diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-07-22 12:24:07 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-07-22 12:24:07 +0200 |
| commit | 085ca2cf541eaa1c605985c7e65cec9b7584acf1 (patch) | |
| tree | 3e932dd143340b9447fe8a1e906d95cd16cecf39 /data/templates/ipsec/swanctl/peer.j2 | |
| parent | 9fdb74db4411402a435dc841638478bb68a790c5 (diff) | |
| parent | 23a3419d512139650cfe3dc76759b370b0c0c3d6 (diff) | |
| download | vyos-1x-085ca2cf541eaa1c605985c7e65cec9b7584acf1.tar.gz vyos-1x-085ca2cf541eaa1c605985c7e65cec9b7584acf1.zip | |
Merge pull request #3841 from lucasec/t6599
T6599: ipsec: support disabling rekey of CHILD_SA, converge and fix defaults
Diffstat (limited to 'data/templates/ipsec/swanctl/peer.j2')
| -rw-r--r-- | data/templates/ipsec/swanctl/peer.j2 | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/data/templates/ipsec/swanctl/peer.j2 b/data/templates/ipsec/swanctl/peer.j2 index 58f0199fa..3a9af2c94 100644 --- a/data/templates/ipsec/swanctl/peer.j2 +++ b/data/templates/ipsec/swanctl/peer.j2 @@ -63,6 +63,11 @@ life_packets = {{ vti_esp.life_packets }} {% endif %} life_time = {{ vti_esp.lifetime }}s +{% if vti_esp.disable_rekey is vyos_defined %} + rekey_bytes = 0 + rekey_packets = 0 + rekey_time = 0s +{% endif %} local_ts = 0.0.0.0/0,::/0 remote_ts = 0.0.0.0/0,::/0 updown = "/etc/ipsec.d/vti-up-down {{ peer_conf.vti.bind }}" @@ -108,6 +113,11 @@ life_packets = {{ tunnel_esp.life_packets }} {% endif %} life_time = {{ tunnel_esp.lifetime }}s +{% if tunnel_esp.disable_rekey is vyos_defined %} + rekey_bytes = 0 + rekey_packets = 0 + rekey_time = 0s +{% endif %} {% if tunnel_esp.mode is not defined or tunnel_esp.mode == 'tunnel' %} {% if tunnel_conf.local.prefix is vyos_defined %} {% set local_prefix = tunnel_conf.local.prefix if 'any' not in tunnel_conf.local.prefix else ['0.0.0.0/0', '::/0'] %} |