Page MenuHomeVyOS Platform

Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2
Closed, ResolvedPublicFEATURE REQUEST

Description

VyOS does not have the possibility to configure PRF in IKEv2 proposals
https://docs.strongswan.org/docs/5.9/config/IKEv2CipherSuites.html#_pseudo_random_functions
https://docs.strongswan.org/docs/5.9/swanctl/swanctlConf.html#_connections
Need to add the possibility to add PRF to IKE group when AEAD is used

set vpn ipsec ike-group IKE-group proposal 1 prf <PRF>

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Related Objects

Mentioned In
1.3.3