summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/swanctl
diff options
context:
space:
mode:
authorAlex W <embezzle.dev@proton.me>2024-04-21 21:59:56 +0100
committerMergify <37929162+mergify[bot]@users.noreply.github.com>2024-04-22 05:00:34 +0000
commit162a0f0d746f7789a676332ec04dba65fefd6d4e (patch)
tree8e4f43002a20d046edf1c9dba703b5517595ff25 /data/templates/ipsec/swanctl
parent2208c846d6bffeecac99afa7ebc3eda5c467aebc (diff)
downloadvyos-1x-162a0f0d746f7789a676332ec04dba65fefd6d4e.tar.gz
vyos-1x-162a0f0d746f7789a676332ec04dba65fefd6d4e.zip
T6237: IPSec remote access VPN: ability to set EAP ID of clients
(cherry picked from commit 78ea623df20b44309cc6ac9848ed18e97fc4ed03)
Diffstat (limited to 'data/templates/ipsec/swanctl')
-rw-r--r--data/templates/ipsec/swanctl/remote_access.j22
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2
index adfa32bde..6bced88c7 100644
--- a/data/templates/ipsec/swanctl/remote_access.j2
+++ b/data/templates/ipsec/swanctl/remote_access.j2
@@ -33,7 +33,7 @@
auth = pubkey
{% elif rw_conf.authentication.client_mode.startswith("eap") %}
auth = {{ rw_conf.authentication.client_mode }}
- eap_id = %any
+ eap_id = {{ '%any' if rw_conf.authentication.eap_id == 'any' else rw_conf.authentication.eap_id }}
{% endif %}
{% if rw_conf.authentication.client_mode is vyos_defined('eap-tls') or rw_conf.authentication.client_mode is vyos_defined('x509') %}
{# pass all configured CAs as filenames, separated by commas #}