summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/swanctl
AgeCommit message (Expand)Author
2024-07-22T6599: ipsec: support disabling rekey of CHILD_SA.Lucas Christian
2024-04-22T6237: IPSec remote access VPN: ability to set EAP ID of clientsAlex W
2024-04-12T5871: ipsec remote access VPN: specify "cacerts" for client auth.Lucas Christian
2024-03-28T5872: re-write exit hook to always regenerate configLucas Christian
2024-03-28T5872: fix ipsec dhclient exit hookLucas Christian
2024-03-28T5872: ipsec remote access VPN: support dhcp-interface.Lucas Christian
2024-02-03ipsec: T5998: add replay-windows settingChristian Breunig
2024-01-17T5953: Changed values of 'close-action' to Strongswan valuesaapostoliuk
2024-01-16T4658: Renamed DPD action value from 'hold' to 'trap'aapostoliuk
2023-12-30T5870: ipsec remote access VPN: add x509 ("pubkey") authentication.Lucas Christian
2023-01-12T4118: Add default value any for connection remote-idViacheslav Hletenko
2022-11-21T4823: Fix IPsec transport mode remote TSViacheslav Hletenko
2022-09-20ipsec: T4118: bugfix migration of IKEv2 road-warrior "id" CLI optionChristian Poessinger
2022-09-16Merge pull request #1463 from sever-sever/T4118Daniil Baturin
2022-09-16ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peerViacheslav Hletenko
2022-08-10dmvpn: T4595: Fix dpd profile optionsViacheslav Hletenko
2022-05-06ipsec: T4353: use "" quotes on road-warrior idChristian Poessinger
2022-05-01ipsec: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-04-25vpn-ipsec: T4398: Fix unexpected passthrough policy for peerViacheslav Hletenko
2022-04-13ipsec: T4333: migrate to new vyos_defined Jinja2 testChristian Poessinger
2022-03-24ike-group: T4288 : close-action is missing in swanctl.confsrividya0208
2022-02-22Merge pull request #1230 from sever-sever/T1856Christian Poessinger
2022-02-20ipsec: T3948: Add CLI site-to-site peer connection-type noneViacheslav Hletenko
2022-02-20ipsec: T1856: Ability to set SA life bytes and packetsViacheslav Hletenko
2022-02-19vpn: T4254: Add cisco_flexvpn and install_virtual_ip_on optionsViacheslav Hletenko
2021-12-31ipsec: T4126: Ability to set priorities for installed policyViacheslav
2021-12-28ipsec: T4111: Fix for swanctl configuration IPV6 peersViacheslav
2021-11-18dmvpn: T4010: Fix template ipsec profile rekey_timeViacheslav
2021-09-19ipsec: T1441: Clean up vti-up-down script for XFRM interfacesLucas Christian
2021-09-18ipsec: vti: T3831: avoid usinf xfrm if_id 0 - implement shift by oneChristian Poessinger
2021-09-15ipsec: T3830: "authentication id|use-x509-id" are mutually exclusiveChristian Poessinger
2021-09-15ipsec: T3830: set connections.<conn>.remote<suffix>.id to "peer" if undefinedChristian Poessinger
2021-09-13ipsec: T3828: Use IKE dh-group when ESP dh-group is set to `enable`sarthurdev
2021-08-27ipsec: T1210: Jinj2 template did not honor inactivity/timeout settingChristian Poessinger
2021-08-20ipsec: T1210: add missing if clause around unique keyChristian Poessinger
2021-08-19ipsec: dmvpn: T3764: bugfix mixed up IKE/ESP lifetime variableChristian Poessinger
2021-08-19ipsec: T3764: add additional quantifier for IKE and ESP lifetimeChristian Poessinger
2021-08-19ipsec: T3764: bugfix missing IKE and ESP lifetime valuesChristian Poessinger
2021-08-10ipsec: T3727: Fix ESP proposals not being set from tunnel esp-groupsarthurdev
2021-07-27ipsec: T3705: bugfix for VTI interfaces no honoring default-esp-groupChristian Poessinger
2021-07-19ipsec: T1210: add "unique" option to specify how to handle multiple connectionsChristian Poessinger
2021-07-19ipsec: T1210: split out pool from remote-access configurationChristian Poessinger
2021-07-18ipsec: T1210: remote-access pools can not hold both IPv4 and IPv6 prefixesChristian Poessinger
2021-07-15pki: ipsec: l2tp: T2816: T3642: Move IPSec/L2TP code into vpn_ipsec.py and up...sarthurdev
2021-07-07pki: T3642: Migrate rsa-keys to PKI configurationsarthurdev
2021-07-05ipsec: T1210: T1251: Add more features to remote-access connectionssarthurdev
2021-07-04ipsec: T1210: T1251: add "local" traffic-selector include definitionChristian Poessinger
2021-07-04ipsec: T1210: T1251: extend ra config with address pools/traffic selectorssarthurdev
2021-07-04ipsec: T1210: T1251: IKEv2 road-warrior supportChristian Poessinger
2021-07-03ipsec: T2816: provide x509 certificate base auth building blocksChristian Poessinger