diff options
author | Christian Poessinger <christian@poessinger.com> | 2021-06-13 09:00:12 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-06-13 09:00:12 +0200 |
commit | c88d8999873db638aa2c05d479502cedd1afd142 (patch) | |
tree | 8f260e771285efef284eeee54647f54780a25bf0 /data/templates/ipsec/swanctl.conf.tmpl | |
parent | 97f5e8562f3a49e7b63f0c5a20b46a33c8eb4f89 (diff) | |
parent | 0b1695221657336b436fc27217614b07a34cc132 (diff) | |
download | vyos-1x-c88d8999873db638aa2c05d479502cedd1afd142.tar.gz vyos-1x-c88d8999873db638aa2c05d479502cedd1afd142.zip |
Merge pull request #877 from sarthurdev/disable_peer_tunnel
ipsec: T57: Support disable on peer, peer tunnel and dmvpn profile
Diffstat (limited to 'data/templates/ipsec/swanctl.conf.tmpl')
-rw-r--r-- | data/templates/ipsec/swanctl.conf.tmpl | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/data/templates/ipsec/swanctl.conf.tmpl b/data/templates/ipsec/swanctl.conf.tmpl index 0ce703f20..ce007c1fd 100644 --- a/data/templates/ipsec/swanctl.conf.tmpl +++ b/data/templates/ipsec/swanctl.conf.tmpl @@ -2,7 +2,7 @@ {% if profile is defined %} connections { -{% for name, profile_conf in profile.items() if "bind" in profile_conf and "tunnel" in profile_conf.bind %} +{% for name, profile_conf in profile.items() if profile_conf.disable is not defined and profile_conf.bind is defined and profile_conf.bind.tunnel is defined %} {% set dmvpn_ike = ike_group[profile_conf.ike_group] %} {% set dmvpn_esp = esp_group[profile_conf.esp_group] %} {% for interface in profile_conf.bind.tunnel %} @@ -41,7 +41,7 @@ connections { } secrets { -{% for name, profile_conf in profile.items() if "bind" in profile_conf and "tunnel" in profile_conf.bind %} +{% for name, profile_conf in profile.items() if profile_conf.disable is not defined and profile_conf.bind is defined and profile_conf.bind.tunnel is defined %} {% if profile_conf.authentication.mode == 'pre-shared-secret' %} {% for interface in profile_conf.bind.tunnel %} ike-dmvpn-{{ interface }} { |