summaryrefslogtreecommitdiff
path: root/interface-definitions/vpn-ipsec.xml.in
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2023-12-31 07:26:57 +0100
committerGitHub <noreply@github.com>2023-12-31 07:26:57 +0100
commit9e49bcad817dcc7c39e4d5e2329828251327baad (patch)
tree1e1bd77ac4b2a856ff07477c9e092343f9f57029 /interface-definitions/vpn-ipsec.xml.in
parent74e749be2e4b0ce7da259c84535dff6ba1d072cf (diff)
parent6cfcef98b8a8fbfa107ecfbb741cfb268ea8340f (diff)
downloadvyos-1x-9e49bcad817dcc7c39e4d5e2329828251327baad.tar.gz
vyos-1x-9e49bcad817dcc7c39e4d5e2329828251327baad.zip
Merge pull request #2727 from vyos/mergify/bp/sagitta/pr-2707
T5870: ipsec remote access VPN: add x509 ("pubkey") authentication. (backport #2707)
Diffstat (limited to 'interface-definitions/vpn-ipsec.xml.in')
-rw-r--r--interface-definitions/vpn-ipsec.xml.in8
1 files changed, 6 insertions, 2 deletions
diff --git a/interface-definitions/vpn-ipsec.xml.in b/interface-definitions/vpn-ipsec.xml.in
index 64cfbda08..1847401b5 100644
--- a/interface-definitions/vpn-ipsec.xml.in
+++ b/interface-definitions/vpn-ipsec.xml.in
@@ -772,9 +772,13 @@
<properties>
<help>Client authentication mode</help>
<completionHelp>
- <list>eap-tls eap-mschapv2 eap-radius</list>
+ <list>x509 eap-tls eap-mschapv2 eap-radius</list>
</completionHelp>
<valueHelp>
+ <format>x509</format>
+ <description>Use IPsec x.509 certificate authentication</description>
+ </valueHelp>
+ <valueHelp>
<format>eap-tls</format>
<description>Use EAP-TLS authentication</description>
</valueHelp>
@@ -787,7 +791,7 @@
<description>Use EAP-RADIUS authentication</description>
</valueHelp>
<constraint>
- <regex>(eap-tls|eap-mschapv2|eap-radius)</regex>
+ <regex>(x509|eap-tls|eap-mschapv2|eap-radius)</regex>
</constraint>
</properties>
<defaultValue>eap-mschapv2</defaultValue>