From 4887af8ea6d7d1a5dfcd2c08d5aa3392635a9d84 Mon Sep 17 00:00:00 2001 From: Jeff Leung Date: Sun, 25 May 2014 21:07:25 -0500 Subject: Initial MOBIKE Configuration Support For IKEv2, there is support for MOBIKE which basically allows IPSec connections to roam from interface to interface. When MOBIKE is used, the IKE negoiation phase uses UDP port 4500 rather than using proto-51. In strongSwan 4.5.x MOBIKE is automatically enabled for IKEv2 connections. We expose the ability to enable/disable MOBIKE to the user. --- templates/vpn/ipsec/ike-group/node.tag/mobike/node.def | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 templates/vpn/ipsec/ike-group/node.tag/mobike/node.def (limited to 'templates/vpn/ipsec') diff --git a/templates/vpn/ipsec/ike-group/node.tag/mobike/node.def b/templates/vpn/ipsec/ike-group/node.tag/mobike/node.def new file mode 100644 index 0000000..fe2656f --- /dev/null +++ b/templates/vpn/ipsec/ike-group/node.tag/mobike/node.def @@ -0,0 +1,5 @@ +help: Enable MOBIKE Support. MOBIKE is only valid for IKEv2 configurations. +type: txt +syntax:expression: $VAR(@) in "enabled", "disabled"; "must be enabled or disabled" +val_help: enabled; Enable MOBIKE ([DEFAULT] if IKEv2) +val_help: disabled; Disable MOBIKE -- cgit v1.2.3