diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-07-03 18:05:48 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-07-03 18:11:38 +0200 |
| commit | 32fab6c7c5a7d8ad926513fcc5a5c637b77769e3 (patch) | |
| tree | e8c08b8ef9df6490c622bbbc2e5be9e61695efdb /data | |
| parent | 094d79aee118a75898ef9b85a77f211e0eacd94d (diff) | |
| download | vyos-1x-32fab6c7c5a7d8ad926513fcc5a5c637b77769e3.tar.gz vyos-1x-32fab6c7c5a7d8ad926513fcc5a5c637b77769e3.zip | |
ipsec: T2816: provide esp and ike-group XML building block
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ipsec/swanctl.conf.tmpl | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/data/templates/ipsec/swanctl.conf.tmpl b/data/templates/ipsec/swanctl.conf.tmpl index cafe52e78..06fd8e8c2 100644 --- a/data/templates/ipsec/swanctl.conf.tmpl +++ b/data/templates/ipsec/swanctl.conf.tmpl @@ -13,6 +13,28 @@ connections { {{ peer_tmpl.conn(peer, peer_conf, ike_group, esp_group) }} {% endfor %} {% endif %} +{% if remote_access is defined and remote_access is not none %} +{% set ike = ike_group[peer_conf.ike_group] %} + road_warrior { + proposals = {{ ike | get_esp_ike_cipher | join(',') }} + version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }} + local_addrs = 192.168.0.1 + local { + auth = eap-peap + certs = moonCert.pem + } + remote { + auth = eap-peap + } + send_certreq = no + children { + net { + local_ts = 10.1.0.0/16 + esp_proposals = {{ esp_group[peer_conf.default_esp_group] | get_esp_ike_cipher | join(',') }} + } + } + } +{% endif %} } secrets { |