| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-01-12 | use leftsourceip to add route to remote subnet | Mohit Mehta | |
| (cherry picked from commit eb6d27497bab9e82218d8999778f7b4959fd34ea) | |||
| 2010-01-12 | Do not start IKEv2 daemon for now | Mohit Mehta | |
| (cherry picked from commit 7fab51307ecaf65a7da880f60a97a73bda87e5c7) | |||
| 2010-01-12 | * remove extraneous unused code | Mohit Mehta | |
| * use @id for identification when it's specified. It can be used even if local-ip is not 0.0.0.0 * extend syntax check for id to allow specifying hostnames * fix ipsec.secrets generation - if specified always use ids for local and remote peer (cherry picked from commit 3e7a4e45af00c11e6009d38fd97c67c2de0fa145) | |||
| 2010-01-12 | add comment to identify end of connection description | Mohit Mehta | |
| (cherry picked from commit cb9ed22ae45d03fa37148273d02cef4a9a179d1d) | |||
| 2010-01-12 | no need to maintain state of connections and take state-specific actions for | Mohit Mehta | |
| each connection when config changes. `ipsec update` in strongswan determines any changes in ipsec.conf and updates the configuration on running daemon (cherry picked from commit 55b703e669e0f792c04d29541d8fe00d2a9d624b) | |||
| 2010-01-12 | First pass code changes to vyatta-cfg-vpn for migration to strongswan : | Mohit Mehta | |
| Remove CLI support and back-end code for unsupported parameters * No aggressive mode support in strongswan * remove syslog facility.level CLI. strongswan uses authpriv facility by default, no syslog parameter support * remove Robert's disable-uniqreqids option for now. need to get strongswan to do the same thing first Remove Openswan specific parameters added to workaroung bugs * remove plutowait, this was added to workaround Openswan Bug 412 * remove nhelpers, this was added to workaround Openswan Bug 198 Other Changes * add '!' at the end of ike and esp proposal list to signify end of list * replace `ipsec start` commands with built-in commands for `ipsec starter` control utility * replace `ipsec auto` with `ipsec whack` commands. Still need to figure out if `ipsec auto --add|--up $connection` could be replaces by simply using `ipsec update` in stronswan * change pluto.ctl path | |||
| 2010-01-12 | vyatta-cfg-vpn depends on vyatta-ipsec provided by vyatta-strongswan | Mohit Mehta | |
| (cherry picked from commit f830e7cfd66d7cf368d47cd5dea47dd26711875a) | |||
| 2009-12-02 | 0.12.24debian/0.12.24 | Mohit Mehta | |
| 2009-11-30 | 0.12.22 | Michael Larson | |
| 2009-11-30 | added required keyword to help text. | Michael Larson | |
| 2009-11-25 | 0.12.21debian/0.12.21 | Mohit Mehta | |
| 2009-11-25 | 0.12.19 | Mohit Mehta | |
| 2009-11-25 | pptp config check not needed when vpn ipsec is configured | Mohit Mehta | |
| 2009-11-13 | 0.12.18debian/0.12.18 | Michael Larson | |
| 2009-11-13 | dependency update | Michael Larson | |
| 2009-11-06 | 0.12.17debian/0.12.17 | An-Cheng Huang | |
| 2009-11-06 | use vyatta openswan | An-Cheng Huang | |
| 2009-11-02 | 0.12.16debian/0.12.16 | Mohit Mehta | |
| 2009-11-02 | more formatting clean-up | Mohit Mehta | |
| 2009-11-02 | indent and reformat script using perltidy in hope of making it easier to read | Mohit Mehta | |
| 2009-10-27 | add support for same reqids to openswan cfg | Robert Bays | |
| 2009-10-20 | 0.12.15debian/0.12.15 | slioch | |
| 2009-10-20 | add priority to project node. | slioch | |
| 2009-10-09 | 0.12.14debian/0.12.14 | Mohit Mehta | |
