summaryrefslogtreecommitdiff
path: root/src/conf_mode/interface-openvpn.py
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2019-08-18 11:25:49 +0200
committerChristian Poessinger <christian@poessinger.com>2019-08-18 11:25:49 +0200
commitafdde0000333fd720dcf7263cedcb018cf3c3b5f (patch)
tree36215bdf097cf1b0826bfb7cb6ea9a61088987c3 /src/conf_mode/interface-openvpn.py
parent2367beb1a7c18b60f700afad20fccb8c364bdc1c (diff)
downloadvyos-1x-afdde0000333fd720dcf7263cedcb018cf3c3b5f.tar.gz
vyos-1x-afdde0000333fd720dcf7263cedcb018cf3c3b5f.zip
openvpn: T1548: support creating L2 bridges
Diffstat (limited to 'src/conf_mode/interface-openvpn.py')
-rwxr-xr-xsrc/conf_mode/interface-openvpn.py23
1 files changed, 11 insertions, 12 deletions
diff --git a/src/conf_mode/interface-openvpn.py b/src/conf_mode/interface-openvpn.py
index 0d85d9643..e4bde7bb0 100755
--- a/src/conf_mode/interface-openvpn.py
+++ b/src/conf_mode/interface-openvpn.py
@@ -140,9 +140,9 @@ ccd-exclusive
ping {{ ping_interval }}
ping-restart {{ ping_restart }}
-{%- if 'tap' in type %}
+{%- if local_address_subnet %}
ifconfig {{ local_address }} {{ local_address_subnet }}
-{% else %}
+{% elif remote_address %}
ifconfig {{ local_address }} {{ remote_address }}
{% endif %}
@@ -638,25 +638,24 @@ def verify(openvpn):
if not (openvpn['local_address'] or openvpn['bridge_member']):
raise ConfigError('Must specify "local-address" or "bridge member interface"')
- if not openvpn['remote_address']:
- raise ConfigError('Must specify "remote-address"')
-
- if openvpn['local_address'] == openvpn['local_host']:
- raise ConfigError('"local-address" cannot be the same as "local-host"')
-
for host in openvpn['remote_host']:
if host == openvpn['remote_address']:
raise ConfigError('"remote-address" cannot be the same as "remote-host"')
- if openvpn['local_address'] == openvpn['remote_address']:
- raise ConfigError('"local-address" and "remote-address" cannot be the same')
+ if openvpn['type'] == 'tun':
+ if not openvpn['remote_address']:
+ raise ConfigError('Must specify "remote-address"')
- if openvpn['type'] == 'tap' and openvpn['local_address_subnet'] == '':
- raise ConfigError('Must specify "subnet-mask" for local-address')
+ if openvpn['local_address'] == openvpn['remote_address']:
+ raise ConfigError('"local-address" and "remote-address" cannot be the same')
+
+ if openvpn['local_address'] == openvpn['local_host']:
+ raise ConfigError('"local-address" cannot be the same as "local-host"')
else:
if openvpn['local_address'] or openvpn['remote_address']:
raise ConfigError('Cannot specify "local-address" or "remote-address" in client-server mode')
+
elif openvpn['bridge_member']:
raise ConfigError('Cannot specify "local-address" or "remote-address" in bridge mode')