Ability to use x509 certificates for DMVPN
Open, WishlistPublicFEATURE REQUEST
Actions

Assigned To

None

Authored By

	Viacheslav
	Nov 18 2021, 4:37 PM

Description

Add ability to use authentication mode x509 for DMVPN profile
We support preshared key only:

vyos@hub# set vpn ipsec profile NHRPVPN authentication mode 
Possible completions:
   pre-shared-secret
                Use pre-shared secret key

      
[edit]
vyos@hub#

It also requires an additional "authentication remote-id" T3848

set vpn ipsec profile NHRPVPN authentication remote-id

Details

Difficulty level: Unknown (require assessment)
Version: -
Why the issue appeared?: Will be filled on close
Is it a breaking change?: Unspecified (possibly destroys the router)
Issue type: Feature (new functionality)

Related Objects

Mentioned Here: T3848: Abbility to set local/remote id for dmvpn

Event Timeline

Viacheslav created this task.Nov 18 2021, 4:37 PM

kevinrausch added a subscriber: kevinrausch.Jan 16 2024, 2:21 PM

Viacheslav triaged this task as Wishlist priority.Jan 20 2024, 10:32 AM

dmbaturin edited projects, added VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.Thu, Apr 11, 7:31 PM

Ability to use x509 certificates for DMVPNOpen, WishlistPublicFEATURE REQUESTActions

Description

Details

Related Objects

Event Timeline

Ability to use x509 certificates for DMVPN
Open, WishlistPublicFEATURE REQUEST
Actions