summaryrefslogtreecommitdiff
path: root/data/templates/ipsec
diff options
context:
space:
mode:
authorLucas Christian <lucas@lucasec.com>2023-12-28 22:11:26 -0800
committerLucas Christian <lucas@lucasec.com>2024-03-10 11:40:23 -0700
commitf7834324d3d9edd7e161e7f2f3868452997c9c81 (patch)
tree2e8215e019c514f514a4df9a95b0a0f18b5a95d5 /data/templates/ipsec
parent0eee7cf02e781c0be1462547c66669a05be3e6da (diff)
downloadvyos-1x-f7834324d3d9edd7e161e7f2f3868452997c9c81.tar.gz
vyos-1x-f7834324d3d9edd7e161e7f2f3868452997c9c81.zip
T5872: ipsec remote access VPN: support dhcp-interface.
Diffstat (limited to 'data/templates/ipsec')
-rw-r--r--data/templates/ipsec/swanctl/remote_access.j22
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2
index bce8684fe..af7f2994e 100644
--- a/data/templates/ipsec/swanctl/remote_access.j2
+++ b/data/templates/ipsec/swanctl/remote_access.j2
@@ -4,7 +4,7 @@
{% set esp = esp_group[rw_conf.esp_group] %}
ra-{{ name }} {
remote_addrs = %any
- local_addrs = {{ rw_conf.local_address if rw_conf.local_address is vyos_defined else '%any' }}
+ local_addrs = {{ rw_conf.local_address if rw_conf.local_address is not vyos_defined('any') else '%any' }} # dhcp:{{ rw_conf.dhcp_interface if rw_conf.dhcp_interface is vyos_defined else 'no' }}
proposals = {{ ike_group[rw_conf.ike_group] | get_esp_ike_cipher | join(',') }}
version = {{ ike.key_exchange[4:] if ike.key_exchange is vyos_defined else "0" }}
send_certreq = no