diff options
| author | Mohit Mehta <mohit.mehta@vyatta.com> | 2009-11-24 21:33:31 -0800 |
|---|---|---|
| committer | Mohit Mehta <mohit.mehta@vyatta.com> | 2010-01-12 16:53:33 -0800 |
| commit | 229dd4af29f29d8a2a4983a811b0c4bef7111892 (patch) | |
| tree | 54ce127ca00f8ee37c6e75e245ec439f27ea1d05 /templates | |
| parent | 275789c02381ebe359d2f0a970aabcf7587e0f58 (diff) | |
| download | vyatta-cfg-vpn-229dd4af29f29d8a2a4983a811b0c4bef7111892.tar.gz vyatta-cfg-vpn-229dd4af29f29d8a2a4983a811b0c4bef7111892.zip | |
First pass code changes to vyatta-cfg-vpn for migration to strongswan :
Remove CLI support and back-end code for unsupported parameters
* No aggressive mode support in strongswan
* remove syslog facility.level CLI. strongswan uses
authpriv facility by default, no syslog parameter support
* remove Robert's disable-uniqreqids option for now. need to get
strongswan to do the same thing first
Remove Openswan specific parameters added to workaroung bugs
* remove plutowait, this was added to workaround Openswan Bug 412
* remove nhelpers, this was added to workaround Openswan Bug 198
Other Changes
* add '!' at the end of ike and esp proposal list to signify end of list
* replace `ipsec start` commands with built-in commands for
`ipsec starter` control utility
* replace `ipsec auto` with `ipsec whack` commands. Still need to figure
out if `ipsec auto --add|--up $connection` could be replaces by simply
using `ipsec update` in stronswan
* change pluto.ctl path
Diffstat (limited to 'templates')
4 files changed, 0 insertions, 33 deletions
diff --git a/templates/vpn/ipsec/disable-uniqreqids/node.def b/templates/vpn/ipsec/disable-uniqreqids/node.def deleted file mode 100644 index 18fb099..0000000 --- a/templates/vpn/ipsec/disable-uniqreqids/node.def +++ /dev/null @@ -1 +0,0 @@ -help: Disable requirement for unique IDs in the Security Database diff --git a/templates/vpn/ipsec/ike-group/node.tag/aggressive-mode/node.def b/templates/vpn/ipsec/ike-group/node.tag/aggressive-mode/node.def deleted file mode 100644 index d8c88a9..0000000 --- a/templates/vpn/ipsec/ike-group/node.tag/aggressive-mode/node.def +++ /dev/null @@ -1,7 +0,0 @@ -help: Set IKE aggressive-mode -type: txt -default: "disable" -syntax:expression: $VAR(@) in "enable", "disable"; "enable or disable" -comp_help: possible completions - enable Set aggressive-mode enable - disable Set aggressive-mode disable (default) diff --git a/templates/vpn/ipsec/logging/facility/node.def b/templates/vpn/ipsec/logging/facility/node.def deleted file mode 100644 index 0359553..0000000 --- a/templates/vpn/ipsec/logging/facility/node.def +++ /dev/null @@ -1,13 +0,0 @@ -type: txt -help: Set logging facility -syntax:expression: $VAR(@)in "daemon", "local0", "local1", "local2", "local3", "local4", "local5", "local6", "local7" ; "Value \"$VAR(@)\" not in the list: daemon, local0, local1, local2, local3, local4, local5, local6, local7" -comp_help: Available logging facilities: - daemon System daemons - local0 Local facility 0 - local1 Local facility 1 - local2 Local facility 2 - local3 Local facility 3 - local4 Local facility 4 - local5 Local facility 5 - local6 Local facility 6 - local7 Local facility 7 diff --git a/templates/vpn/ipsec/logging/level/node.def b/templates/vpn/ipsec/logging/level/node.def deleted file mode 100644 index 9b63ebb..0000000 --- a/templates/vpn/ipsec/logging/level/node.def +++ /dev/null @@ -1,12 +0,0 @@ -help: Set logging level -type: txt -syntax:expression: $VAR(@) in "alert", "crit", "debug", "emerg", "err", "info", "notice", "warning" ; "must be one of the following: crit, debug, emerg, err, info, notice, warning" -comp_help: Logging levels in descending order of severity: - emerg Emergency messages - alert Urgent messages - crit Critical messages - err Error messages - warning Warning messages - notice Messages for further investigation - info Informational messages - debug Debug messages |