Page MenuHomeVyOS Platform

Adopt VyOS CLI to latest StrongSwan options and deprecated Keywords
Closed, ResolvedPublicFEATURE REQUEST

Description

Logfiles contain messages like:
Sep 11 18:26:33 LR1 ipsec_starter[6113]: # deprecated keyword 'nat_traversal' in config setup

And StrongSwan PPL say: https://wiki.strongswan.org/issues/1547

Thus we should remove VyOS CLI options for set vpn ipsec nat-traversal 'enable' and set vpn ipsec ipsec-interfaces interface 'eth1'

Details

Difficulty level
Normal (likely a few hours)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Behavior change

Event Timeline

syncer triaged this task as Normal priority.Sep 25 2018, 2:05 PM
dmbaturin subscribed.

Since it does no harm, I suppose we can address it when we get to rewriting those scripts.

c-po removed c-po as the assignee of this task.Apr 3 2019, 8:10 PM
zsdc changed Difficulty level from Unknown (require assessment) to Normal (likely a few hours).Mar 11 2021, 7:00 PM
zsdc set Is it a breaking change? to Behavior change.

Note
ipsec-interface not deprecated. This option needed.

set vpn ipsec ipsec-interfaces interface 'eth1'
c-po claimed this task.
c-po edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.