diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-12-30 22:57:08 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-30 22:57:08 +0100 |
| commit | 14dc8a8962f0a52107913423a750f36ed8e45160 (patch) | |
| tree | 5be8f070c2da60c8692b88a50db2bc44e07e4d2e /data | |
| parent | 1e46cd606d9d87226fe0400bf3a53bda360808d8 (diff) | |
| parent | 656934e85cee799dba5b495d143f6be445ac22d5 (diff) | |
| download | vyos-1x-14dc8a8962f0a52107913423a750f36ed8e45160.tar.gz vyos-1x-14dc8a8962f0a52107913423a750f36ed8e45160.zip | |
Merge pull request #2707 from lucasec/t5870
T5870: ipsec remote access VPN: add x509 ("pubkey") authentication.
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ipsec/swanctl/remote_access.j2 | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2 index 60d2d1807..01dc8a4a7 100644 --- a/data/templates/ipsec/swanctl/remote_access.j2 +++ b/data/templates/ipsec/swanctl/remote_access.j2 @@ -29,8 +29,10 @@ {% endif %} } remote { +{% if rw_conf.authentication.client_mode == 'x509' %} + auth = pubkey +{% elif rw_conf.authentication.client_mode.startswith("eap") %} auth = {{ rw_conf.authentication.client_mode }} -{% if rw_conf.authentication.client_mode.startswith("eap") %} eap_id = %any {% endif %} } |