diff options
| author | Oleksandr Kuchmystyi <o.kuchmystyi@vyos.io> | 2025-11-28 17:52:59 +0300 |
|---|---|---|
| committer | Oleksandr Kuchmystyi <o.kuchmystyi@vyos.io> | 2025-12-04 18:03:54 +0300 |
| commit | 2dc91c0a96c3d3212387be02b80c58fce7c68bd8 (patch) | |
| tree | 43adbb21f1a33844e220fa75b290e88b0e0a2241 /interface-definitions | |
| parent | f4d46db92f9d95c2264c219304172b7b45094bb3 (diff) | |
| download | vyos-1x-2dc91c0a96c3d3212387be02b80c58fce7c68bd8.tar.gz vyos-1x-2dc91c0a96c3d3212387be02b80c58fce7c68bd8.zip | |
ipsec: T7594: Rename `respond` connection-type in IPSec peer settings to `trap`
The previous 'connection-type respond' option in IPsec site-to-site peers
was misleading - instead of passively waiting for peer initiation, it would
initiate negotiation when matching traffic appeared, potentially causing
SA duplication and renegotiation loops.
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/include/version/ipsec-version.xml.i | 2 | ||||
| -rw-r--r-- | interface-definitions/vpn_ipsec.xml.in | 8 |
2 files changed, 5 insertions, 5 deletions
diff --git a/interface-definitions/include/version/ipsec-version.xml.i b/interface-definitions/include/version/ipsec-version.xml.i index a4d556cfc..6c24b0b2d 100644 --- a/interface-definitions/include/version/ipsec-version.xml.i +++ b/interface-definitions/include/version/ipsec-version.xml.i @@ -1,3 +1,3 @@ <!-- include start from include/version/ipsec-version.xml.i --> -<syntaxVersion component='ipsec' version='13'></syntaxVersion> +<syntaxVersion component='ipsec' version='14'></syntaxVersion> <!-- include end --> diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in index 7d901402d..a2721e2a1 100644 --- a/interface-definitions/vpn_ipsec.xml.in +++ b/interface-definitions/vpn_ipsec.xml.in @@ -1160,22 +1160,22 @@ <properties> <help>Connection type</help> <completionHelp> - <list>initiate respond none</list> + <list>initiate trap none</list> </completionHelp> <valueHelp> <format>initiate</format> <description>Bring the connection up immediately</description> </valueHelp> <valueHelp> - <format>respond</format> - <description>Wait for the peer to initiate the connection</description> + <format>trap</format> + <description>Bring the connection up only when matching traffic is detected</description> </valueHelp> <valueHelp> <format>none</format> <description>Load the connection only</description> </valueHelp> <constraint> - <regex>(initiate|respond|none)</regex> + <regex>(initiate|trap|none)</regex> </constraint> </properties> </leafNode> |