summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/swanctl.conf.tmpl
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-07-03 22:29:46 +0200
committerChristian Poessinger <christian@poessinger.com>2021-07-03 22:31:50 +0200
commitce3847239493d76bd0462e2a7b1f5cca41c57457 (patch)
tree27fdb1d81b9c88f1e501c93f05212e45094d83ef /data/templates/ipsec/swanctl.conf.tmpl
parent82d881a28bf484957f0a46f4fb04010d9398c694 (diff)
downloadvyos-1x-ce3847239493d76bd0462e2a7b1f5cca41c57457.tar.gz
vyos-1x-ce3847239493d76bd0462e2a7b1f5cca41c57457.zip
ipsec: T2816: remove erroneously added config snipped for road-warriors
Commit 32fab6c7c ("ipsec: T2816: provide esp and ike-group XML building block") by accident added an IKEv2 road-warrior configuration to swanctl template. The config blog was never activate as the CLI nodes are still missing. Still unclean :(.
Diffstat (limited to 'data/templates/ipsec/swanctl.conf.tmpl')
-rw-r--r--data/templates/ipsec/swanctl.conf.tmpl22
1 files changed, 0 insertions, 22 deletions
diff --git a/data/templates/ipsec/swanctl.conf.tmpl b/data/templates/ipsec/swanctl.conf.tmpl
index 06fd8e8c2..cafe52e78 100644
--- a/data/templates/ipsec/swanctl.conf.tmpl
+++ b/data/templates/ipsec/swanctl.conf.tmpl
@@ -13,28 +13,6 @@ connections {
{{ peer_tmpl.conn(peer, peer_conf, ike_group, esp_group) }}
{% endfor %}
{% endif %}
-{% if remote_access is defined and remote_access is not none %}
-{% set ike = ike_group[peer_conf.ike_group] %}
- road_warrior {
- proposals = {{ ike | get_esp_ike_cipher | join(',') }}
- version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }}
- local_addrs = 192.168.0.1
- local {
- auth = eap-peap
- certs = moonCert.pem
- }
- remote {
- auth = eap-peap
- }
- send_certreq = no
- children {
- net {
- local_ts = 10.1.0.0/16
- esp_proposals = {{ esp_group[peer_conf.default_esp_group] | get_esp_ike_cipher | join(',') }}
- }
- }
- }
-{% endif %}
}
secrets {