summaryrefslogtreecommitdiff
path: root/data/templates/ipsec
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-10-31 15:09:58 +0100
committerChristian Poessinger <christian@poessinger.com>2022-10-31 15:10:39 +0100
commit22c3dcbb01d731f0dab0ffefa2e5a0be7009baf1 (patch)
treec7a5308cd7426c357dde5586e9ead79463475c4b /data/templates/ipsec
parent2291f4c7a967bdc81fb19e89f27fb378b2ecd09b (diff)
downloadvyos-1x-22c3dcbb01d731f0dab0ffefa2e5a0be7009baf1.tar.gz
vyos-1x-22c3dcbb01d731f0dab0ffefa2e5a0be7009baf1.zip
ipsec: T4787: add support for road-warrior/remote-access RADIUS timeout
This enabled users to also use 2FA/MFA authentication with a radius backend as there is enough time to enter the second factor.
Diffstat (limited to 'data/templates/ipsec')
-rw-r--r--data/templates/ipsec/charon/eap-radius.conf.j24
1 files changed, 3 insertions, 1 deletions
diff --git a/data/templates/ipsec/charon/eap-radius.conf.j2 b/data/templates/ipsec/charon/eap-radius.conf.j2
index 8495011fe..364377473 100644
--- a/data/templates/ipsec/charon/eap-radius.conf.j2
+++ b/data/templates/ipsec/charon/eap-radius.conf.j2
@@ -49,8 +49,10 @@ eap-radius {
# Base to use for calculating exponential back off.
# retransmit_base = 1.4
+{% if remote_access.radius.timeout is vyos_defined %}
# Timeout in seconds before sending first retransmit.
- # retransmit_timeout = 2.0
+ retransmit_timeout = {{ remote_access.radius.timeout | float }}
+{% endif %}
# Number of times to retransmit a packet before giving up.
# retransmit_tries = 4