summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/swanctl/peer.tmpl
diff options
context:
space:
mode:
authorViacheslav Hletenko <v.gletenko@vyos.io>2022-04-25 20:59:45 +0000
committerViacheslav Hletenko <v.gletenko@vyos.io>2022-04-25 20:59:45 +0000
commit408917a0e619286c1cc1e74bde6cd8f257d5aeb9 (patch)
treec7b104ffa126fe79f131c04dd2759fbcfafa043a /data/templates/ipsec/swanctl/peer.tmpl
parenta10bf3ba34f034f9fc60ea0070d8c4f3f60586e2 (diff)
downloadvyos-1x-408917a0e619286c1cc1e74bde6cd8f257d5aeb9.tar.gz
vyos-1x-408917a0e619286c1cc1e74bde6cd8f257d5aeb9.zip
vpn-ipsec: T4398: Fix unexpected passthrough policy for peer
Set default passtrough list to None to prevent unexpected policy for peers with not overplapped local and remote prefixes
Diffstat (limited to 'data/templates/ipsec/swanctl/peer.tmpl')
-rw-r--r--data/templates/ipsec/swanctl/peer.tmpl2
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/peer.tmpl b/data/templates/ipsec/swanctl/peer.tmpl
index b21dce9f0..61af85ed4 100644
--- a/data/templates/ipsec/swanctl/peer.tmpl
+++ b/data/templates/ipsec/swanctl/peer.tmpl
@@ -152,7 +152,7 @@
{% endif %}
}
{% if tunnel_conf.passthrough is vyos_defined %}
- peer_{{ name }}_tunnel_{{ tunnel_id }}_passthough {
+ peer_{{ name }}_tunnel_{{ tunnel_id }}_passthrough {
local_ts = {{ tunnel_conf.passthrough | join(",") }}
remote_ts = {{ tunnel_conf.passthrough | join(",") }}
start_action = trap