vyos-1x icon indicating copy to clipboard operation
vyos-1x copied to clipboard

ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peer

Open sever-sever opened this issue 2 years ago • 0 comments

Change Summary

Migration and Change boolean nodes "enable/disable" to disable-xxxx, enable-xxxx and just xxx for VPN IPsec configurations

  • IKE changes:
    • replace ipsec ike-group <tag> mobike disable => ipsec ike-group <tag> disable-mobike
    • replace ipsec ike-group <tag> ikev2-reauth yes|no => ipsec ike-group <tag> ikev2-reauth
  • ESP changes:
    • replace ipsec esp-group <tag> compression enable => ipsec esp-group <tag> enable-compression
  • PEER changes:
    • replace: peer <tag> id xxx => peer <tag> local-id xxx
    • replace: peer <tag> force-encapsulation enable => peer <tag> force-encapsulation
    • add option: peer <tag> remote-address x.x.x.x

If peer name is IPv4 or IPv6 address, add remote-address via migration script

Types of changes

  • [ ] Bug fix (non-breaking change which fixes an issue)
  • [ ] New feature (non-breaking change which adds functionality)
  • [x] Code style update (formatting, renaming)
  • [ ] Refactoring (no functional changes)
  • [ ] Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
  • [ ] Other (please describe):

Related Task(s)

  • https://phabricator.vyos.net/T4118

Component(s) name

vpn, ipsec

Proposed changes

How to test

Checklist:

  • [x] I have read the CONTRIBUTING document
  • [x] I have linked this PR to one or more Phabricator Task(s)
  • [x] I have run the components SMOKETESTS if applicable
  • [x] My commit headlines contain a valid Task id
  • [x] My change requires a change to the documentation
  • [ ] I have updated the documentation accordingly

sever-sever avatar Aug 10 '22 20:08 sever-sever