VPN IKE Proposal Multiselect Option #9085

Closed
opened 2025-12-29 20:45:16 +01:00 by adam · 3 comments
Owner

Originally created by @markh0338 on GitHub (Jan 13, 2024).

NetBox version

v3.7.0

Feature type

Change to existing functionality

Proposed functionality

In some configurations, it is possible to have multiple encryption/authentication/group algorithms selected in a single proposal. Currently, in v3.7.0 only one encryption algorithm or authentication algorithm or DH group can be selected per proposal. It would be nice to be able to select multiple options for each field.

Use case

A proposal like this is currently not possible to documented.
crypto ikev2 proposal ike-proposal-1
encryption aes-cbc-256 aes-cbc-128
integrity sha512 sha256
group 21 20 19

Database changes

No response

External dependencies

No response

Originally created by @markh0338 on GitHub (Jan 13, 2024). ### NetBox version v3.7.0 ### Feature type Change to existing functionality ### Proposed functionality In some configurations, it is possible to have multiple encryption/authentication/group algorithms selected in a single proposal. Currently, in v3.7.0 only one encryption algorithm or authentication algorithm or DH group can be selected per proposal. It would be nice to be able to select multiple options for each field. ### Use case A proposal like this is currently not possible to documented. crypto ikev2 proposal ike-proposal-1 encryption aes-cbc-256 aes-cbc-128 integrity sha512 sha256 group 21 20 19 ### Database changes _No response_ ### External dependencies _No response_
adam added the type: feature label 2025-12-29 20:45:16 +01:00
adam closed this issue 2025-12-29 20:45:16 +01:00
Author
Owner

@jeffgdotorg commented on GitHub (Jan 16, 2024):

Thanks for your interest in helping improve NetBox.

If this issue had arrived during the 3.7.0 beta period, a conversation about allowing multiple values in IKE proposals might have led to us taking up the suggestion. Unfortunately the modeling of proposals is now finalized, and altering it isn't something we currently have the resources to take on.

I'm therefore closing this issue, but I encourage you to start a discussion so that we can get a feel for how many other NetBox users would benefit from this change.

@jeffgdotorg commented on GitHub (Jan 16, 2024): Thanks for your interest in helping improve NetBox. If this issue had arrived during the 3.7.0 beta period, a conversation about allowing multiple values in IKE proposals might have led to us taking up the suggestion. Unfortunately the modeling of proposals is now finalized, and altering it isn't something we currently have the resources to take on. I'm therefore closing this issue, but I encourage you to start a discussion so that we can get a feel for how many other NetBox users would benefit from this change.
Author
Owner

@mbneteng commented on GitHub (Jan 17, 2024):

I agree with @markh0338 this is a limitation with the model. Utilizing multiple algorithms or DH groups is very common in proposals. These proposals are typically the most complex ones and having the ability to model them in NB would be very beneficial.

@mbneteng commented on GitHub (Jan 17, 2024): I agree with @markh0338 this is a limitation with the model. Utilizing multiple algorithms or DH groups is very common in proposals. These proposals are typically the most complex ones and having the ability to model them in NB would be very beneficial.
Author
Owner

@jeremystretch commented on GitHub (Jan 17, 2024):

@mbneteng this would have been actionable feedback during the monhth-long v3.7 beta period. However, now that v3.7.0 has been released we will not be making any breaking changes to the VPN data model in the near future.

@jeremystretch commented on GitHub (Jan 17, 2024): @mbneteng this would have been actionable feedback during the monhth-long v3.7 beta period. However, now that v3.7.0 has been released we will not be making any breaking changes to the VPN data model in the near future.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#9085