From 2eb0ddc54ea8bf50f62cc381eb3356363194c6fd Mon Sep 17 00:00:00 2001 From: Christian Poessinger Date: Tue, 20 Sep 2022 20:32:55 +0200 Subject: ipsec: T4118: bugfix migration of IKEv2 road-warrior "id" CLI option The "authentication id" option for road-warriors did not get migrated to the new local-id CLI node. This has been fixed. --- data/templates/ipsec/swanctl/remote_access.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'data') diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2 index d2760ec1f..60d2d1807 100644 --- a/data/templates/ipsec/swanctl/remote_access.j2 +++ b/data/templates/ipsec/swanctl/remote_access.j2 @@ -17,9 +17,9 @@ pools = {{ rw_conf.pool | join(',') }} {% endif %} local { -{% if rw_conf.authentication.id is vyos_defined and rw_conf.authentication.use_x509_id is not vyos_defined %} +{% if rw_conf.authentication.local_id is vyos_defined and rw_conf.authentication.use_x509_id is not vyos_defined %} {# please use " quotes - else Apple iOS goes crazy #} - id = "{{ rw_conf.authentication.id }}" + id = "{{ rw_conf.authentication.local_id }}" {% endif %} {% if rw_conf.authentication.server_mode == 'x509' %} auth = pubkey -- cgit v1.2.3