diff options
| author | Alex Harpin <development@landsofshadow.co.uk> | 2015-06-22 08:03:30 +0100 |
|---|---|---|
| committer | Jeff Leung <jleung@v10networks.ca> | 2015-12-05 04:28:14 -0500 |
| commit | 209d0ae7650cb76a18feedaf75052eb03036c184 (patch) | |
| tree | 84ffad7b561a65b06235f987be77edacea13de66 /scripts/vpn-config.pl | |
| parent | 33140773880aa3f4a94426c35c667096259d9c3d (diff) | |
| download | vyatta-cfg-vpn-209d0ae7650cb76a18feedaf75052eb03036c184.tar.gz vyatta-cfg-vpn-209d0ae7650cb76a18feedaf75052eb03036c184.zip | |
vyatta-cfg-vpn: validate peer address for vti based vpn connections
Validate the peer address used for VTI based VPN connections to ensure
only either an IPv4 or IPv6 address is used. Currently VTIs can only
accept these for peer addresses, other values will fail with extraneous
error messages, trap these earlier in the configuation commit process
for now.
Bug #359 http://bugzilla.vyos.net/show_bug.cgi?id=359
Diffstat (limited to 'scripts/vpn-config.pl')
| -rwxr-xr-x | scripts/vpn-config.pl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/scripts/vpn-config.pl b/scripts/vpn-config.pl index bb7b667..3f953b3 100755 --- a/scripts/vpn-config.pl +++ b/scripts/vpn-config.pl @@ -509,7 +509,7 @@ if ($vcVPN->exists('ipsec')) { or $any_peer == 1) { if ($isVti) { - vpn_die(["vpn","ipsec","site-to-site","peer",$peer],"$vpn_cfg_err The \"$peer\" is invalid ". "ip address must be specified for $tunKeyword.\n"); + vpn_die(["vpn","ipsec","site-to-site","peer",$peer],"$vpn_cfg_err The peer \"$peer\" is invalid, an ip address must be specified for $tunKeyword.\n"); } $right = '%any'; $any_peer = 1; |