diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-07-03 22:29:46 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-07-03 22:31:50 +0200 |
| commit | ce3847239493d76bd0462e2a7b1f5cca41c57457 (patch) | |
| tree | 27fdb1d81b9c88f1e501c93f05212e45094d83ef /data | |
| parent | 82d881a28bf484957f0a46f4fb04010d9398c694 (diff) | |
| download | vyos-1x-ce3847239493d76bd0462e2a7b1f5cca41c57457.tar.gz vyos-1x-ce3847239493d76bd0462e2a7b1f5cca41c57457.zip | |
ipsec: T2816: remove erroneously added config snipped for road-warriors
Commit 32fab6c7c ("ipsec: T2816: provide esp and ike-group XML building block")
by accident added an IKEv2 road-warrior configuration to swanctl template.
The config blog was never activate as the CLI nodes are still missing. Still
unclean :(.
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ipsec/swanctl.conf.tmpl | 22 |
1 files changed, 0 insertions, 22 deletions
diff --git a/data/templates/ipsec/swanctl.conf.tmpl b/data/templates/ipsec/swanctl.conf.tmpl index 06fd8e8c2..cafe52e78 100644 --- a/data/templates/ipsec/swanctl.conf.tmpl +++ b/data/templates/ipsec/swanctl.conf.tmpl @@ -13,28 +13,6 @@ connections { {{ peer_tmpl.conn(peer, peer_conf, ike_group, esp_group) }} {% endfor %} {% endif %} -{% if remote_access is defined and remote_access is not none %} -{% set ike = ike_group[peer_conf.ike_group] %} - road_warrior { - proposals = {{ ike | get_esp_ike_cipher | join(',') }} - version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }} - local_addrs = 192.168.0.1 - local { - auth = eap-peap - certs = moonCert.pem - } - remote { - auth = eap-peap - } - send_certreq = no - children { - net { - local_ts = 10.1.0.0/16 - esp_proposals = {{ esp_group[peer_conf.default_esp_group] | get_esp_ike_cipher | join(',') }} - } - } - } -{% endif %} } secrets { |