summaryrefslogtreecommitdiff
path: root/data/templates/sstp-client
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-12-11 19:38:28 +0100
committerChristian Poessinger <christian@poessinger.com>2022-12-11 20:27:40 +0100
commitff56aeefddaad2d37d3ea32626e1adf3960eaf26 (patch)
treef43b289db8073adc10a67607d6e043c18acd764d /data/templates/sstp-client
parent3296a10dc27d2fb1c79db07b26d62c8abb6a51bc (diff)
downloadvyos-1x-ff56aeefddaad2d37d3ea32626e1adf3960eaf26.tar.gz
vyos-1x-ff56aeefddaad2d37d3ea32626e1adf3960eaf26.zip
sstp: T4384: initial implementation of SSTP client CLI
vyos@vyos# show interfaces sstpc sstpc sstpc10 { authentication { password vyos user vyos } server sstp.vyos.net ssl { ca-certificate VyOS-CA } }
Diffstat (limited to 'data/templates/sstp-client')
-rw-r--r--data/templates/sstp-client/peer.j246
1 files changed, 46 insertions, 0 deletions
diff --git a/data/templates/sstp-client/peer.j2 b/data/templates/sstp-client/peer.j2
new file mode 100644
index 000000000..1127d0564
--- /dev/null
+++ b/data/templates/sstp-client/peer.j2
@@ -0,0 +1,46 @@
+### Autogenerated by interfaces-sstpc.py ###
+{{ '# ' ~ description if description is vyos_defined else '' }}
+
+# Require peer to provide the local IP address if it is not
+# specified explicitly in the config file.
+noipdefault
+
+# Don't show the password in logfiles:
+hide-password
+
+remotename {{ ifname }}
+linkname {{ ifname }}
+ipparam {{ ifname }}
+ifname {{ ifname }}
+pty "sstpc --ipparam {{ ifname }} --nolaunchpppd {{ server }}:{{ port }} --ca-cert {{ ca_file_path }}"
+
+# Override any connect script that may have been set in /etc/ppp/options.
+connect /bin/true
+
+# Don't try to authenticate the remote node
+noauth
+
+# We won't want EAP
+refuse-eap
+
+# Don't try to proxy ARP for the remote endpoint. User can set proxy
+# arp entries up manually if they wish. More importantly, having
+# the "proxyarp" parameter set disables the "defaultroute" option.
+noproxyarp
+
+# Unlimited connection attempts
+maxfail 0
+
+plugin sstp-pppd-plugin.so
+sstp-sock /var/run/sstpc/sstpc-{{ ifname }}
+
+persist
+debug
+
+{% if authentication is vyos_defined %}
+{{ 'user "' + authentication.user + '"' if authentication.user is vyos_defined }}
+{{ 'password "' + authentication.password + '"' if authentication.password is vyos_defined }}
+{% endif %}
+
+{{ "usepeerdns" if no_peer_dns is not vyos_defined }}
+