summaryrefslogtreecommitdiff
path: root/src/migration-scripts/ipsec/5-to-6
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-06-07 18:54:25 +0200
committerChristian Poessinger <christian@poessinger.com>2021-06-07 18:54:25 +0200
commit13236b0a6632d8039ecf90fcc0dbb66ad32fc3ff (patch)
tree70e7b849e22a46954edbfc081e1696048bd5244a /src/migration-scripts/ipsec/5-to-6
parent84ec8b75c190920bb6bb951410ff0da0b6034174 (diff)
downloadvyos-1x-13236b0a6632d8039ecf90fcc0dbb66ad32fc3ff.tar.gz
vyos-1x-13236b0a6632d8039ecf90fcc0dbb66ad32fc3ff.zip
ipsec: T3588: remove site-to-site tunnel CLI options only valid in Openswan
Diffstat (limited to 'src/migration-scripts/ipsec/5-to-6')
-rwxr-xr-xsrc/migration-scripts/ipsec/5-to-616
1 files changed, 16 insertions, 0 deletions
diff --git a/src/migration-scripts/ipsec/5-to-6 b/src/migration-scripts/ipsec/5-to-6
index 29d73536f..86be55d13 100755
--- a/src/migration-scripts/ipsec/5-to-6
+++ b/src/migration-scripts/ipsec/5-to-6
@@ -44,6 +44,22 @@ for cli_node in ['nat-traversal', 'nat-networks']:
if config.exists(base + [cli_node]):
config.delete(base + [cli_node])
+# Remove options only valid in Openswan
+if config.exists(base + ['site-to-site', 'peer']):
+ for peer in config.list_nodes(base + ['site-to-site', 'peer']):
+ if not config.exists(base + ['site-to-site', 'peer', peer, 'tunnel']):
+ continue
+ for tunnel in config.list_nodes(base + ['site-to-site', 'peer', peer, 'tunnel']):
+ # allow-public-networks - Sets a value in ipsec.conf that was only ever valid in Openswan on kernel 2.6
+ nat_networks = base + ['site-to-site', 'peer', peer, 'tunnel', tunnel, 'allow-nat-networks']
+ if config.exists(nat_networks):
+ config.delete(nat_networks)
+
+ # allow-nat-networks - Also sets a value only valid in Openswan
+ public_networks = base + ['site-to-site', 'peer', peer, 'tunnel', tunnel, 'allow-public-networks']
+ if config.exists(public_networks):
+ config.delete(public_networks)
+
try:
with open(file_name, 'w') as f:
f.write(config.to_string())