diff options
| author | DmitriyEshenko <snooppy@mail.ua> | 2019-10-31 07:45:34 +0000 |
|---|---|---|
| committer | DmitriyEshenko <snooppy@mail.ua> | 2019-10-31 07:45:34 +0000 |
| commit | 495c59a20cf35aeb5449f9166859f823c0ab08a7 (patch) | |
| tree | b43d2f4be0894f4ff41a24da4432b1b30f9188e1 | |
| parent | 2ff7343c11aad93d1d6e00c9bb8ac316d9320227 (diff) | |
| download | vyatta-cfg-vpn-495c59a20cf35aeb5449f9166859f823c0ab08a7.tar.gz vyatta-cfg-vpn-495c59a20cf35aeb5449f9166859f823c0ab08a7.zip | |
T1780 Adding IPSec IKE close-action
| -rwxr-xr-x | scripts/vpn-config.pl | 8 | ||||
| -rw-r--r-- | templates/vpn/ipsec/ike-group/node.tag/close-action/node.def | 8 |
2 files changed, 16 insertions, 0 deletions
diff --git a/scripts/vpn-config.pl b/scripts/vpn-config.pl index d68e419..369e568 100755 --- a/scripts/vpn-config.pl +++ b/scripts/vpn-config.pl @@ -811,6 +811,14 @@ if ($vcVPN->exists('ipsec')) { } # + # Check for closeaction + # + my $close_act = $vcVPN->returnValue("ipsec ike-group $ike_group close-action"); + if (defined($close_act)) { + $genout .= "\tcloseaction=$close_act\n"; + } + + # # Allow the user for force UDP encapsulation for the ESP # payload. # diff --git a/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def b/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def new file mode 100644 index 0000000..0c05c21 --- /dev/null +++ b/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def @@ -0,0 +1,8 @@ +help: Action if the remote peer unexpectedly closes a CHILD_SA +type: txt +default: "none" +syntax:expression: $VAR(@) in "none","hold", "clear", "restart"; "must be none, hold clear, or restart" +val_help: none; Set action to none (default) +val_help: hold; Set action to hold +val_help: clear; Set action to clear +val_help: restart; Set action to restart |