Page MenuHomeVyOS Platform

IPSec VPN: Add support for `port` to associate with protocol for policies
Open, NormalPublicFEATURE REQUEST

Description

Summary

Add support for port to associate with specific protocol for policy-based tunnels (local and remote traffic selectors)

CLI option:
set vpn ipsec site-to-site peer vpn_03 tunnel 0 port <number/range>

Use case

To passthrough traffic from a local service address/port to any remote address/port.

https://docs.strongswan.org/docs/5.9/config/quickstart.html#_for_specific_protocols_andor_ports

Additional information

Strongswan reference:

https://docs.strongswan.org/docs/5.9/swanctl/swanctlConf.html

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)