openwrtv4/package
Felix Fietkau e2e8cb8347 network: add virtual tunnel interface (VTI) support
This adds support for configuring VTI interfaces within /etc/config/network.
VTI interfaces are used to create IPsec tunnel interfaces. These interfaces
may be used for routing and other purposes.

Example config:
config interface 'vti1'
	option proto 'vti'
	option mtu '1500'
	option tunlink 'wan'
	option peeraddr '192.168.5.16'
	option zone 'VPN'
	option ikey 2
	option okey 2

config interface 'vti1_static'
	option proto 'static'
	option ifname '@vti1'
	option ipaddr '192.168.7.2/24'

The options ikey and okey correspond to the fwmark value of a ipsec policy.
The may be null if you do not want fwmarks.
Also peeraddr may be 0.0.0 if you want all ESP packets go through the
interface.
Example strongswan config:
conn vti
	left=%any
	leftcert=peer2.test.der
	leftid=@peer2.test
	right=192.168.5.16
	rightid=@peer3.test
	leftsubnet=0.0.0.0/0
	rightsubnet=0.0.0.0/0
	mark=2
	auto=route

Signed-off-by: André Valentin <avalentin@marcant.net>

SVN-Revision: 48274
2016-01-17 11:06:02 +00:00
..
base-files base-files: allow timezone to be overriden by zonename (proper zoneinfo support) 2015-12-23 14:44:31 +00:00
boot packages: bump uboot-sunxi to 2016.01 2016-01-15 20:27:32 +00:00
devel perf: fix strerror_r override detection, apparently part of tools/ relies on non-GNU behavior 2016-01-12 16:42:12 +00:00
firmware linux-firmware: fix mediatek/ralink package names 2016-01-11 20:51:19 +00:00
kernel kernel: add usb-net-sr9700 package 2016-01-17 11:03:41 +00:00
libs ustream-ssl: fix copy&paste mistake in mbedtls variant title 2016-01-16 09:14:03 +00:00
network network: add virtual tunnel interface (VTI) support 2016-01-17 11:06:02 +00:00
system ca-certificates: update to version 20160104 2016-01-17 11:03:36 +00:00
utils bzip2: only build the static library for the host, fixes build errors on mac os x 2016-01-05 12:15:41 +00:00
Makefile build: add opkg host dependency 2015-12-13 17:03:40 +00:00