summaryrefslogtreecommitdiff
path: root/data/templates/ipsec
diff options
context:
space:
mode:
authorViacheslav Hletenko <v.gletenko@vyos.io>2022-11-21 18:42:41 +0000
committerViacheslav Hletenko <v.gletenko@vyos.io>2022-11-21 18:42:41 +0000
commit2ac4a8a5fed9db471b7ffac0f54e6741c6f87834 (patch)
tree7f2e22228180211e93c7c7515d836c73e3b82cdc /data/templates/ipsec
parentdc9726636f18ba35b17c16786bc822aa73a878a6 (diff)
downloadvyos-1x-2ac4a8a5fed9db471b7ffac0f54e6741c6f87834.tar.gz
vyos-1x-2ac4a8a5fed9db471b7ffac0f54e6741c6f87834.zip
T4823: Fix IPsec transport mode remote TS
Remote TS for transport mode GRE must be remote-address and not peer name
Diffstat (limited to 'data/templates/ipsec')
-rw-r--r--data/templates/ipsec/swanctl/peer.j22
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/peer.j2 b/data/templates/ipsec/swanctl/peer.j2
index d097a04fc..837fa263c 100644
--- a/data/templates/ipsec/swanctl/peer.j2
+++ b/data/templates/ipsec/swanctl/peer.j2
@@ -124,7 +124,7 @@
{% endif %}
{% elif tunnel_esp.mode == 'transport' %}
local_ts = {{ peer_conf.local_address }}{{ local_suffix }}
- remote_ts = {{ peer }}{{ remote_suffix }}
+ remote_ts = {{ peer_conf.remote_address | join(",") }}{{ remote_suffix }}
{% endif %}
ipcomp = {{ 'yes' if tunnel_esp.compression is vyos_defined else 'no' }}
mode = {{ tunnel_esp.mode }}