summaryrefslogtreecommitdiff
path: root/data/templates/ipsec
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-09-28 19:33:40 +0200
committerChristian Poessinger <christian@poessinger.com>2022-09-28 19:35:48 +0200
commitd5e84fab2e66fb4452516e3a5adc00c6ed772de1 (patch)
tree228c66d718d776d37a8f3ed2b49f03f20d6a61ef /data/templates/ipsec
parent4e9b292730f9c60849d56cd8d81a973c55ab4550 (diff)
downloadvyos-1x-d5e84fab2e66fb4452516e3a5adc00c6ed772de1.tar.gz
vyos-1x-d5e84fab2e66fb4452516e3a5adc00c6ed772de1.zip
op-mode: ipsec: T4719: bugfix IKEv2 road-warrior profile generator
Commit bd4588827b ("ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peer") changed the CLI syntax of ipsec. This resulted in a node not renamed in the op-mode generator when generating IKEv2 IPSec iOS configuration profiles.
Diffstat (limited to 'data/templates/ipsec')
-rw-r--r--data/templates/ipsec/ios_profile.j22
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/ios_profile.j2 b/data/templates/ipsec/ios_profile.j2
index c8e17729a..eb74924b8 100644
--- a/data/templates/ipsec/ios_profile.j2
+++ b/data/templates/ipsec/ios_profile.j2
@@ -41,7 +41,7 @@
<!-- Remote identity, can be a FQDN, a userFQDN, an IP or (theoretically) a certificate's subject DN. Can't be empty.
IMPORTANT: DNs are currently not handled correctly, they are always sent as identities of type FQDN -->
<key>RemoteIdentifier</key>
- <string>{{ authentication.id if authentication.id is vyos_defined else 'VyOS' }}</string>
+ <string>{{ authentication.local_id if authentication.local_id is vyos_defined else 'VyOS' }}</string>
<!-- Local IKE identity, same restrictions as above. If it is empty the client's IP address will be used -->
<key>LocalIdentifier</key>
<string></string>