diff options
author | Kim <UnicronNL@users.noreply.github.com> | 2017-04-25 11:13:34 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2017-04-25 11:13:34 +0200 |
commit | 18f30fbda88e075fbd48459f2f6d646ba333ff3c (patch) | |
tree | 7d6c989a38f8e1ef1d67274b7278a7130870bf36 | |
parent | 876cb466c7256973917dc56f81f08bf8364b900d (diff) | |
parent | 4e78db594120375843a981eae43d87edc873177a (diff) | |
download | vyatta-cfg-vpn-18f30fbda88e075fbd48459f2f6d646ba333ff3c.tar.gz vyatta-cfg-vpn-18f30fbda88e075fbd48459f2f6d646ba333ff3c.zip |
Merge pull request #15 from smunaut/T137
Fix VTI interface configuration to set both ikey and okey
-rwxr-xr-x | lib/Vyatta/VPN/vtiIntf.pm | 2 | ||||
-rwxr-xr-x | scripts/vyatta-vti-config.pl | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/lib/Vyatta/VPN/vtiIntf.pm b/lib/Vyatta/VPN/vtiIntf.pm index daec058..4e52fff 100755 --- a/lib/Vyatta/VPN/vtiIntf.pm +++ b/lib/Vyatta/VPN/vtiIntf.pm @@ -70,7 +70,7 @@ sub parseVtiTun { if ($tunop =~ m/local ([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)/) { $local = $1; } - if ($tunop =~ m/okey ([0-9\.]+)/) { + if ($tunop =~ m/key ([0-9\.]+)/) { $mark = $1; } return($remote, $local, $tunName, $mark); diff --git a/scripts/vyatta-vti-config.pl b/scripts/vyatta-vti-config.pl index fbfad64..81abf97 100755 --- a/scripts/vyatta-vti-config.pl +++ b/scripts/vyatta-vti-config.pl @@ -25,7 +25,7 @@ # # For each VTI tunnel (vpn ipsec site-to-site peer ip-address sti); find the vti tunnel, local address, mark. # Find the corresponding tunnel (interfaces vti vtiXXX), tunnel address, disable, mtu -# if not configured: ip tunnel add vtiXXX mode esp local $local remote $remote i_key $mark +# if not configured: ip tunnel add vtiXXX mode esp local $local remote $remote ikey $mark okey $mark # if (mtu): configure mtu # if (tunnel-addres): configur ip link vtiXXX address # if (!disable): enable the interface. @@ -207,7 +207,7 @@ foreach my $peer (@peers) { # By default we delete the tunnel... my $genmark = $mark; $gencmds .= "sudo /sbin/ip link delete $tunName type vti &> /dev/null\n"; - $gencmds .= "sudo /sbin/ip link add $tunName type vti local $lip remote $peer okey $genmark\n"; + $gencmds .= "sudo /sbin/ip link add $tunName type vti local $lip remote $peer okey $genmark ikey $genmark\n"; foreach my $tunIP (@tunIPs) { $gencmds .= "sudo /sbin/ip addr add $tunIP dev $tunName\n"; } |