summaryrefslogtreecommitdiff
path: root/interface-definitions/include/ipsec
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-07-04 21:02:54 +0200
committerChristian Poessinger <christian@poessinger.com>2021-07-04 21:02:54 +0200
commit1c727bd25ef28fb729f66072f026be560978853d (patch)
tree74dcac64f2fe59eade6399c61eca45a4f1471b43 /interface-definitions/include/ipsec
parentc8bf1deec9ce169f74049423ba21f6ef1360a3df (diff)
downloadvyos-1x-1c727bd25ef28fb729f66072f026be560978853d.tar.gz
vyos-1x-1c727bd25ef28fb729f66072f026be560978853d.zip
ipsec: T1210: T1251: add "local" traffic-selector include definition
Used by both site2site and remote-access/road-warrior VPN connections.
Diffstat (limited to 'interface-definitions/include/ipsec')
-rw-r--r--interface-definitions/include/ipsec/local-traffic-selector.xml.i28
1 files changed, 28 insertions, 0 deletions
diff --git a/interface-definitions/include/ipsec/local-traffic-selector.xml.i b/interface-definitions/include/ipsec/local-traffic-selector.xml.i
new file mode 100644
index 000000000..d30a6d11a
--- /dev/null
+++ b/interface-definitions/include/ipsec/local-traffic-selector.xml.i
@@ -0,0 +1,28 @@
+<!-- include start from ipsec/local-traffic-selector.xml.i -->
+<node name="local">
+ <properties>
+ <help>Local parameters for interesting traffic</help>
+ </properties>
+ <children>
+ #include <include/port-number.xml.i>
+ <leafNode name="prefix">
+ <properties>
+ <help>Local IPv4 or IPv6 prefix</help>
+ <valueHelp>
+ <format>ipv4</format>
+ <description>Local IPv4 prefix</description>
+ </valueHelp>
+ <valueHelp>
+ <format>ipv6</format>
+ <description>Local IPv6 prefix</description>
+ </valueHelp>
+ <constraint>
+ <validator name="ipv4-prefix"/>
+ <validator name="ipv6-prefix"/>
+ </constraint>
+ <multi/>
+ </properties>
+ </leafNode>
+ </children>
+</node>
+<!-- include end -->