summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/swanctl/peer.tmpl
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-02-20 19:13:23 +0100
committerGitHub <noreply@github.com>2022-02-20 19:13:23 +0100
commitac8ba16d63fb420ff6cd2f76e1666a329687a9a7 (patch)
treededcf2c9fdc389d66f8187145f40a1d15015d4b7 /data/templates/ipsec/swanctl/peer.tmpl
parentb586558a591baf01488fe4f9f32037de7239ae87 (diff)
parentf6c2b5e4762e7713c5868bebf8e482ce732e3302 (diff)
downloadvyos-1x-ac8ba16d63fb420ff6cd2f76e1666a329687a9a7.tar.gz
vyos-1x-ac8ba16d63fb420ff6cd2f76e1666a329687a9a7.zip
Merge pull request #1226 from sever-sever/T4254
vpn: T4254: Add cisco_flexvpn and install_virtual_ip_on options
Diffstat (limited to 'data/templates/ipsec/swanctl/peer.tmpl')
-rw-r--r--data/templates/ipsec/swanctl/peer.tmpl3
1 files changed, 3 insertions, 0 deletions
diff --git a/data/templates/ipsec/swanctl/peer.tmpl b/data/templates/ipsec/swanctl/peer.tmpl
index c6b71f2a1..f4e28d818 100644
--- a/data/templates/ipsec/swanctl/peer.tmpl
+++ b/data/templates/ipsec/swanctl/peer.tmpl
@@ -5,6 +5,9 @@
peer_{{ name }} {
proposals = {{ ike | get_esp_ike_cipher | join(',') }}
version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }}
+{% if peer_conf.virtual_address is defined and peer_conf.virtual_address is not none %}
+ vips = {{ peer_conf.virtual_address | join(', ') }}
+{% endif %}
local_addrs = {{ peer_conf.local_address if peer_conf.local_address != 'any' else '0.0.0.0/0' }} # dhcp:{{ peer_conf.dhcp_interface if 'dhcp_interface' in peer_conf else 'no' }}
remote_addrs = {{ peer if peer not in ['any', '0.0.0.0'] and peer[0:1] != '@' else '0.0.0.0/0' }}
{% if peer_conf.authentication is defined and peer_conf.authentication.mode is defined and peer_conf.authentication.mode == 'x509' %}