diff options
| author | DmitriyEshenko <snooppy@mail.ua> | 2019-10-31 07:45:34 +0000 |
|---|---|---|
| committer | Daniil Baturin <daniil@baturin.org> | 2020-01-20 12:53:26 +0100 |
| commit | 3a192885d754ca71051cb3420e17de570c1aa88c (patch) | |
| tree | 90747bb41c449060336d0465355c7064963969ef | |
| parent | a061c3e1fa28a7f07a80fbd6b04978080095be79 (diff) | |
| download | vyatta-cfg-vpn-3a192885d754ca71051cb3420e17de570c1aa88c.tar.gz vyatta-cfg-vpn-3a192885d754ca71051cb3420e17de570c1aa88c.zip | |
T1780 Adding IPSec IKE close-action
| -rwxr-xr-x | scripts/vpn-config.pl | 8 | ||||
| -rw-r--r-- | templates/vpn/ipsec/ike-group/node.tag/close-action/node.def | 8 |
2 files changed, 16 insertions, 0 deletions
diff --git a/scripts/vpn-config.pl b/scripts/vpn-config.pl index d68e419..369e568 100755 --- a/scripts/vpn-config.pl +++ b/scripts/vpn-config.pl @@ -811,6 +811,14 @@ if ($vcVPN->exists('ipsec')) { } # + # Check for closeaction + # + my $close_act = $vcVPN->returnValue("ipsec ike-group $ike_group close-action"); + if (defined($close_act)) { + $genout .= "\tcloseaction=$close_act\n"; + } + + # # Allow the user for force UDP encapsulation for the ESP # payload. # diff --git a/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def b/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def new file mode 100644 index 0000000..0c05c21 --- /dev/null +++ b/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def @@ -0,0 +1,8 @@ +help: Action if the remote peer unexpectedly closes a CHILD_SA +type: txt +default: "none" +syntax:expression: $VAR(@) in "none","hold", "clear", "restart"; "must be none, hold clear, or restart" +val_help: none; Set action to none (default) +val_help: hold; Set action to hold +val_help: clear; Set action to clear +val_help: restart; Set action to restart |