ipsec: T5998: add replay-windows setting
4edc0611ec0a
Actions

Description

ipsec: T5998: add replay-windows setting

The replay_window for child SA will always be 32 (hence enabled). Add a CLI node
to explicitly change this.

set vpn ipsec site-to-site peer <name> replay-window <0-2040>

(cherry picked from commit 4d943d8fbf1253154897179b0e3ea2d93b898197)

Details

Provenance

c-po	Authored on Feb 2 2024, 7:44 PM
Mergify	Committed on Feb 3 2024, 8:05 PM

Parents

rVYOSONEX088dcfd35af2: Merge pull request #2933 from vyos/mergify/bp/sagitta/pr-2931

Branches

Tags

Event Timeline

Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX4edc0611ec0a: ipsec: T5998: add replay-windows setting (authored by c-po).Feb 3 2024, 8:05 PM

Changes (5)

Path

Size

data/

templates/

ipsec/

swanctl/

peer.j2

remote_access.j2

interface-definitions/

include/

ipsec/

replay-window.xml.i

vpn_ipsec.xml.in

smoketest/

scripts/

cli/

test_vpn_ipsec.py

rVYOSONEX4edc0611ec0a

View Options

data/templates/ipsec/swanctl/peer.j2

View Options

data/templates/ipsec/swanctl/remote_access.j2

View Options

interface-definitions/include/ipsec/replay-window.xml.i

View Options

interface-definitions/vpn_ipsec.xml.in

View Options

smoketest/scripts/cli/test_vpn_ipsec.py

ipsec: T5998: add replay-windows setting4edc0611ec0aActions

Description

Details

Event Timeline

Changes (5)

rVYOSONEX4edc0611ec0a

data/templates/ipsec/swanctl/peer.j2

data/templates/ipsec/swanctl/remote_access.j2

interface-definitions/include/ipsec/replay-window.xml.i

interface-definitions/vpn_ipsec.xml.in

smoketest/scripts/cli/test_vpn_ipsec.py

ipsec: T5998: add replay-windows setting
4edc0611ec0a
Actions