The Perl Toolchain Summit 2025 Needs You: You can help 🙏 Learn more

NAME

Brocade::BSC::Node::NC::Vrouter::VPN

DESCRIPTION

Create and modify vpn configuration on a Vyatta virtual router controlled by a Brocade::BSC controller.

new

Creates and returns a new Brocade::BSC::Node::NC::Vrouter::VPN object.

as_json
# Returns : VPN as formatted JSON string.
get_payload
# Returns : VPN configuration as JSON for posting to controller.
set_ipsec_ike_group_proposal
# Parameters: group => name of IKE group to modify
# : tagnode => proposal identifier
# : encryption => one of 'aes128', 'aes256', '3des'
# : hash => 'sha1' or 'md5'
# : dh_group =>
# Returns : list of proposals
set_ipsec_ike_group_lifetime
# Parameters: group => name of IKE group to modify
# : lifetime => to apply to group
# Returns : lifetime
set_ipsec_esp_group_proposal
# Parameters: group => name of ESP group to modify
# : tagnode => proposal identifier
# : encryption => one of 'aes128', 'aes256', '3des'
# : hash => 'sha1' or 'md5'
# Returns : list of proposals
set_ipsec_esp_group_lifetime
# Parameters: group => name of ESP group to modify
# : lifetime => to apply to group
# Returns : lifetime
ipsec_site_site_peer_description
# Parameters: peertag => identifier for peer entry to modify
# : description
ipsec_site_site_peer_auth_mode
# Parameters: peertag => identifier for peer entry to modify
# : auth_mode
ipsec_site_site_peer_auth_psk
# Parameters: peertag => identifier for peer entry to modify
# : psk => pre-shared secret key
ipsec_site_site_peer_auth_rsa_key_name
# Parameters: peertag => identifier for peer entry to modify
# : rsa_key_name
ipsec_site_site_peer_auth_remote_id
# Parameters: peertag => identifer for peer entry to modify
# : remote_id
ipsec_site_site_peer_auth_ca_cert_file
# Parameters: peertag => identifier for peer entry to modify
# : path to certificate authority certificate
ipsec_site_site_peer_auth_srv_cert_file
# Parameters: peertag => identifier for peer entry to modify
# : path to server certificate
ipsec_site_site_peer_auth_srv_key_file
# Parameters: peertag => identifier for peer entry to modify
# : path to key file for server certificate
ipsec_site_site_peer_auth_srv_key_pswd
# Parameters: peertag => identifier for peer entry to modify
# : password for server cert key file
ipsec_site_site_peer_dflt_esp_grp
# Parameters: peertag => identifier for peer entry to modify
# : esp_group => identifier for ESP group to use with this peer
ipsec_site_site_peer_ike_grp
# Parameters: peertag => identifier for peer entry to modify
# ike_group => identifier for IKE group to use with this peer
ipsec_site_site_peer_local_addr
# Parameters: peertag => identifier for peer entry to modify
# : local_address => IP address on this vrouter for
# ipsec connection
ipsec_site_site_peer_tunnel_local_pfx
# Parameters: peer => identifier for peer entry to modify
# tunnel => identifier for tunnel to modify
# subnet => local subnet routed via tunnel
ipsec_site_site_peer_tunnel_remote_pfx
# Parameters: peer => identifier for peer entry to modify
# tunnel => identifier for tunnel to modify
# subnet => remote subnet routed via tunnel
nat_allow_network
# Parameters: subnet to be allowed through NAT, CIDR notation (w.x.y.z/d)
# Returns : allowed network list

Append a permitted IP subnet to list of permitted subnets.

nat_traversal
# Parameters: boolean: enable/disable NAT traversal
# Returns : current setting

Set or retrieve the NAT traversal flag.

l2tp_remote_access_user
# Parameters: hash {'name' => ..., 'pswd' => ...}
# Returns : current list of user/password entries

Append a user to list of authorized users.

l2tp_remote_access_user_auth_mode
# Parameters: mode
# Returns : current mode

Set or retrieve authentication mode.

l2tp_remote_access_client_ip_pool
# Parameters: 'start' => IPADDR, 'end' => IPADDR
# Returns : current cilent IP pool

Set or retrieve the IP address range that will be used for assigning addresses to remote VPN connected nodes.

l2tp_remote_access_description
# Parameters: description string
# Returns : description string

Set or retrieve the VPN description.

l2tp_remote_access_dhcp_interface
# Parameters:
# Returns :
l2tp_remote_access_primary_dns_server
# Parameters: IP address of DNS server
# Returns : current primary DNS server

Set or retrieve primary DNS server IP address.

l2tp_remote_access_secondary_dns_server
# Parameters: IP address of DNS server
# Returns : current secondary DNS server

Set or retrieve secondary DNS server IP address.

l2tp_remote_access_primary_wins_server
# Parameters: IP address of WINS server
# Returns : current primary WINS server

Set or retrieve primary WINS server IP address.

l2tp_remote_access_secondary_wins_server
# Parameters: IP address of WINS server
# Returns : current secondary WINS server

Set or retrieve secondary WINS server IP address.

ipsec_auth_mode
# Parameters: ipsec authentication mode
# Returns : current mode
auth_psk
# Parameters: pre-shared secret key for ipsec vpn
# Returns : psk
auth_ca_cert_file
# Parameters: path to file on vrouter containing x509 certificate
# of trusted certificate authority
# Returns : file path
auth_crl_file
# Parameters: path to file on vrouter containing x509 certificate
# revocation list
# Returns : file path
auth_srv_cert_file
# Parameters: path to file on vrouter containing x509 server certificate
# Returns : file path
auth_srv_key_file
# Parameters: path to file on vrouter containing x509 key
# Returns : file path
l2tp_remote_access_ipsec_auth_srv_key_pswd
# Parameters: path to file on vrouter containing x509 key password
# Returns : file path
l2tp_remote_access_mtu
# Parameters: maximum transmission unit to apply [128..16384]
# Returns : current MTU
l2tp_remote_access_outside_address
# Parameters: IP address
# Returns : current l2tp external IP address
l2tp_remote_access_outside_nexthop
# Parameters: IP address
# Returns : current l2tp gateway address
l2tp_remote_access_server_ip_pool
# Parameters: start => IP_ADDRESS
# : end => IP_ADDRESS
# Returns :
local_key
# Parameters: path to file on local system containing RSA key
# Returns : current path
rsa_key
# Parameters:
# Returns :

COPYRIGHT

Copyright (c) 2015, BROCADE COMMUNICATIONS SYSTEMS, INC

All rights reserved.