vyos-1x.git/data/templates/ipsec/swanctl.conf.tmpl, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2022-05-01T17:44:52+00:00ipsec: T4353: fix Jinja2 linting errors2022-05-01T17:44:52+00:00Christian Poessingerchristian@poessinger.com2022-05-01T17:44:52+00:00urn:sha1:49b1afc25b73d9c5daae1c76edb88aab42afa83eipsec: T4333: migrate to new vyos_defined Jinja2 test2022-04-13T20:51:42+00:00Christian Poessingerchristian@poessinger.com2022-04-13T20:51:42+00:00urn:sha1:e8a637eec0cc398f78a877ece6b9c7cdca418970ipsec: T4111: Fix for swanctl configuration IPV6 peers2021-12-28T11:45:37+00:00Viacheslavv.gletenko@vyos.io2021-12-28T11:45:37+00:00urn:sha1:5e05bfe790035f7d53dede8d76bccb089a186864
Peer name must not contain dots and colons, otherwise
swanct can't generate correct configuration for swanctl.conf
This is used in connection names and child SA names
Add filter 'dot_colon_to_dash' which replace dots and colons
ipsec: T1210: split out pool from remote-access configuration2021-07-19T17:01:43+00:00Christian Poessingerchristian@poessinger.com2021-07-19T17:01:43+00:00urn:sha1:9556d78b1d54c7320a0154990c61d23c6197c38f
Remote access IP pools can now be defined at a global level and referenced
in IPSec remote-access connections. To defined a pool use:
set vpn ipsec remote-access pool global-ipv4 name-server '172.16.1.1'
set vpn ipsec remote-access pool global-ipv4 prefix '192.168.0.0/24'
set vpn ipsec remote-access pool global-ipv6 name-server '2001:db8::1'
set vpn ipsec remote-access pool global-ipv6 prefix '2001:db8:1000::/64'
A connection can then reference the pool:
set vpn ipsec remote-access connection foo pool 'global-ipv4'
set vpn ipsec remote-access connection foo pool 'global-ipv6'
ipsec: T1210: remote-access pools can not hold both IPv4 and IPv6 prefixes2021-07-18T19:35:53+00:00Christian Poessingerchristian@poessinger.com2021-07-18T19:35:53+00:00urn:sha1:48c768abbf53b752a55db2adea1f998cb28da55c
... this enables a dual-stack IKEv2 VPN deployment.
pki: ipsec: l2tp: T2816: T3642: Move IPSec/L2TP code into vpn_ipsec.py and update to use PKI.2021-07-15T11:18:26+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2021-07-13T14:04:53+00:00urn:sha1:3af38a4d673c37ed46d7d8d43ad03a94799ad09dpki: T3642: Migrate rsa-keys to PKI configuration2021-07-06T22:53:27+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2021-07-06T21:19:48+00:00urn:sha1:5a7c46016a23387312b2c9e18528ad7bb20e8366ipsec: T1210: T1251: Add more features to remote-access connections2021-07-05T20:01:10+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2021-07-05T14:22:54+00:00urn:sha1:0b93fce06526a2826c19adcbb25874e51cccf68e
- Adds client/server authentication methods.
- Adds basic verification to remote-access.
- Adds DHCP pool and options to remote-access.
- Cleanup unused PKI files.
ipsec: T1210: T1251: add remote-access "name-server" definition to pool config2021-07-04T18:57:33+00:00Christian Poessingerchristian@poessinger.com2021-07-04T18:57:15+00:00urn:sha1:c8bf1deec9ce169f74049423ba21f6ef1360a3dfipsec: T1210: T1251: extend ra config with address pools/traffic selectors2021-07-04T18:46:30+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2021-07-04T15:17:54+00:00urn:sha1:79f1c891f3ae72fae3028f114e652225a082d9ef