntax:expression: $VAR(@) in "aes128", "aes256", "3des"; "must be aes128, or aes256, or 3des"
+syntax:expression: $VAR(@) in "aes128", "aes256", "3des", "aes128gcm128", "aes256gcm128"; "must be aes128, or aes128gcm128, or aes256, or aes256gcm128, or 3des"
val_help: aes128; AES-128 encryption (default)
val_help: aes256; AES-256 encryption
+val_help: aes128gcm128; AES-128 encryption with Galois Counter Mode 128-bit
+val_help: aes256gcm128; AES-256 encryption with Galois Counter Mode 128-bit
val_help: 3des; 3DES encryption