diff options
| author | Christian Poessinger <christian@poessinger.com> | 2020-01-23 21:18:03 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2020-01-23 21:18:03 +0100 |
| commit | 2e6cd026d180ee49ae92bae1d01a9c880b06d3f9 (patch) | |
| tree | 454a578a83932e030e09b17bcbcea8ce4a5c1e46 /src/conf_mode | |
| parent | a255db47b5b2e3ea1a3cc03572a875fdffef2d4c (diff) | |
| download | vyos-1x-2e6cd026d180ee49ae92bae1d01a9c880b06d3f9.tar.gz vyos-1x-2e6cd026d180ee49ae92bae1d01a9c880b06d3f9.zip | |
openvpn: T1975: ta devices need to be explicitly brought up
Diffstat (limited to 'src/conf_mode')
| -rwxr-xr-x | src/conf_mode/interfaces-openvpn.py | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/src/conf_mode/interfaces-openvpn.py b/src/conf_mode/interfaces-openvpn.py index 50d367f2f..3a7bc6611 100755 --- a/src/conf_mode/interfaces-openvpn.py +++ b/src/conf_mode/interfaces-openvpn.py @@ -426,7 +426,7 @@ def get_config(): # disable ncp-ciphers support if conf.exists('encryption disable-ncp'): openvpn['disable_ncp'] = True - + # data encryption algorithm ncp-list if conf.exists('encryption ncp-ciphers'): _ncp_ciphers = [] @@ -456,7 +456,7 @@ def get_config(): _ncp_ciphers.append('aes-256-gcm') _ncp_ciphers.append('AES-256-GCM') openvpn['ncp_ciphers'] = ':'.join(_ncp_ciphers) - + # hash algorithm if conf.exists('hash'): openvpn['hash'] = conf.return_value('hash') @@ -995,6 +995,11 @@ def apply(openvpn): except: pass + # TAP interface needs to be brought up explicitly + if openvpn['type'] == 'tap': + if not openvpn['disable']: + Interface(openvpn['intf']).set_state('up') + return None |