summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/ipsec.secrets.tmpl
diff options
context:
space:
mode:
authorsarthurdev <965089+sarthurdev@users.noreply.github.com>2021-06-12 23:18:19 +0200
committersarthurdev <965089+sarthurdev@users.noreply.github.com>2021-06-12 23:18:19 +0200
commit0b1695221657336b436fc27217614b07a34cc132 (patch)
tree672b02505f606d14d92e9cc6ac805c30788d37c9 /data/templates/ipsec/ipsec.secrets.tmpl
parent5d687daba3a33e7619d4ec8cc08792e6c2bfa0c7 (diff)
downloadvyos-1x-0b1695221657336b436fc27217614b07a34cc132.tar.gz
vyos-1x-0b1695221657336b436fc27217614b07a34cc132.zip
ipsec: T57: Support disable on peer, tunnel, dmvpn profile
Diffstat (limited to 'data/templates/ipsec/ipsec.secrets.tmpl')
-rw-r--r--data/templates/ipsec/ipsec.secrets.tmpl2
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/ipsec.secrets.tmpl b/data/templates/ipsec/ipsec.secrets.tmpl
index a1432de57..0d2654abc 100644
--- a/data/templates/ipsec/ipsec.secrets.tmpl
+++ b/data/templates/ipsec/ipsec.secrets.tmpl
@@ -2,7 +2,7 @@
{% if site_to_site is defined and "peer" in site_to_site %}
{% set ns = namespace(local_key_set=False) %}
-{% for peer, peer_conf in site_to_site.peer.items() %}
+{% for peer, peer_conf in site_to_site.peer.items() if peer not in dhcp_no_address and peer_conf.disable is not defined %}
{% if peer_conf.authentication.mode == 'pre-shared-secret' %}
{{ (peer_conf.local_address if "local_address" in peer_conf else "%any") ~
(" " ~ peer) ~