Page MenuHomePhabricator

l2tp: Delete depricated outside-nexthop and add gateway-address
Closed, ResolvedPublic

Description

left|rightnexthop param is deprecated in strongswan.

left|rightnexthop = %direct | %defaultroute | <ip address> | <fqdn>

This parameter is usually not needed any more because the NETKEY IPsec stack does not require
explicit routing entries for the traffic to be tunneled. If left|sourceip is used with IKEv1
then left|rightnexthop must still be set in order for the source routes to work properly.

In current ipsec+l2tp implementation we have confusing param outside-nexthop, but this is gateway-address uses as client tunnel termination point.
Propose rename outside-nexthop to gateway-address

vyos@R1# set vpn l2tp remote-access gateway-address
Possible completions:
   <x.x.x.x>  Gatway address uses as client tunnel termination point

Details

Difficulty level
Unknown (require assessment)
Version
VyOS 1.2-rolling-201912020217
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Config syntax change (non-migratable)