Skip to content

Commit d03cb2b

Browse files
committed
ipsec: Add new options: rightca, leftprotoport, rightprotoport
Signed-off-by: Gris Ge <fge@redhat.com>
1 parent e43a462 commit d03cb2b

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

devel/yaml_api.md

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1654,9 +1654,9 @@ interfaces:
16541654
```
16551655

16561656
The `libreswan` section, nmstate provides these properties:
1657-
* `nm-auto-defaults`: Boolean. Please always explicitly set it to `false` for
1658-
aligning libreswan default values instead of NetworkManager default values.
1659-
Default is true for backwards compatibility.
1657+
* `nm-auto-defaults`: Boolean. New in 2.2.56. Please always explicitly set it
1658+
to `false` for aligning libreswan default values instead of NetworkManager
1659+
default values. Default is true for backwards compatibility.
16601660
* `ipsec-interface`: String 'yes' or 'no' or unsigned integer.
16611661
* `authby`: Authentication method. Normally you don't need to set it.
16621662
* `dpddelay`: Integer.
@@ -1684,6 +1684,11 @@ The `libreswan` section, nmstate provides these properties:
16841684
using in host-to-host mode.
16851685
* `type`: `transport` or `tunnel`. The `tunnel` is the default value if not
16861686
defined.
1687+
* `rightca`: String. New in 2.2.56. Certificate Authority (CA) of remote peer.
1688+
* `leftprotoport`: String. New in 2.2.57. Allowed protocols and ports over
1689+
connection.
1690+
* `rightprotoport`: String. New in 2.2.57. Allowed protocols and ports over
1691+
connection.
16871692

16881693
Except the `psk` and `nm-auto-defaults` properties, all other properties are
16891694
libreswan specific options, please refer to the manpage of `ipsec.conf` for

0 commit comments

Comments
 (0)