diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-02-20 20:28:11 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2022-02-20 20:28:13 +0100 |
| commit | 4395d0080a9238240c16657f711eb537195778eb (patch) | |
| tree | d3fb9f95adaef64b3bde1aa28dd33991bc5801ce | |
| parent | 9ca9ddcb07ad9f2cbda516bb4cf801bcdcc84eb7 (diff) | |
| download | vyos-documentation-4395d0080a9238240c16657f711eb537195778eb.tar.gz vyos-documentation-4395d0080a9238240c16657f711eb537195778eb.zip | |
openconnect: remove example b/c of missing PKI
OpenConnect lacks full documentation which would also include how to create and
add use keys from the new PKI backend. For the time beeing we should not
confuse users.
| -rw-r--r-- | docs/configuration/vpn/openconnect.rst | 27 |
1 files changed, 3 insertions, 24 deletions
diff --git a/docs/configuration/vpn/openconnect.rst b/docs/configuration/vpn/openconnect.rst index 7ab53659..356b3322 100644 --- a/docs/configuration/vpn/openconnect.rst +++ b/docs/configuration/vpn/openconnect.rst @@ -54,30 +54,9 @@ Server Configuration set vpn opneconnect network-settings client-ip-settings subnet <subnet> set vpn openconnect network-settings name-server <address> set vpn openconnect network-settings name-server <address> - set vpn openconnect ssl ca-certificate <file> - set vpn openconnect ssl certificate <file> - set vpn openconnect ssl passphrase <file> - - -******* -Example -******* - -Use local user name "user4" with password "SecretPassword" -Client IP addresses will be provided from pool 100.64.0.0/24 -The Gateway IP Address must be in one of the router´s interfaces. - -.. code-block:: none - - set vpn openconnect authentication local-users username user4 password 'SecretPassword' - set vpn openconnect authentication mode 'local' - set vpn openconnect network-settings client-ip-settings subnet '100.64.0.0/24' - set vpn openconnect network-settings name-server '10.1.1.1' - set vpn openconnect network-settings name-server '10.1.1.2' - set vpn openconnect ssl ca-certificate '/config/auth/fullchain.pem' - set vpn openconnect ssl certificate '/config/auth/cert.pem' - set vpn openconnect ssl passphrase '/config/auth/privkey.pem' - + set vpn openconnect ssl ca-certificate <pki-ca-name> + set vpn openconnect ssl certificate <pki-cert-name> + set vpn openconnect ssl passphrase <pki-password> ************ Verification |