diff options
| author | Oleksandr Kuchmystyi <o.kuchmystyi@vyos.io> | 2026-05-14 12:42:44 +0300 |
|---|---|---|
| committer | Oleksandr Kuchmystyi <o.kuchmystyi@vyos.io> | 2026-05-20 12:22:21 +0300 |
| commit | b6d24956bd4c7a5e4cb89c0b4331264a96667184 (patch) | |
| tree | 21ee37fab6c99d6ab67c8000453337e6b546470f /interface-definitions | |
| parent | 51ab39e51bb925307c0f9ad1d905d450ceecc0f5 (diff) | |
| download | vyos-1x-b6d24956bd4c7a5e4cb89c0b4331264a96667184.tar.gz vyos-1x-b6d24956bd4c7a5e4cb89c0b4331264a96667184.zip | |
ipsec: T7555: Implement `ikev2-reauth` for site-to-site peers
IKEv2 reauthentication was configurable via CLI but never translated
into `swanctl.conf`. Add `reauth_time` to the peer connection template,
driven by the `ikev2-reauth` flag on the ike-group and the per-peer
override (yes/no/inherit).
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/vpn_ipsec.xml.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in index d141a43bd..403031131 100644 --- a/interface-definitions/vpn_ipsec.xml.in +++ b/interface-definitions/vpn_ipsec.xml.in @@ -1246,7 +1246,7 @@ </completionHelp> <valueHelp> <format>yes</format> - <description>Enable remote host re-authentication during an IKE re-key. Currently broken due to a strong swan bug</description> + <description>Enable remote host re-authentication during an IKE re-key</description> </valueHelp> <valueHelp> <format>no</format> |