summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-12-31 16:29:08 +0100
committerGitHub <noreply@github.com>2021-12-31 16:29:08 +0100
commitdcf8baa5b3040acad6a19d7c9325fbecd9f942ca (patch)
treea4a61d2145bfd5f94df3de6d8262ebac59ea4a01 /interface-definitions
parentb468930a61d46bd33b52768f4c6f8b6ea28eed91 (diff)
parent78494fe6de5372939e05dd65b01acd3e786b5602 (diff)
downloadvyos-1x-dcf8baa5b3040acad6a19d7c9325fbecd9f942ca.tar.gz
vyos-1x-dcf8baa5b3040acad6a19d7c9325fbecd9f942ca.zip
Merge pull request #1129 from sever-sever/T4126
ipsec: T4126: Ability to set priorities for installed policy
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/vpn_ipsec.xml.in12
1 files changed, 12 insertions, 0 deletions
diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in
index 17ba83bae..0c2205410 100644
--- a/interface-definitions/vpn_ipsec.xml.in
+++ b/interface-definitions/vpn_ipsec.xml.in
@@ -1047,6 +1047,18 @@
#include <include/ipsec/esp-group.xml.i>
#include <include/ipsec/local-traffic-selector.xml.i>
#include <include/ip-protocol.xml.i>
+ <leafNode name="priority">
+ <properties>
+ <help>Priority for IPSec policy (lowest value more preferable)</help>
+ <valueHelp>
+ <format>u32:1-100</format>
+ <description>Priority for IPSec policy (lowest value more preferable)</description>
+ </valueHelp>
+ <constraint>
+ <validator name="numeric" argument="--range 1-100"/>
+ </constraint>
+ </properties>
+ </leafNode>
<node name="remote">
<properties>
<help>Match remote addresses</help>