summaryrefslogtreecommitdiff
path: root/interface-definitions/vpn_ipsec.xml.in
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-07-04 21:02:54 +0200
committerChristian Poessinger <christian@poessinger.com>2021-07-04 21:02:54 +0200
commit1c727bd25ef28fb729f66072f026be560978853d (patch)
tree74dcac64f2fe59eade6399c61eca45a4f1471b43 /interface-definitions/vpn_ipsec.xml.in
parentc8bf1deec9ce169f74049423ba21f6ef1360a3df (diff)
downloadvyos-1x-1c727bd25ef28fb729f66072f026be560978853d.tar.gz
vyos-1x-1c727bd25ef28fb729f66072f026be560978853d.zip
ipsec: T1210: T1251: add "local" traffic-selector include definition
Used by both site2site and remote-access/road-warrior VPN connections.
Diffstat (limited to 'interface-definitions/vpn_ipsec.xml.in')
-rw-r--r--interface-definitions/vpn_ipsec.xml.in54
1 files changed, 2 insertions, 52 deletions
diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in
index 75fd6a92f..187bb1154 100644
--- a/interface-definitions/vpn_ipsec.xml.in
+++ b/interface-definitions/vpn_ipsec.xml.in
@@ -744,32 +744,7 @@
#include <include/ipsec/esp-group.xml.i>
#include <include/ipsec/ike-group.xml.i>
#include <include/ipsec/local-address.xml.i>
- <node name="local-network">
- <properties>
- <help>Local traffic selectors</help>
- </properties>
- <children>
- #include <include/port-number.xml.i>
- <leafNode name="prefix">
- <properties>
- <help>Local IPv4 or IPv6 prefix</help>
- <valueHelp>
- <format>ipv4</format>
- <description>Local IPv4 prefix</description>
- </valueHelp>
- <valueHelp>
- <format>ipv6</format>
- <description>Local IPv6 prefix</description>
- </valueHelp>
- <constraint>
- <validator name="ipv4-prefix"/>
- <validator name="ipv6-prefix"/>
- </constraint>
- <multi/>
- </properties>
- </leafNode>
- </children>
- </node>
+ #include <include/ipsec/local-traffic-selector.xml.i>
<node name="pool">
<properties>
<help>IP address pool for remote-access users</help>
@@ -1008,32 +983,7 @@
<children>
#include <include/generic-disable-node.xml.i>
#include <include/ipsec/esp-group.xml.i>
- <node name="local">
- <properties>
- <help>Local parameters for interesting traffic</help>
- </properties>
- <children>
- #include <include/port-number.xml.i>
- <leafNode name="prefix">
- <properties>
- <help>Local IPv4 or IPv6 prefix</help>
- <valueHelp>
- <format>ipv4</format>
- <description>Local IPv4 prefix</description>
- </valueHelp>
- <valueHelp>
- <format>ipv6</format>
- <description>Local IPv6 prefix</description>
- </valueHelp>
- <constraint>
- <validator name="ipv4-prefix"/>
- <validator name="ipv6-prefix"/>
- </constraint>
- <multi/>
- </properties>
- </leafNode>
- </children>
- </node>
+ #include <include/ipsec/local-traffic-selector.xml.i>
#include <include/ip-protocol.xml.i>
<node name="remote">
<properties>