summaryrefslogtreecommitdiff
path: root/data/templates/ipsec
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@vyos.io>2024-04-22 18:09:07 +0200
committerGitHub <noreply@github.com>2024-04-22 18:09:07 +0200
commit428d793ef162cc3e61af0fbc89963898e6b3988d (patch)
tree8e4f43002a20d046edf1c9dba703b5517595ff25 /data/templates/ipsec
parent2208c846d6bffeecac99afa7ebc3eda5c467aebc (diff)
parent162a0f0d746f7789a676332ec04dba65fefd6d4e (diff)
downloadvyos-1x-428d793ef162cc3e61af0fbc89963898e6b3988d.tar.gz
vyos-1x-428d793ef162cc3e61af0fbc89963898e6b3988d.zip
Merge pull request #3341 from vyos/mergify/bp/sagitta/pr-3337
T6237: IPSec remote access VPN: ability to set EAP ID of clients (backport #3337)
Diffstat (limited to 'data/templates/ipsec')
-rw-r--r--data/templates/ipsec/swanctl/remote_access.j22
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2
index adfa32bde..6bced88c7 100644
--- a/data/templates/ipsec/swanctl/remote_access.j2
+++ b/data/templates/ipsec/swanctl/remote_access.j2
@@ -33,7 +33,7 @@
auth = pubkey
{% elif rw_conf.authentication.client_mode.startswith("eap") %}
auth = {{ rw_conf.authentication.client_mode }}
- eap_id = %any
+ eap_id = {{ '%any' if rw_conf.authentication.eap_id == 'any' else rw_conf.authentication.eap_id }}
{% endif %}
{% if rw_conf.authentication.client_mode is vyos_defined('eap-tls') or rw_conf.authentication.client_mode is vyos_defined('x509') %}
{# pass all configured CAs as filenames, separated by commas #}