components/openstack/neutron/files/services/vpn/device_drivers/template/solaris/ipsecinit.conf.template
branchs11u3-sru
changeset 6035 c9748fcc32de
child 6378 9d70f1e25eba
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/components/openstack/neutron/files/services/vpn/device_drivers/template/solaris/ipsecinit.conf.template	Fri May 20 17:42:29 2016 -0400
@@ -0,0 +1,27 @@
+#
+# Copyright (c) 2015, 2016 Oracle and/or its affiliates. All rights reserved.
+#
+#    Licensed under the Apache License, Version 2.0 (the "License"); you may
+#    not use this file except in compliance with the License. You may obtain
+#    a copy of the License at
+#
+#         http://www.apache.org/licenses/LICENSE-2.0
+#
+#    Unless required by applicable law or agreed to in writing, software
+#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+#    License for the specific language governing permissions and limitations
+#    under the License.
+#
+#    IKE Configuration for vpn-service "{{vpnservice.id}}"
+# Configuration for vpn-service "{{vpnservice.id}}"
+{% for ipsec_site_connection in vpnservice.ipsec_site_connections if ipsec_site_connection.admin_state_up
+%}
+{ tunnel {{ipsec_site_connection['tunnel_id']}} negotiate tunnel laddr {{vpnservice.subnet.cidr}} raddr {{ipsec_site_connection['peer_cidrs']|join(' ')}} } ipsec
+
+	{ encr_auth_algs {{ipsec_site_connection.ipsecpolicy.auth_algorithm}}
+	  encr_algs {{ipsec_site_connection.ipsecpolicy.encryption_algorithm}}
+	  sa shared }
+
+{% endfor %}
+