diff options
| author | Chris Cowart <ccowart@timesinks.net> | 2025-11-15 22:39:53 -0800 |
|---|---|---|
| committer | Chris Cowart <ccowart@timesinks.net> | 2025-11-21 18:22:43 -0800 |
| commit | 090c4afe8dce25f772c24fc9bb6e3b96d23fcc2b (patch) | |
| tree | a96d8dcad9a2cfbeb2a2e9ea098fc7aa65da3aee /interface-definitions | |
| parent | cae2717e9a608a1706e9dc134f7d560453ec4bfe (diff) | |
| download | vyos-1x-090c4afe8dce25f772c24fc9bb6e3b96d23fcc2b.tar.gz vyos-1x-090c4afe8dce25f772c24fc9bb6e3b96d23fcc2b.zip | |
T8027: vpn: adding config for swanctl "send-cert always"
This setting seems to be required for various Apple clients to
connect to the IKEv2 IPSec VPN.
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/vpn_ipsec.xml.in | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in index 517bf89fd..7d901402d 100644 --- a/interface-definitions/vpn_ipsec.xml.in +++ b/interface-definitions/vpn_ipsec.xml.in @@ -870,6 +870,12 @@ <defaultValue>eap-mschapv2</defaultValue> </leafNode> #include <include/auth-local-users.xml.i> + <leafNode name="always-send-cert"> + <properties> + <help>Always send local certificate for this connection</help> + <valueless/> + </properties> + </leafNode> <leafNode name="server-mode"> <properties> <help>Server authentication mode</help> |