summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/ipsec.secrets.tmpl
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-06-13 09:00:12 +0200
committerGitHub <noreply@github.com>2021-06-13 09:00:12 +0200
commitc88d8999873db638aa2c05d479502cedd1afd142 (patch)
tree8f260e771285efef284eeee54647f54780a25bf0 /data/templates/ipsec/ipsec.secrets.tmpl
parent97f5e8562f3a49e7b63f0c5a20b46a33c8eb4f89 (diff)
parent0b1695221657336b436fc27217614b07a34cc132 (diff)
downloadvyos-1x-c88d8999873db638aa2c05d479502cedd1afd142.tar.gz
vyos-1x-c88d8999873db638aa2c05d479502cedd1afd142.zip
Merge pull request #877 from sarthurdev/disable_peer_tunnel
ipsec: T57: Support disable on peer, peer tunnel and dmvpn profile
Diffstat (limited to 'data/templates/ipsec/ipsec.secrets.tmpl')
-rw-r--r--data/templates/ipsec/ipsec.secrets.tmpl2
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/ipsec.secrets.tmpl b/data/templates/ipsec/ipsec.secrets.tmpl
index a1432de57..0d2654abc 100644
--- a/data/templates/ipsec/ipsec.secrets.tmpl
+++ b/data/templates/ipsec/ipsec.secrets.tmpl
@@ -2,7 +2,7 @@
{% if site_to_site is defined and "peer" in site_to_site %}
{% set ns = namespace(local_key_set=False) %}
-{% for peer, peer_conf in site_to_site.peer.items() %}
+{% for peer, peer_conf in site_to_site.peer.items() if peer not in dhcp_no_address and peer_conf.disable is not defined %}
{% if peer_conf.authentication.mode == 'pre-shared-secret' %}
{{ (peer_conf.local_address if "local_address" in peer_conf else "%any") ~
(" " ~ peer) ~