diff options
| -rwxr-xr-x | scripts/vpn-config.pl | 8 | ||||
| -rw-r--r-- | templates/vpn/ipsec/ike-group/node.tag/close-action/node.def | 8 |
2 files changed, 16 insertions, 0 deletions
diff --git a/scripts/vpn-config.pl b/scripts/vpn-config.pl index d68e419..369e568 100755 --- a/scripts/vpn-config.pl +++ b/scripts/vpn-config.pl @@ -811,6 +811,14 @@ if ($vcVPN->exists('ipsec')) { } # + # Check for closeaction + # + my $close_act = $vcVPN->returnValue("ipsec ike-group $ike_group close-action"); + if (defined($close_act)) { + $genout .= "\tcloseaction=$close_act\n"; + } + + # # Allow the user for force UDP encapsulation for the ESP # payload. # diff --git a/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def b/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def new file mode 100644 index 0000000..0c05c21 --- /dev/null +++ b/templates/vpn/ipsec/ike-group/node.tag/close-action/node.def @@ -0,0 +1,8 @@ +help: Action if the remote peer unexpectedly closes a CHILD_SA +type: txt +default: "none" +syntax:expression: $VAR(@) in "none","hold", "clear", "restart"; "must be none, hold clear, or restart" +val_help: none; Set action to none (default) +val_help: hold; Set action to hold +val_help: clear; Set action to clear +val_help: restart; Set action to restart |