Page MenuHomeVyOS Platform

l2tp: Delete deprecated outside-nexthop and add gateway-address
Closed, ResolvedPublic


left|rightnexthop param is deprecated in strongswan.

left|rightnexthop = %direct | %defaultroute | <ip address> | <fqdn>

This parameter is usually not needed any more because the NETKEY IPsec stack does not require
explicit routing entries for the traffic to be tunneled. If left|sourceip is used with IKEv1
then left|rightnexthop must still be set in order for the source routes to work properly.

In current ipsec+l2tp implementation we have confusing param outside-nexthop, but this is gateway-address uses as client tunnel termination point.
Propose rename outside-nexthop to gateway-address

vyos@R1# set vpn l2tp remote-access gateway-address
Possible completions:
   <x.x.x.x>  Gatway address uses as client tunnel termination point


Difficulty level
Unknown (require assessment)
VyOS 1.2-rolling-201912020217
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Config syntax change (non-migratable)
Issue type
Unspecified (please specify)

Event Timeline

Unknown Object (User) triaged this task as Normal priority.Dec 6 2019, 5:04 PM
Unknown Object (User) created this task.
Unknown Object (User) closed this task as Resolved.Dec 30 2019, 10:22 PM

Tested successfully

erkin renamed this task from l2tp: Delete depricated outside-nexthop and add gateway-address to l2tp: Delete deprecated outside-nexthop and add gateway-address .Aug 31 2021, 6:09 PM
erkin set Issue type to Unspecified (please specify).