diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-08-01 13:08:36 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-08-01 13:08:36 +0200 |
| commit | 962ead698e191ff413aaa1585270dfed48100547 (patch) | |
| tree | d0aefbaeaf2b5d1716dd578060a93eb07618972a /data/templates/ipsec/swanctl/remote_access.j2 | |
| parent | b12cd41000bf64950582dc62538be609741aac54 (diff) | |
| parent | 50cf1746d3ab5e3666a3e502c67d7d853ae7f932 (diff) | |
| download | vyos-1x-962ead698e191ff413aaa1585270dfed48100547.tar.gz vyos-1x-962ead698e191ff413aaa1585270dfed48100547.zip | |
Merge pull request #3221 from lucasec/t5873
T5873: ipsec remote access VPN: support VTI interfaces.
Diffstat (limited to 'data/templates/ipsec/swanctl/remote_access.j2')
| -rw-r--r-- | data/templates/ipsec/swanctl/remote_access.j2 | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2 index e384ae972..c79f292b4 100644 --- a/data/templates/ipsec/swanctl/remote_access.j2 +++ b/data/templates/ipsec/swanctl/remote_access.j2 @@ -46,7 +46,7 @@ {% endif %} } children { - ikev2-vpn { + {{ name }}-client { esp_proposals = {{ esp | get_esp_ike_cipher(ike) | join(',') }} {% if esp.life_bytes is vyos_defined %} life_bytes = {{ esp.life_bytes }} @@ -69,6 +69,13 @@ {% set local_port = rw_conf.local.port if rw_conf.local.port is vyos_defined else '' %} {% set local_suffix = '[%any/{1}]'.format(local_port) if local_port else '' %} local_ts = {{ local_prefix | join(local_suffix + ",") }}{{ local_suffix }} +{% if rw_conf.bind is vyos_defined %} +{# The key defaults to 0 and will match any policies which similarly do not have a lookup key configuration. #} +{# Thus we simply shift the key by one to also support a vti0 interface #} +{% set if_id = rw_conf.bind | replace('vti', '') | int + 1 %} + if_id_in = {{ if_id }} + if_id_out = {{ if_id }} +{% endif %} } } } |