VPN plugin

[antoinekh]

Hello,

Could be very nice to have a plug-in for site to site VPN tunnels.

We managed hundreds IPsec tunnels with customer and it will be perfect if all this information could also be in Nautobot

This is a list of fields that I'd like to have

• Name
• status (Active, Offline, Backup, Planned, Deprecated)
• type (route based VTI, policy based)
• nat traversal enabled (true, false)
• interface of the device (linked to device interface)
• local peer ip (one or more, linked to ip in IPAM)
• remote peer ip (one or more, linked to ip in IPAM)
• list of local subnets (linked to Subnets in IPAM)
• list of remote subnets (linked to Subnets in IPAM)
• protocols used (IKEv1/IKEv2 and IPsec)
• date created
• contact field
• description field

…

[chadell]

Hi @antoinekh , we (@Kircheneer ) are currently working on a model extension for that, as a Nautobot App.
Hopefully, we will make it available very soon.

[jo-bzh]

Hello @chadell and @Kircheneer,
Just for us in order to have a visibility of what is inside your development, could you give us a way to see the functional and technical aspect of this app ?
Due to short term expectation on our side, we are going to develop a custom plugin to answer our needs.
This is why it could be helpful to be closed as possible to your app in order to migrate when the stable version will be released.
Thanks by advance.

[Kircheneer]

Hi! I meant to post this as a comment here.

[Kircheneer]

We are planning on the following modelling.

Tunnel

Has name, description and status as well as a TunnelProfile and 0-2 TunnelEndpoint instances, one for each end.

TunnelEndpoint

Each tunnel has 0-2 of these - they map the tunnel into the rest of the models:

• Overlay interface (e.g. Tunnel interface on Cisco gear)
• Underlay interface (i.e. the interface that holds the IP address for the tunnel)
• Source IP address (the destination can be found on the other endpoint)
• Advertised prefixes

TunnelProfile

Has name, description and a JSON blog for variable settings (like NAT traversal).

[jo-bzh]

Hello,
Thanks for your proposal,
The expected model is really the model proposed on the v3.7 of Netbox 9816-tunnels.