From b6b1887c063438cd8981031f0a3326db2f0f32cf Mon Sep 17 00:00:00 2001 From: aapostoliuk Date: Mon, 13 Mar 2023 12:45:30 +0200 Subject: ipsec: T4925: Added PRF into IKE group Added the possibility to configure Pseudo-Random Functions (PRF) in IKE group set vpn ipsec ike-group proposal prf Backport from 1.4 --- .../ipsec/ike-group/node.tag/proposal/node.tag/prf/node.def | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/prf/node.def (limited to 'templates') diff --git a/templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/prf/node.def b/templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/prf/node.def new file mode 100644 index 0000000..6689d3d --- /dev/null +++ b/templates/vpn/ipsec/ike-group/node.tag/proposal/node.tag/prf/node.def @@ -0,0 +1,11 @@ +help: Pseudo-Random Function +type: txt +allowed: echo "prfmd5 prfsha1 prfaesxcbc prfaescmac prfsha256 prfsha384 prfsha512" +syntax:expression: $VAR(@) in "prfmd5", "prfsha1", "prfsha256", "prfsha384", "prfsha512", "prfaesxcbc", "prfaescmac"; "Wrong Pseudo-Random Function" +val_help: prfmd5; MD5 PRF +val_help: prfsha1; SHA1 PRF +val_help: prfsha256; SHA2_256 PRF +val_help: prfsha384; SHA2_384 PRF +val_help: prfsha512; SHA2_512 PRF +val_help: prfaesxcbc; AES XCBC PRF +val_help: prfaescmac; AES CMAC PRF -- cgit v1.2.3