Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-27858

[RFE] Support adding static route to ipsec xfrm interfaces

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Won't Do
    • Icon: Undefined Undefined
    • None
    • None
    • NetworkManager-libreswan
    • None
    • rhel-sst-network-management
    • ssg_networking
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None

      Goal

      • Route-based IPSec encryption is required for the SMB project.
        The suggested config:
      routes:
  config:
  - destination: 172.16.110.0/24
    metric: 150
    next-hop-interface: ipsec10
    source: 10.46.97.113
interfaces:
  - name: hosta_conn
    type: ipsec
    ipv4:
      enabled: true
      dhcp: true
    libreswan:
      ipsec-interface: "10"
      leftrsasigkey: '%cert'
      left: 10.46.97.113
      leftid: '%fromcert'
      leftcert: client01.cnf.com
      leftmodecfgclient: false
      right: 10.1.98.208
      rightrsasigkey: '%cert'
      rightid: '%fromcert'
      rightsubnet: 172.16.110.0/24
      ikev2: insist
      ike: aes256-sha1
      esp: aes256-sha1

      Acceptance Criteria

      A list of verification conditions, successful functional tests, or expected outcomes in order to declare this story/task successfully completed.

      • Verify X
      • Verify Y
      • Verify Z

              rh-ee-sfaye Stanislas Faye
              saledort@redhat.com Sabina Aledort
              Network Management Team Network Management Team
              Vladimir Benes Vladimir Benes
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: