diff options
| author | Mohit Mehta <mohit.mehta@vyatta.com> | 2010-03-18 14:50:00 -0700 |
|---|---|---|
| committer | Mohit Mehta <mohit.mehta@vyatta.com> | 2010-03-18 14:50:00 -0700 |
| commit | 4f4b9bab6eb7a9ff817a04ca2c61c3cfbe60fadb (patch) | |
| tree | 84153d215d2eb392c5b686466b01a38cf879ac5c /templates | |
| parent | 494766535604195a29b7e8228238c4b11bac2097 (diff) | |
| download | vyatta-cfg-vpn-4f4b9bab6eb7a9ff817a04ca2c61c3cfbe60fadb.tar.gz vyatta-cfg-vpn-4f4b9bab6eb7a9ff817a04ca2c61c3cfbe60fadb.zip | |
Fix Bug 5087 add support to specify PFS group when PFS is enabled
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/vpn/ipsec/esp-group/node.tag/pfs/node.def | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/templates/vpn/ipsec/esp-group/node.tag/pfs/node.def b/templates/vpn/ipsec/esp-group/node.tag/pfs/node.def index 2623cad..82ce8db 100644 --- a/templates/vpn/ipsec/esp-group/node.tag/pfs/node.def +++ b/templates/vpn/ipsec/esp-group/node.tag/pfs/node.def @@ -1,7 +1,9 @@ -help: Set ESP PFS -type: txt +help: Set ESP Perfect Forward Secrecy +type: txt default: "enable" -syntax:expression: $VAR(@) in "enable", "disable"; "must be enable or disable" +syntax:expression: $VAR(@) in "enable", "disable", "dh-group2", "dh-group5"; "must be enable, disable, dh-group2 or dh-group5" comp_help: possible completions - enable Set Perfect Forward Secrecy enabled (default) - disable Set Perfect Forward Secrecy disabled + enable Enable PFS. Use ike-group's dh-group (default) + dh-group2 Enable PFS. Use Diffie-Hellman group 2 + dh-group5 Enable PFS. Use Diffie-Hellman group 5 + disable Disable PFS |