diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-09-28 19:33:40 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2022-09-28 19:35:48 +0200 |
| commit | d5e84fab2e66fb4452516e3a5adc00c6ed772de1 (patch) | |
| tree | 228c66d718d776d37a8f3ed2b49f03f20d6a61ef | |
| parent | 4e9b292730f9c60849d56cd8d81a973c55ab4550 (diff) | |
| download | vyos-1x-d5e84fab2e66fb4452516e3a5adc00c6ed772de1.tar.gz vyos-1x-d5e84fab2e66fb4452516e3a5adc00c6ed772de1.zip | |
op-mode: ipsec: T4719: bugfix IKEv2 road-warrior profile generator
Commit bd4588827b ("ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peer")
changed the CLI syntax of ipsec. This resulted in a node not renamed in the
op-mode generator when generating IKEv2 IPSec iOS configuration profiles.
| -rw-r--r-- | data/templates/ipsec/ios_profile.j2 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/ios_profile.j2 b/data/templates/ipsec/ios_profile.j2 index c8e17729a..eb74924b8 100644 --- a/data/templates/ipsec/ios_profile.j2 +++ b/data/templates/ipsec/ios_profile.j2 @@ -41,7 +41,7 @@ <!-- Remote identity, can be a FQDN, a userFQDN, an IP or (theoretically) a certificate's subject DN. Can't be empty. IMPORTANT: DNs are currently not handled correctly, they are always sent as identities of type FQDN --> <key>RemoteIdentifier</key> - <string>{{ authentication.id if authentication.id is vyos_defined else 'VyOS' }}</string> + <string>{{ authentication.local_id if authentication.local_id is vyos_defined else 'VyOS' }}</string> <!-- Local IKE identity, same restrictions as above. If it is empty the client's IP address will be used --> <key>LocalIdentifier</key> <string></string> |