From f00a8dd320ed52677d3c45044cf03eaf63818567 Mon Sep 17 00:00:00 2001
From: Nicolas Fort <nicolasfort1988@gmail.com>
Date: Tue, 23 Jan 2024 18:43:34 +0000
Subject: T5977: firewall: remove ipsec options in output chain rule
 definitions, since it's not supported.

(cherry picked from commit 9d490ecf616eb9d019beee37a3802705c4109d9d)
---
 .../include/firewall/match-ipsec.xml.i              | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 interface-definitions/include/firewall/match-ipsec.xml.i

(limited to 'interface-definitions/include/firewall/match-ipsec.xml.i')

diff --git a/interface-definitions/include/firewall/match-ipsec.xml.i b/interface-definitions/include/firewall/match-ipsec.xml.i
new file mode 100644
index 000000000..82c2b324d
--- /dev/null
+++ b/interface-definitions/include/firewall/match-ipsec.xml.i
@@ -0,0 +1,21 @@
+<!-- include start from firewall/match-ipsec.xml.i -->
+<node name="ipsec">
+  <properties>
+    <help>Inbound IPsec packets</help>
+  </properties>
+  <children>
+    <leafNode name="match-ipsec">
+      <properties>
+        <help>Inbound IPsec packets</help>
+        <valueless/>
+      </properties>
+    </leafNode>
+    <leafNode name="match-none">
+      <properties>
+        <help>Inbound non-IPsec packets</help>
+        <valueless/>
+      </properties>
+    </leafNode>
+  </children>
+</node>
+<!-- include end -->
\ No newline at end of file
-- 
cgit v1.2.3