summaryrefslogtreecommitdiff
path: root/data/templates/ipsec
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-06-12 22:49:09 +0200
committerGitHub <noreply@github.com>2021-06-12 22:49:09 +0200
commit5d687daba3a33e7619d4ec8cc08792e6c2bfa0c7 (patch)
tree61934beb5625aae26bf93df10f0210d7a01398ee /data/templates/ipsec
parent3a9041e2d4d4a48ba7c01439e69c5f86a4a850c2 (diff)
parent8ea648e482cfcb6e5dda945369ea10bb12dbdff7 (diff)
downloadvyos-1x-5d687daba3a33e7619d4ec8cc08792e6c2bfa0c7.tar.gz
vyos-1x-5d687daba3a33e7619d4ec8cc08792e6c2bfa0c7.zip
Merge pull request #875 from sarthurdev/dhcp_address_wait
ipsec: T1501: T3617: Add handling for missing addresses on boot when using dhcp-interface
Diffstat (limited to 'data/templates/ipsec')
-rw-r--r--data/templates/ipsec/ipsec.conf.tmpl2
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/ipsec.conf.tmpl b/data/templates/ipsec/ipsec.conf.tmpl
index 342887883..53cba44b9 100644
--- a/data/templates/ipsec/ipsec.conf.tmpl
+++ b/data/templates/ipsec/ipsec.conf.tmpl
@@ -7,7 +7,7 @@ config setup
uniqueids = {{ "no" if disable_uniqreqids is defined else "yes" }}
{% if site_to_site is defined and site_to_site.peer is defined %}
-{% for peer, peer_conf in site_to_site.peer.items() %}
+{% for peer, peer_conf in site_to_site.peer.items() if peer not in dhcp_no_address %}
{% set peer_index = loop.index %}
{% set peer_ike = ike_group[peer_conf.ike_group] %}
{% set peer_esp = esp_group[peer_conf.default_esp_group] if peer_conf.default_esp_group is defined else None %}