diff options
author | Christian Poessinger <christian@poessinger.com> | 2021-08-19 12:34:35 +0200 |
---|---|---|
committer | Christian Poessinger <christian@poessinger.com> | 2021-08-19 12:34:35 +0200 |
commit | 95955aa9a7294bdbb4fe9e5bd0c1d58512f894ec (patch) | |
tree | c8b9bbb748836cdaa3a885ccb8b682756ad9e565 /data/templates | |
parent | 1d221c04b225d8082c4472361c1612e9ad8727c8 (diff) | |
download | vyos-1x-95955aa9a7294bdbb4fe9e5bd0c1d58512f894ec.tar.gz vyos-1x-95955aa9a7294bdbb4fe9e5bd0c1d58512f894ec.zip |
ipsec: dmvpn: T3764: bugfix mixed up IKE/ESP lifetime variable
IKE lifetime is life_time, and ESP lifetime is rekey_time.
Diffstat (limited to 'data/templates')
-rw-r--r-- | data/templates/ipsec/swanctl/profile.tmpl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/profile.tmpl b/data/templates/ipsec/swanctl/profile.tmpl index 0a7268405..66bcaa776 100644 --- a/data/templates/ipsec/swanctl/profile.tmpl +++ b/data/templates/ipsec/swanctl/profile.tmpl @@ -7,7 +7,7 @@ dmvpn-{{ name }}-{{ interface }} { proposals = {{ ike_group[profile_conf.ike_group] | get_esp_ike_cipher | join(',') }} version = {{ ike.key_exchange[4:] if ike is defined and ike.key_exchange is defined else "0" }} - rekey_time = {{ ike.lifetime }}s + life_time = {{ ike.lifetime }}s keyingtries = 0 {% if profile_conf.authentication is defined and profile_conf.authentication.mode is defined and profile_conf.authentication.mode == 'pre-shared-secret' %} local { |