diff options
| author | Jeff Leung <jleung@v10networks.ca> | 2014-05-25 21:07:25 -0500 |
|---|---|---|
| committer | Jeff Leung <jleung@v10networks.ca> | 2014-05-25 21:11:39 -0500 |
| commit | 4887af8ea6d7d1a5dfcd2c08d5aa3392635a9d84 (patch) | |
| tree | dc065ec63de316bd686a532070108dcabefe2863 /templates/vpn | |
| parent | 5a30b0c54e5e7cce51197c5ae86e9088c7e2e391 (diff) | |
| download | vyatta-cfg-vpn-4887af8ea6d7d1a5dfcd2c08d5aa3392635a9d84.tar.gz vyatta-cfg-vpn-4887af8ea6d7d1a5dfcd2c08d5aa3392635a9d84.zip | |
Initial MOBIKE Configuration Support
For IKEv2, there is support for MOBIKE which basically allows IPSec connections to roam from interface to interface. When MOBIKE is used, the IKE negoiation phase uses UDP port 4500 rather than using proto-51.
In strongSwan 4.5.x MOBIKE is automatically enabled for IKEv2 connections. We expose the ability to enable/disable MOBIKE to the user.
Diffstat (limited to 'templates/vpn')
| -rw-r--r-- | templates/vpn/ipsec/ike-group/node.tag/mobike/node.def | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/templates/vpn/ipsec/ike-group/node.tag/mobike/node.def b/templates/vpn/ipsec/ike-group/node.tag/mobike/node.def new file mode 100644 index 0000000..fe2656f --- /dev/null +++ b/templates/vpn/ipsec/ike-group/node.tag/mobike/node.def @@ -0,0 +1,5 @@ +help: Enable MOBIKE Support. MOBIKE is only valid for IKEv2 configurations. +type: txt +syntax:expression: $VAR(@) in "enabled", "disabled"; "must be enabled or disabled" +val_help: enabled; Enable MOBIKE ([DEFAULT] if IKEv2) +val_help: disabled; Disable MOBIKE |