vyos-1x
vyos-1x copied to clipboard
ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peer
Change Summary
Migration and Change boolean nodes "enable/disable"
to
disable-xxxx, enable-xxxx
and just xxx
for VPN IPsec configurations
-
IKE changes:
- replace
ipsec ike-group <tag> mobike disable
=>ipsec ike-group <tag> disable-mobike
- replace
ipsec ike-group <tag> ikev2-reauth yes|no
=>ipsec ike-group <tag> ikev2-reauth
- replace
-
ESP changes:
- replace
ipsec esp-group <tag> compression enable
=>ipsec esp-group <tag> enable-compression
- replace
-
PEER changes:
- replace:
peer <tag> id xxx
=>peer <tag> local-id xxx
- replace:
peer <tag> force-encapsulation enable
=>peer <tag> force-encapsulation
- add option:
peer <tag> remote-address x.x.x.x
- replace:
If peer name is IPv4 or IPv6 address, add remote-address via migration script
Types of changes
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [x] Code style update (formatting, renaming)
- [ ] Refactoring (no functional changes)
- [ ] Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
- [ ] Other (please describe):
Related Task(s)
- https://phabricator.vyos.net/T4118
Component(s) name
vpn, ipsec
Proposed changes
How to test
Checklist:
- [x] I have read the CONTRIBUTING document
- [x] I have linked this PR to one or more Phabricator Task(s)
- [x] I have run the components SMOKETESTS if applicable
- [x] My commit headlines contain a valid Task id
- [x] My change requires a change to the documentation
- [ ] I have updated the documentation accordingly