summaryrefslogtreecommitdiff
path: root/docs/configuration
diff options
context:
space:
mode:
authorRobert Göhler <github@ghlr.de>2024-11-27 20:57:16 +0100
committerGitHub <noreply@github.com>2024-11-27 20:57:16 +0100
commit60a2b5373a1bcb8f66f533d9164c1441380b244e (patch)
treee1dbd802785a8174071d0e7727ac71495ef794f7 /docs/configuration
parent940057d0d919e81faf9f61276b1b85029dc37a08 (diff)
parente07a1a740c2e587a22b361fc19dbd2b78957d135 (diff)
downloadvyos-documentation-60a2b5373a1bcb8f66f533d9164c1441380b244e.tar.gz
vyos-documentation-60a2b5373a1bcb8f66f533d9164c1441380b244e.zip
Merge pull request #1572 from sever-sever/T264-doc
Add IPSec base64 secrets
Diffstat (limited to 'docs/configuration')
-rw-r--r--docs/configuration/vpn/site2site_ipsec.rst7
1 files changed, 5 insertions, 2 deletions
diff --git a/docs/configuration/vpn/site2site_ipsec.rst b/docs/configuration/vpn/site2site_ipsec.rst
index ab0f623f..400aff29 100644
--- a/docs/configuration/vpn/site2site_ipsec.rst
+++ b/docs/configuration/vpn/site2site_ipsec.rst
@@ -25,8 +25,11 @@ Each site-to-site peer has the next options:
dynamically;
* ``id`` - static ID's for authentication. In general local and remote
address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;
- * ``secret`` - predefined shared secret. Used if configured mode
- ``pre-shared-secret``;
+ * ``secret`` - a predefined shared secret used in configured mode
+ ``pre-shared-secret``. Base64-encoded secrets are allowed if
+ `secret-type base64` is configured;
+ * ``secret-type`` - specifies the secret type, either ``plaintext`` or
+ ``base64``. Default to ``plaintext``;
* ``local-id`` - ID for the local VyOS router. If defined, during the