summaryrefslogtreecommitdiff
path: root/data/templates
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-07-03 18:05:48 +0200
committerChristian Poessinger <christian@poessinger.com>2021-07-03 18:11:38 +0200
commit32fab6c7c5a7d8ad926513fcc5a5c637b77769e3 (patch)
treee8c08b8ef9df6490c622bbbc2e5be9e61695efdb /data/templates
parent094d79aee118a75898ef9b85a77f211e0eacd94d (diff)
downloadvyos-1x-32fab6c7c5a7d8ad926513fcc5a5c637b77769e3.tar.gz
vyos-1x-32fab6c7c5a7d8ad926513fcc5a5c637b77769e3.zip
ipsec: T2816: provide esp and ike-group XML building block
Diffstat (limited to 'data/templates')
-rw-r--r--data/templates/ipsec/swanctl.conf.tmpl22
1 files changed, 22 insertions, 0 deletions
diff --git a/data/templates/ipsec/swanctl.conf.tmpl b/data/templates/ipsec/swanctl.conf.tmpl
index cafe52e78..06fd8e8c2 100644
--- a/data/templates/ipsec/swanctl.conf.tmpl
+++ b/data/templates/ipsec/swanctl.conf.tmpl
@@ -13,6 +13,28 @@ connections {
{{ peer_tmpl.conn(peer, peer_conf, ike_group, esp_group) }}
{% endfor %}
{% endif %}
+{% if remote_access is defined and remote_access is not none %}
+{% set ike = ike_group[peer_conf.ike_group] %}
+ road_warrior {
+ proposals = {{ ike | get_esp_ike_cipher | join(',') }}
+ version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }}
+ local_addrs = 192.168.0.1
+ local {
+ auth = eap-peap
+ certs = moonCert.pem
+ }
+ remote {
+ auth = eap-peap
+ }
+ send_certreq = no
+ children {
+ net {
+ local_ts = 10.1.0.0/16
+ esp_proposals = {{ esp_group[peer_conf.default_esp_group] | get_esp_ike_cipher | join(',') }}
+ }
+ }
+ }
+{% endif %}
}
secrets {