summaryrefslogtreecommitdiff
path: root/interface-definitions/include
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@vyos.io>2026-09-16 11:43:21 +0100
committerGitHub <noreply@github.com>2026-09-16 11:43:21 +0100
commit549229dafcf2066cf8917b3bca92a00adaf82918 (patch)
tree4e2f2fe9e22339d18ceb34bd949991bc24634c06 /interface-definitions/include
parent28207a3068fd23d73c93cda806ed3757f9651a5f (diff)
parentd1cc3ed65eb1f00409d0b91fc8149431fb614e89 (diff)
downloadvyos-1x-549229dafcf2066cf8917b3bca92a00adaf82918.tar.gz
vyos-1x-549229dafcf2066cf8917b3bca92a00adaf82918.zip
Merge pull request #5475 from alexandr-san4ez/T8952-rolling
ipsec: T8952: Allow per-peer strongSwan `unique` override for site-to-site peers
Diffstat (limited to 'interface-definitions/include')
-rw-r--r--interface-definitions/include/vpn-ipsec-unique.xml.i25
1 files changed, 25 insertions, 0 deletions
diff --git a/interface-definitions/include/vpn-ipsec-unique.xml.i b/interface-definitions/include/vpn-ipsec-unique.xml.i
new file mode 100644
index 000000000..bff64fee3
--- /dev/null
+++ b/interface-definitions/include/vpn-ipsec-unique.xml.i
@@ -0,0 +1,25 @@
+<!-- include start from vpn-ipsec-unique.xml.i -->
+<leafNode name="unique">
+ <properties>
+ <help>Connection uniqueness enforcement policy</help>
+ <completionHelp>
+ <list>never keep replace</list>
+ </completionHelp>
+ <valueHelp>
+ <format>never</format>
+ <description>Never enforce connection uniqueness</description>
+ </valueHelp>
+ <valueHelp>
+ <format>keep</format>
+ <description>Reject new connection attempts if the same peer has an active connection</description>
+ </valueHelp>
+ <valueHelp>
+ <format>replace</format>
+ <description>Delete existing connections when a new connection is established for the same peer</description>
+ </valueHelp>
+ <constraint>
+ <regex>(never|keep|replace)</regex>
+ </constraint>
+ </properties>
+</leafNode>
+<!-- include end -->