summaryrefslogtreecommitdiff
path: root/data/templates
diff options
context:
space:
mode:
authorLucas Christian <lucas@lucasec.com>2021-09-19 17:02:42 -0700
committerLucas Christian <lucas@lucasec.com>2021-09-19 19:44:02 -0700
commitd768aee9bd93280210980d621ecc7b2da1a8d4af (patch)
treec712a6673e9ee084ba8edba9918a0ebb689bc154 /data/templates
parente83a113360ba18043edcf7f70689c7042dee2b37 (diff)
downloadvyos-1x-d768aee9bd93280210980d621ecc7b2da1a8d4af.tar.gz
vyos-1x-d768aee9bd93280210980d621ecc7b2da1a8d4af.zip
ipsec: T1441: Clean up vti-up-down script for XFRM interfaces
Diffstat (limited to 'data/templates')
-rw-r--r--data/templates/ipsec/swanctl/peer.tmpl4
1 files changed, 2 insertions, 2 deletions
diff --git a/data/templates/ipsec/swanctl/peer.tmpl b/data/templates/ipsec/swanctl/peer.tmpl
index e039e98aa..8c3776bf1 100644
--- a/data/templates/ipsec/swanctl/peer.tmpl
+++ b/data/templates/ipsec/swanctl/peer.tmpl
@@ -60,7 +60,7 @@
life_time = {{ vti_esp.lifetime }}s
local_ts = 0.0.0.0/0,::/0
remote_ts = 0.0.0.0/0,::/0
- updown = "/etc/ipsec.d/vti-up-down {{ peer_conf.vti.bind }} {{ peer_conf.dhcp_interface if peer_conf.dhcp_interface is defined else 'no' }}"
+ updown = "/etc/ipsec.d/vti-up-down {{ peer_conf.vti.bind }}"
{# The key defaults to 0 and will match any policies which similarly do not have a lookup key configuration. #}
{# Thus we simply shift the key by one to also support a vti0 interface #}
{% set if_id = peer_conf.vti.bind | replace('vti', '') | int +1 %}
@@ -119,7 +119,7 @@
dpd_action = {{ dpd_translate[ike.dead_peer_detection.action] }}
{% endif %}
{% if peer_conf.vti is defined and peer_conf.vti.bind is defined %}
- updown = "/etc/ipsec.d/vti-up-down {{ peer_conf.vti.bind }} {{ peer_conf.dhcp_interface if peer_conf.dhcp_interface is defined else 'no' }}"
+ updown = "/etc/ipsec.d/vti-up-down {{ peer_conf.vti.bind }}"
{# The key defaults to 0 and will match any policies which similarly do not have a lookup key configuration. #}
{# Thus we simply shift the key by one to also support a vti0 interface #}
{% set if_id = peer_conf.vti.bind | replace('vti', '') | int +1 %}