packages/net/strongswan/files
Paul Fertser 243673b2d0 strongswan: allow to specify per-connection reqid with UCI
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:32 +02:00
..
etc/hotplug.d/ipsec strongswan: add openwrt hotplug script handling 2018-07-16 11:34:57 +02:00
ipsec.init strongswan: allow to specify per-connection reqid with UCI 2020-01-17 01:07:32 +02:00
ipsec.secrets strongswan: import, update, adopt 2014-08-17 10:11:02 +02:00
ipsec.user strongswan: import, update, adopt 2014-08-17 10:11:02 +02:00