summaryrefslogtreecommitdiff
path: root/data/templates/ipsec
diff options
context:
space:
mode:
authorAlex W <embezzle.dev@proton.me>2024-04-21 21:59:56 +0100
committerAlex W <embezzle.dev@proton.me>2024-04-21 21:59:56 +0100
commit78ea623df20b44309cc6ac9848ed18e97fc4ed03 (patch)
treeb1dcde60d70d02cc63e92028f885e8f7e1995279 /data/templates/ipsec
parent4cde677e9e128bc9b62fad720b1b6f6cac506954 (diff)
downloadvyos-1x-78ea623df20b44309cc6ac9848ed18e97fc4ed03.tar.gz
vyos-1x-78ea623df20b44309cc6ac9848ed18e97fc4ed03.zip
T6237: IPSec remote access VPN: ability to set EAP ID of clients
Diffstat (limited to 'data/templates/ipsec')
-rw-r--r--data/templates/ipsec/swanctl/remote_access.j22
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2
index adfa32bde..6bced88c7 100644
--- a/data/templates/ipsec/swanctl/remote_access.j2
+++ b/data/templates/ipsec/swanctl/remote_access.j2
@@ -33,7 +33,7 @@
auth = pubkey
{% elif rw_conf.authentication.client_mode.startswith("eap") %}
auth = {{ rw_conf.authentication.client_mode }}
- eap_id = %any
+ eap_id = {{ '%any' if rw_conf.authentication.eap_id == 'any' else rw_conf.authentication.eap_id }}
{% endif %}
{% if rw_conf.authentication.client_mode is vyos_defined('eap-tls') or rw_conf.authentication.client_mode is vyos_defined('x509') %}
{# pass all configured CAs as filenames, separated by commas #}