Page MenuHomeVyOS Platform

Adopt VyOS CLI to latest StrongSwan options and deprecated Keywords
Closed, ResolvedPublicFEATURE REQUEST


Logfiles contain messages like:
Sep 11 18:26:33 LR1 ipsec_starter[6113]: # deprecated keyword 'nat_traversal' in config setup

And StrongSwan PPL say:

Thus we should remove VyOS CLI options for set vpn ipsec nat-traversal 'enable' and set vpn ipsec ipsec-interfaces interface 'eth1'


Difficulty level
Normal (likely a few hours)
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Behavior change

Event Timeline

syncer triaged this task as Normal priority.Sep 25 2018, 2:05 PM
dmbaturin added a subscriber: dmbaturin.

Since it does no harm, I suppose we can address it when we get to rewriting those scripts.

c-po removed c-po as the assignee of this task.Apr 3 2019, 8:10 PM
zsdc changed Difficulty level from Unknown (require assessment) to Normal (likely a few hours).Mar 11 2021, 7:00 PM
zsdc set Is it a breaking change? to Behavior change.

ipsec-interface not deprecated. This option needed.

set vpn ipsec ipsec-interfaces interface 'eth1'
c-po claimed this task.
c-po edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.