summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/swanctl
diff options
context:
space:
mode:
authorLucas Christian <lucas@lucasec.com>2023-12-28 22:07:07 -0800
committerMergify <37929162+mergify[bot]@users.noreply.github.com>2023-12-30 21:58:26 +0000
commit6cfcef98b8a8fbfa107ecfbb741cfb268ea8340f (patch)
tree1e1bd77ac4b2a856ff07477c9e092343f9f57029 /data/templates/ipsec/swanctl
parent74e749be2e4b0ce7da259c84535dff6ba1d072cf (diff)
downloadvyos-1x-6cfcef98b8a8fbfa107ecfbb741cfb268ea8340f.tar.gz
vyos-1x-6cfcef98b8a8fbfa107ecfbb741cfb268ea8340f.zip
T5870: ipsec remote access VPN: add x509 ("pubkey") authentication.
(cherry picked from commit 656934e85cee799dba5b495d143f6be445ac22d5)
Diffstat (limited to 'data/templates/ipsec/swanctl')
-rw-r--r--data/templates/ipsec/swanctl/remote_access.j24
1 files changed, 3 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2
index 60d2d1807..01dc8a4a7 100644
--- a/data/templates/ipsec/swanctl/remote_access.j2
+++ b/data/templates/ipsec/swanctl/remote_access.j2
@@ -29,8 +29,10 @@
{% endif %}
}
remote {
+{% if rw_conf.authentication.client_mode == 'x509' %}
+ auth = pubkey
+{% elif rw_conf.authentication.client_mode.startswith("eap") %}
auth = {{ rw_conf.authentication.client_mode }}
-{% if rw_conf.authentication.client_mode.startswith("eap") %}
eap_id = %any
{% endif %}
}