diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-08-19 12:34:35 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-08-19 12:34:35 +0200 |
| commit | 95955aa9a7294bdbb4fe9e5bd0c1d58512f894ec (patch) | |
| tree | c8b9bbb748836cdaa3a885ccb8b682756ad9e565 | |
| parent | 1d221c04b225d8082c4472361c1612e9ad8727c8 (diff) | |
| download | vyos-1x-95955aa9a7294bdbb4fe9e5bd0c1d58512f894ec.tar.gz vyos-1x-95955aa9a7294bdbb4fe9e5bd0c1d58512f894ec.zip | |
ipsec: dmvpn: T3764: bugfix mixed up IKE/ESP lifetime variable
IKE lifetime is life_time, and ESP lifetime is rekey_time.
| -rw-r--r-- | data/templates/ipsec/swanctl/profile.tmpl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/profile.tmpl b/data/templates/ipsec/swanctl/profile.tmpl index 0a7268405..66bcaa776 100644 --- a/data/templates/ipsec/swanctl/profile.tmpl +++ b/data/templates/ipsec/swanctl/profile.tmpl @@ -7,7 +7,7 @@ dmvpn-{{ name }}-{{ interface }} { proposals = {{ ike_group[profile_conf.ike_group] | get_esp_ike_cipher | join(',') }} version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }} - rekey_time = {{ ike.lifetime }}s + life_time = {{ ike.lifetime }}s keyingtries = 0 {% if profile_conf.authentication is defined and profile_conf.authentication.mode is defined and profile_conf.authentication.mode == 'pre-shared-secret' %} local { |