Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-07-22 | T6599: ipsec: support disabling rekey of CHILD_SA. | Lucas Christian | |
Also adds support for life_bytes, life_packets, and DPD for remote-access connections. Changes behavior of remote-access esp-group lifetime setting to have parity with site-to-site connections. (cherry picked from commit fd5d7ff0b4fd69b248ecb29c6ec1f3cf844c41cf) | |||
2024-04-21 | T6237: IPSec remote access VPN: ability to set EAP ID of clients | Alex W | |
2024-04-11 | T5871: ipsec remote access VPN: specify "cacerts" for client auth. | Lucas Christian | |
2024-03-11 | T5872: re-write exit hook to always regenerate config | Lucas Christian | |
2024-03-10 | T5872: fix ipsec dhclient exit hook | Lucas Christian | |
2024-03-10 | T5872: ipsec remote access VPN: support dhcp-interface. | Lucas Christian | |
2024-02-03 | ipsec: T5998: add replay-windows setting | Christian Breunig | |
The replay_window for child SA will always be 32 (hence enabled). Add a CLI node to explicitly change this. * set vpn ipsec site-to-site peer <name> replay-window <0-2040> | |||
2023-12-30 | T5870: ipsec remote access VPN: add x509 ("pubkey") authentication. | Lucas Christian | |
2022-09-20 | ipsec: T4118: bugfix migration of IKEv2 road-warrior "id" CLI option | Christian Poessinger | |
The "authentication id" option for road-warriors did not get migrated to the new local-id CLI node. This has been fixed. | |||
2022-05-06 | ipsec: T4353: use "" quotes on road-warrior id | Christian Poessinger | |
2022-05-01 | ipsec: T4353: fix Jinja2 linting errors | Christian Poessinger | |