diff options
| author | Giga Murphy <giga1699@gmail.com> | 2026-01-02 01:04:38 +0000 |
|---|---|---|
| committer | Giga Murphy <giga1699@gmail.com> | 2026-03-04 04:48:18 +0000 |
| commit | 673ec335b885ae1de8391dd8c48a5fe16b282db5 (patch) | |
| tree | 2c6f7de55f613261eaf37200479bf2005f506344 /interface-definitions/include/ipsec | |
| parent | d47be4a8e2119e2be0be5fe9d7c29d7d8eaf24d9 (diff) | |
| download | vyos-1x-673ec335b885ae1de8391dd8c48a5fe16b282db5.tar.gz vyos-1x-673ec335b885ae1de8391dd8c48a5fe16b282db5.zip | |
T8136: IPSEC PPK Support
Diffstat (limited to 'interface-definitions/include/ipsec')
| -rw-r--r-- | interface-definitions/include/ipsec/childless.xml.i | 29 | ||||
| -rw-r--r-- | interface-definitions/include/ipsec/ppk.xml.i | 24 |
2 files changed, 53 insertions, 0 deletions
diff --git a/interface-definitions/include/ipsec/childless.xml.i b/interface-definitions/include/ipsec/childless.xml.i new file mode 100644 index 000000000..76ba8d548 --- /dev/null +++ b/interface-definitions/include/ipsec/childless.xml.i @@ -0,0 +1,29 @@ +<!-- include start from ipsec/childless.xml.i --> +<leafNode name="childless"> + <properties> + <help>Enable support for childless IKE SA initiation</help> + <completionHelp> + <list>allow prefer force never</list> + </completionHelp> + <valueHelp> + <format>allow</format> + <description>Accept childless IKE SA in responder mode. Create regular IKE SA in initiator mode</description> + </valueHelp> + <valueHelp> + <format>prefer</format> + <description>In both responder and initiator modes, accept and create childless IKE SA correspondingly</description> + </valueHelp> + <valueHelp> + <format>force</format> + <description>Require the use of childless IKE SA in both responder and initiator modes</description> + </valueHelp> + <valueHelp> + <format>never</format> + <description>Disable support for childless IKE SAs when acting as a responder</description> + </valueHelp> + <constraint> + <regex>(allow|prefer|force|never)</regex> + </constraint> + </properties> +</leafNode> +<!-- include end --> diff --git a/interface-definitions/include/ipsec/ppk.xml.i b/interface-definitions/include/ipsec/ppk.xml.i new file mode 100644 index 000000000..bd420766c --- /dev/null +++ b/interface-definitions/include/ipsec/ppk.xml.i @@ -0,0 +1,24 @@ +<!-- include start from ipsec/ppk.xml.i --> +<node name="ppk"> + <properties> + <help>Post-quantum preshared key</help> + </properties> + <children> + <leafNode name="id"> + <properties> + <help>Post-quantum preshared key for this connection</help> + <valueHelp> + <format>txt</format> + <description>ID used for PPK</description> + </valueHelp> + </properties> + </leafNode> + <leafNode name="required"> + <properties> + <help>Require a valid PPK for connection to establish</help> + <valueless/> + </properties> + </leafNode> + </children> +</node> +<!-- include end --> |