From 7a663a75dc8b2f9842b72a05e17240edb4008849 Mon Sep 17 00:00:00 2001
From: aapostoliuk <a.apostoliuk@vyos.io>
Date: Wed, 18 Jan 2023 19:15:44 +0200
Subject: ipsec: T4925: Added PRF into IKE group

Added the possibility to configure Pseudo-Random Functions (PRF)
in IKE group
set vpn ipsec ike-group <Ike-grp> proposal <number> prf <PRF>
---
 python/vyos/template.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'python/vyos')

diff --git a/python/vyos/template.py b/python/vyos/template.py
index 2a4135f9e..ce9983958 100644
--- a/python/vyos/template.py
+++ b/python/vyos/template.py
@@ -476,6 +476,8 @@ def get_esp_ike_cipher(group_config, ike_group=None):
                 continue
 
             tmp = '{encryption}-{hash}'.format(**proposal)
+            if 'prf' in proposal:
+                tmp += '-' + proposal['prf']
             if 'dh_group' in proposal:
                 tmp += '-' + pfs_lut[ 'dh-group' +  proposal['dh_group'] ]
             elif 'pfs' in group_config and group_config['pfs'] != 'disable':
-- 
cgit v1.2.3