vyos-1x.git/src/migration-scripts/ipsec/9-to-10, branch circinus-merge-commit-handling

T6199: remove unused Python imports from migration scripts

2024-04-06T08:46:30+00:00

T5427: Fix migration script arguments len expects 2 args

2023-08-02T09:12:23+00:00

The script's name is always provided as the first argument sys.argv[0] Expected length for argv is 2 (script itself + config file) Change: 'if (len(argv) < 1)' to 'if len(argv) < 2'

T4879: IPsec migration script remote-id for peer name eq address

2022-12-19T16:32:24+00:00

Migration for "remote-id" where peer is IPv4 or IPv6 address was missed It was only migration if peer starts with "@" It cause that you must manualy set 'remote-id' to get it working correctly replace 'vpn ipsec site-to-site peer 192.0.2.2' => 'vpn ipsec site-to-site peer peer_192-0-2-2 authentication remote-id 192.0.2.2'

ipsec: T4118: bugfix migration of IKEv2 road-warrior "id" CLI option

2022-09-20T18:32:57+00:00

The "authentication id" option for road-warriors did not get migrated to the new local-id CLI node. This has been fixed.

ipsec: T4118: bugfix config migrator 9-to-10

2022-09-19T18:29:23+00:00

When a CLI node is set with a migrator and is not a valueLess node, we need to specify the "value" using the value= operation in config.set(). This fixes the config load error: vyos.configsession.ConfigSessionError: Invalid config file (syntax error): error at line 353

ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peer

2022-09-16T11:53:41+00:00

Migration and Change boolean nodes "enable/disable" to disable-xxxx, enable-xxxx and just xxx for VPN IPsec configurations - IKE changes: - replace 'ipsec ike-group mobike disable' => 'ipsec ike-group disable-mobike' - replace 'ipsec ike-group ikev2-reauth yes|no' => 'ipsec ike-group ikev2-reauth' - ESP changes: - replace 'ipsec esp-group compression enable' => 'ipsec esp-group compression' - PEER changes: - replace: 'peer id xxx' => 'peer local-id xxx' - replace: 'peer force-encapsulation enable' => 'peer force-udp-encapsulation' - add option: 'peer remote-address x.x.x.x' Add 'peer remote-address ' via migration script