summaryrefslogtreecommitdiff
path: root/python
diff options
context:
space:
mode:
authorOleksandr Kuchmystyi <o.kuchmystyi@vyos.io>2025-12-31 10:50:21 +0300
committerOleksandr Kuchmystyi <o.kuchmystyi@vyos.io>2026-01-12 16:44:32 +0300
commit61487b13da8dc270907633a3140bd0cc2aa0926a (patch)
tree967c8864116299c4a4d3307bc9666f54b2418761 /python
parent7fea6b6dbbd786bf6a32c496fc70ca9e9b5f8b1f (diff)
downloadvyos-1x-61487b13da8dc270907633a3140bd0cc2aa0926a.tar.gz
vyos-1x-61487b13da8dc270907633a3140bd0cc2aa0926a.zip
openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnels
- Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces (used as fallback cipher in site-to-site mode) - Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces
Diffstat (limited to 'python')
-rwxr-xr-xpython/vyos/template.py5
1 files changed, 5 insertions, 0 deletions
diff --git a/python/vyos/template.py b/python/vyos/template.py
index 128471f42..6b3e329a3 100755
--- a/python/vyos/template.py
+++ b/python/vyos/template.py
@@ -572,6 +572,11 @@ def get_openvpn_data_ciphers(ciphers):
out.append(cipher)
return ':'.join(out).upper()
+
+@register_filter('openvpn_data_ciphers_fallback')
+def get_openvpn_data_ciphers_fallback(cipher):
+ return get_openvpn_cipher(cipher)
+
@register_filter('snmp_auth_oid')
def snmp_auth_oid(type):
if type not in ['md5', 'sha', 'aes', 'des', 'none']: