102 Matrox Extio 3 Series – User Guide
The “secrets” sections
The configuration can contain persistent secrets in the "secrets" section, or the secrets, if any, can be
loaded dynamically by the user in the VPN configuration page of the OSD. When loading secrets
through the OSD, a checkbox allows to persist the secret on the box. When not persistent, the secrets
must be re-loaded at every VPN connection.
A secret can be an authentication credential or a private key decryption passphrase.
The syntax for the "secrets" section in
swanctl.json
is as follows for the secret types "eap", "xauth",
"ntlm", "ike", and "ppk":
"secrets" : {
"<secret-type>" : {
"id" : "<ID>"
"secret" : "<SECRET>"
}
}
The syntax for the secret types "private" and "pkcs12" is as follows:
"secrets" : {
"<secret-type>" : {
"file" : "<FILE>"
"secret" : "<SECRET>"
}
}
Where <FILE> is the name of a private key or pkcs12 file in its respective sub-folder contained in the
zip package.
