diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2022-04-25 20:59:45 +0000 |
|---|---|---|
| committer | Viacheslav Hletenko <v.gletenko@vyos.io> | 2022-04-25 20:59:45 +0000 |
| commit | 408917a0e619286c1cc1e74bde6cd8f257d5aeb9 (patch) | |
| tree | c7b104ffa126fe79f131c04dd2759fbcfafa043a /data/templates/ipsec/swanctl/peer.tmpl | |
| parent | a10bf3ba34f034f9fc60ea0070d8c4f3f60586e2 (diff) | |
| download | vyos-1x-408917a0e619286c1cc1e74bde6cd8f257d5aeb9.tar.gz vyos-1x-408917a0e619286c1cc1e74bde6cd8f257d5aeb9.zip | |
vpn-ipsec: T4398: Fix unexpected passthrough policy for peer
Set default passtrough list to None to prevent unexpected policy
for peers with not overplapped local and remote prefixes
Diffstat (limited to 'data/templates/ipsec/swanctl/peer.tmpl')
| -rw-r--r-- | data/templates/ipsec/swanctl/peer.tmpl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/peer.tmpl b/data/templates/ipsec/swanctl/peer.tmpl index b21dce9f0..61af85ed4 100644 --- a/data/templates/ipsec/swanctl/peer.tmpl +++ b/data/templates/ipsec/swanctl/peer.tmpl @@ -152,7 +152,7 @@ {% endif %} } {% if tunnel_conf.passthrough is vyos_defined %} - peer_{{ name }}_tunnel_{{ tunnel_id }}_passthough { + peer_{{ name }}_tunnel_{{ tunnel_id }}_passthrough { local_ts = {{ tunnel_conf.passthrough | join(",") }} remote_ts = {{ tunnel_conf.passthrough | join(",") }} start_action = trap |