diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2024-03-24 12:13:01 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-03-24 12:13:01 +0200 |
| commit | 3e418913f8855d4ce8b90bb9a43019d5ef1742f2 (patch) | |
| tree | 81a03c00a8e615c35ee0d02007e82b6bfaddcd09 /src/etc/ipsec.d/vti-up-down | |
| parent | 6ad88061271b118dc4d22fe816f8b393f3220115 (diff) | |
| parent | c104f9aea60416dbff3bf8de994921069ee6a928 (diff) | |
| download | vyos-1x-3e418913f8855d4ce8b90bb9a43019d5ef1742f2.tar.gz vyos-1x-3e418913f8855d4ce8b90bb9a43019d5ef1742f2.zip | |
Merge pull request #3163 from vyos/mergify/bp/sagitta/pr-3157
vti: T6085: bring VTI interfaces up only when the IPsec tunnel is up (backport #3157)
Diffstat (limited to 'src/etc/ipsec.d/vti-up-down')
| -rwxr-xr-x | src/etc/ipsec.d/vti-up-down | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/etc/ipsec.d/vti-up-down b/src/etc/ipsec.d/vti-up-down index 441b316c2..01e9543c9 100755 --- a/src/etc/ipsec.d/vti-up-down +++ b/src/etc/ipsec.d/vti-up-down @@ -1,6 +1,6 @@ #!/usr/bin/env python3 # -# Copyright (C) 2021-2023 VyOS maintainers and contributors +# Copyright (C) 2021-2024 VyOS maintainers and contributors # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License version 2 or later as @@ -57,7 +57,9 @@ if __name__ == '__main__': if 'disable' not in vti: tmp = VTIIf(interface) tmp.update(vti) + call(f'sudo ip link set {interface} up') else: + call(f'sudo ip link set {interface} down') syslog(f'Interface {interface} is admin down ...') elif verb in ['down-client', 'down-host']: if vti_link_up: |