summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2026-06-25 16:36:22 +0200
committerGitHub <noreply@github.com>2026-06-25 16:36:22 +0200
commitfe78ab4165456fd1d7bcd2ec99d7601dc2e71d2c (patch)
tree474df907283a78040dea704765f10b3b84eb6b0a /interface-definitions
parent53cfae0cbd315f5e8e4b8288c1f2382bd6212e87 (diff)
parent11d5ee39fa41f512e343ef6084675a0f372c9e92 (diff)
downloadvyos-1x-fe78ab4165456fd1d7bcd2ec99d7601dc2e71d2c.tar.gz
vyos-1x-fe78ab4165456fd1d7bcd2ec99d7601dc2e71d2c.zip
Merge pull request #5284 from vyos/T8097-strongswan-esn
T8097: strongswan: add CLI for ESN
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/include/vpn-ipsec-esn.xml.i26
-rw-r--r--interface-definitions/vpn_ipsec.xml.in2
2 files changed, 28 insertions, 0 deletions
diff --git a/interface-definitions/include/vpn-ipsec-esn.xml.i b/interface-definitions/include/vpn-ipsec-esn.xml.i
new file mode 100644
index 000000000..b4faa25d5
--- /dev/null
+++ b/interface-definitions/include/vpn-ipsec-esn.xml.i
@@ -0,0 +1,26 @@
+<!-- include start from vpn-ipsec-esn.xml.i -->
+<leafNode name="esn">
+ <properties>
+ <help>Extended Sequence Number (ESN)</help>
+ <completionHelp>
+ <list>optional required disabled</list>
+ </completionHelp>
+ <valueHelp>
+ <format>optional</format>
+ <description>Prefer ESN, but allow 32-bit sequence numbers</description>
+ </valueHelp>
+ <valueHelp>
+ <format>required</format>
+ <description>ESN enabled, accept 64-bit sequence numbers only</description>
+ </valueHelp>
+ <valueHelp>
+ <format>disabled</format>
+ <description>ESN disabled, accept 32-bit sequence numbers only</description>
+ </valueHelp>
+ <constraint>
+ <regex>(optional|required|disabled)</regex>
+ </constraint>
+ </properties>
+ <defaultValue>disabled</defaultValue>
+</leafNode>
+<!-- include end -->
diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in
index 80490edd6..bda084604 100644
--- a/interface-definitions/vpn_ipsec.xml.in
+++ b/interface-definitions/vpn_ipsec.xml.in
@@ -306,6 +306,7 @@
<children>
#include <include/vpn-ipsec-encryption.xml.i>
#include <include/vpn-ipsec-hash.xml.i>
+ #include <include/vpn-ipsec-esn.xml.i>
</children>
</tagNode>
</children>
@@ -622,6 +623,7 @@
</leafNode>
#include <include/vpn-ipsec-encryption.xml.i>
#include <include/vpn-ipsec-hash.xml.i>
+ #include <include/vpn-ipsec-esn.xml.i>
</children>
</tagNode>
</children>