| 2009-10-09 | add allowed values for ike, esp groups | Mohit Mehta | |
| 2009-10-06 | 0.12.13debian/0.12.13 | Mohit Mehta | |
| 2009-10-06 | Fix Bug 3011 Remote VPN configuration issues site-to-site warning | Mohit Mehta | |
| * issue warning when none of site-to-site peers, remote access l2tp/pptp set | |||
| 2009-09-04 | 0.12.12debian/0.12.12 | Stig Thormodsrud | |
| 2009-09-04 | Fix 4902: setting ipsec site-to-site tunnel with authentication id <> and ↵ | Stig Thormodsrud | |
| local-ip 0.0.0.0 got "no connection named <>" | |||
| 2009-08-27 | 0.12.11debian/0.12.11 | slioch | |
| 2009-08-20 | manage state of add|delete|restart on connections for vpn given disable node. | slioch | |
| 2009-08-20 | added support in configuration script to support tunnel disable node. | slioch | |
| 2009-08-14 | convert enable to disable node for vpn tunnel | slioch | |
| 2009-08-14 | add enable node below tunnel with default flag = true | slioch | |
| 2009-08-13 | 0.12.10debian/0.12.10 | slioch | |
| 2009-08-13 | Merge branch 'kenwood' of http://git.vyatta.com/vyatta-cfg-vpn into kenwood | slioch | |
| 2009-08-13 | added description field to site-to-site peer. | slioch | |
| 2009-07-10 | 0.12.9debian/0.12.9 | Stig Thormodsrud | |
| 2009-07-10 | Fix 4623: Removing IPSEC VPN config without removing cluster ipsec config ↵ | Stig Thormodsrud | |
| drops all interfaces. Add a check to prevent deleting ipsec if it's referenced by cluster. (cherry picked from commit b17d768af5845cb5b74e9ba8c6d8f8e2701bb0f6) | |||
| 2009-05-29 | 0.12.8debian/0.12.8 | An-Cheng Huang | |
| 2009-05-26 | 0.12.7debian/0.12.7 | Stig Thormodsrud | |
| 2009-05-26 | Fix 3836: Allow VPN authentication ID to accept values of IP address, domain ↵ | Stig Thormodsrud | |
| name and "" enclosed phrases | |||
| 2009-04-08 | 0.12.6debian/0.12.6 | Bob Gilligan | |
| 2009-04-08 | Bugfix 3284: Allow commit to succeed if local-ip is not configured. | Bob Gilligan | |
| Previously, the ipsec setup script would fail the commit if the IPv4 address given in the local-ip parameter was not configured on one of the ipsec-interfaces at the time that the commit took place. This causes problems for PPP interfaces that may be configured, but down for operational reasons. This change makes the setup script more liberal. It will allow the commit to complete, but issue a warning the address, they can restart ipsec. PPP has logic to restart ipsec when a link comes up. | |||
| 2009-04-06 | 0.12.5debian/0.12.5 | Bob Gilligan | |
| 2009-04-06 | Bugfix 2387: Don't list interfaces in ipsec config file. | Bob Gilligan | |
| The "interfaces=..." entry in the /etc/ipsec.conf file needs to list the actual interfaces we are using only if the underlying kernel IPsec support is provided by KLIPS. In our case, we are using NETKEY, so we don't need to list our interfaces there. Not listing them makes ipsec startup a bit more robust. | |||
| 2009-03-26 | 0.12.4debian/0.12.4 | Stig Thormodsrud | |
| 2009-03-26 | Change "ipsec-interfaces" to use vyatta-interfaces.pl for allowed tag. | Stig Thormodsrud | |
| 2009-03-16 | 0.12.3debian/0.12.3 | Stig Thormodsrud | |
| 2009-03-16 | Fix 4219: IPsec VPN does not launch on boot, error "The local-ip address ↵ | Stig Thormodsrud | |
| X.X.X.X of peer "X.X.X.X" has not been configured in any of the local. | |||
 |
index : vyatta-cfg-vpn.git | |
| Vyatta VPN configuration (mirror of https://github.com/vyos/vyatta-cfg-vpn.git) |
| summaryrefslogtreecommitdiff |