summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorLucas Christian <lucas@lucasec.com>2023-12-28 22:07:07 -0800
committerLucas Christian <lucas@lucasec.com>2023-12-30 12:44:04 -0800
commit656934e85cee799dba5b495d143f6be445ac22d5 (patch)
tree5be8f070c2da60c8692b88a50db2bc44e07e4d2e /interface-definitions
parent1e46cd606d9d87226fe0400bf3a53bda360808d8 (diff)
downloadvyos-1x-656934e85cee799dba5b495d143f6be445ac22d5.tar.gz
vyos-1x-656934e85cee799dba5b495d143f6be445ac22d5.zip
T5870: ipsec remote access VPN: add x509 ("pubkey") authentication.
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/vpn-ipsec.xml.in8
1 files changed, 6 insertions, 2 deletions
diff --git a/interface-definitions/vpn-ipsec.xml.in b/interface-definitions/vpn-ipsec.xml.in
index 64cfbda08..1847401b5 100644
--- a/interface-definitions/vpn-ipsec.xml.in
+++ b/interface-definitions/vpn-ipsec.xml.in
@@ -772,9 +772,13 @@
<properties>
<help>Client authentication mode</help>
<completionHelp>
- <list>eap-tls eap-mschapv2 eap-radius</list>
+ <list>x509 eap-tls eap-mschapv2 eap-radius</list>
</completionHelp>
<valueHelp>
+ <format>x509</format>
+ <description>Use IPsec x.509 certificate authentication</description>
+ </valueHelp>
+ <valueHelp>
<format>eap-tls</format>
<description>Use EAP-TLS authentication</description>
</valueHelp>
@@ -787,7 +791,7 @@
<description>Use EAP-RADIUS authentication</description>
</valueHelp>
<constraint>
- <regex>(eap-tls|eap-mschapv2|eap-radius)</regex>
+ <regex>(x509|eap-tls|eap-mschapv2|eap-radius)</regex>
</constraint>
</properties>
<defaultValue>eap-mschapv2</defaultValue>