From 2e6cd026d180ee49ae92bae1d01a9c880b06d3f9 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 23 Jan 2020 21:18:03 +0100
Subject: openvpn: T1975: ta devices need to be explicitly brought up

---
 src/conf_mode/interfaces-openvpn.py | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

(limited to 'src/conf_mode/interfaces-openvpn.py')

diff --git a/src/conf_mode/interfaces-openvpn.py b/src/conf_mode/interfaces-openvpn.py
index 50d367f2f..3a7bc6611 100755
--- a/src/conf_mode/interfaces-openvpn.py
+++ b/src/conf_mode/interfaces-openvpn.py
@@ -426,7 +426,7 @@ def get_config():
     # disable ncp-ciphers support
     if conf.exists('encryption disable-ncp'):
         openvpn['disable_ncp'] = True
-    
+
     # data encryption algorithm ncp-list
     if conf.exists('encryption ncp-ciphers'):
         _ncp_ciphers = []
@@ -456,7 +456,7 @@ def get_config():
                 _ncp_ciphers.append('aes-256-gcm')
                 _ncp_ciphers.append('AES-256-GCM')
         openvpn['ncp_ciphers'] = ':'.join(_ncp_ciphers)
-    
+
     # hash algorithm
     if conf.exists('hash'):
         openvpn['hash'] = conf.return_value('hash')
@@ -995,6 +995,11 @@ def apply(openvpn):
     except:
         pass
 
+    # TAP interface needs to be brought up explicitly
+    if openvpn['type'] == 'tap':
+        if not openvpn['disable']:
+            Interface(openvpn['intf']).set_state('up')
+
     return None
 
 
-- 
cgit v1.2.3