From 6c7e22e730daf835080bdb384f1e08eb766fbe85 Mon Sep 17 00:00:00 2001 From: sarthurdev <965089+sarthurdev@users.noreply.github.com> Date: Sat, 12 Jun 2021 23:21:20 +0200 Subject: ipsec: T1501: Use vyos.validate.is_ipv6_link_local --- src/conf_mode/vpn_ipsec.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src/conf_mode/vpn_ipsec.py') diff --git a/src/conf_mode/vpn_ipsec.py b/src/conf_mode/vpn_ipsec.py index 3eaa78a4b..f80a9455a 100755 --- a/src/conf_mode/vpn_ipsec.py +++ b/src/conf_mode/vpn_ipsec.py @@ -25,6 +25,7 @@ from vyos.configverify import verify_interface_exists from vyos.ifconfig import Interface from vyos.template import ip_from_cidr from vyos.template import render +from vyos.validate import is_ipv6_link_local from vyos.util import call from vyos.util import dict_search from vyos.util import get_interface_address @@ -173,7 +174,7 @@ def get_dhcp_address(iface): if not addresses: return None for address in addresses: - if not address.startswith("fe80:"): # Skip link-local ipv6 + if not is_ipv6_link_local(address): return ip_from_cidr(address) return None -- cgit v1.2.3