diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-02-20 19:13:23 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-02-20 19:13:23 +0100 |
| commit | ac8ba16d63fb420ff6cd2f76e1666a329687a9a7 (patch) | |
| tree | dedcf2c9fdc389d66f8187145f40a1d15015d4b7 /data | |
| parent | b586558a591baf01488fe4f9f32037de7239ae87 (diff) | |
| parent | f6c2b5e4762e7713c5868bebf8e482ce732e3302 (diff) | |
| download | vyos-1x-ac8ba16d63fb420ff6cd2f76e1666a329687a9a7.tar.gz vyos-1x-ac8ba16d63fb420ff6cd2f76e1666a329687a9a7.zip | |
Merge pull request #1226 from sever-sever/T4254
vpn: T4254: Add cisco_flexvpn and install_virtual_ip_on options
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ipsec/charon.tmpl | 11 | ||||
| -rw-r--r-- | data/templates/ipsec/swanctl/peer.tmpl | 3 |
2 files changed, 14 insertions, 0 deletions
diff --git a/data/templates/ipsec/charon.tmpl b/data/templates/ipsec/charon.tmpl index 4d710921e..b9b020dcd 100644 --- a/data/templates/ipsec/charon.tmpl +++ b/data/templates/ipsec/charon.tmpl @@ -20,6 +20,17 @@ charon { # Send Cisco Unity vendor ID payload (IKEv1 only). # cisco_unity = no + # Cisco FlexVPN +{% if options is defined %} + cisco_flexvpn = {{ 'yes' if options.flexvpn is defined else 'no' }} +{% if options.virtual_ip is defined %} + install_virtual_ip = yes +{% endif %} +{% if options.interface is defined and options.interface is not none %} + install_virtual_ip_on = {{ options.interface }} +{% endif %} +{% endif %} + # Close the IKE_SA if setup of the CHILD_SA along with IKE_AUTH failed. # close_ike_on_child_failure = no diff --git a/data/templates/ipsec/swanctl/peer.tmpl b/data/templates/ipsec/swanctl/peer.tmpl index c6b71f2a1..f4e28d818 100644 --- a/data/templates/ipsec/swanctl/peer.tmpl +++ b/data/templates/ipsec/swanctl/peer.tmpl @@ -5,6 +5,9 @@ peer_{{ name }} { proposals = {{ ike | get_esp_ike_cipher | join(',') }} version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }} +{% if peer_conf.virtual_address is defined and peer_conf.virtual_address is not none %} + vips = {{ peer_conf.virtual_address | join(', ') }} +{% endif %} local_addrs = {{ peer_conf.local_address if peer_conf.local_address != 'any' else '0.0.0.0/0' }} # dhcp:{{ peer_conf.dhcp_interface if 'dhcp_interface' in peer_conf else 'no' }} remote_addrs = {{ peer if peer not in ['any', '0.0.0.0'] and peer[0:1] != '@' else '0.0.0.0/0' }} {% if peer_conf.authentication is defined and peer_conf.authentication.mode is defined and peer_conf.authentication.mode == 'x509' %} |