summaryrefslogtreecommitdiff
path: root/src/migration-scripts/ipsec
diff options
context:
space:
mode:
authoraapostoliuk <a.apostoliuk@vyos.io>2024-01-17 17:46:38 +0200
committeraapostoliuk <a.apostoliuk@vyos.io>2024-01-17 17:46:38 +0200
commit8870fabf1b4358618fca7db459515106653214b5 (patch)
treeac8bad9ab957d525f0787662ecb3ab486e687b29 /src/migration-scripts/ipsec
parent0afa8dd813195b43f7ac3c9f0c11fdc8dae31668 (diff)
downloadvyos-1x-8870fabf1b4358618fca7db459515106653214b5.tar.gz
vyos-1x-8870fabf1b4358618fca7db459515106653214b5.zip
T5953: Changed values of 'close-action' to Strongswan values
Changed the value from 'hold' to 'trap' in the 'close-action' option in the IKE group. Changed the value from 'restart' to 'start' in the 'close-action' option in the IKE group.
Diffstat (limited to 'src/migration-scripts/ipsec')
-rwxr-xr-xsrc/migration-scripts/ipsec/12-to-137
1 files changed, 7 insertions, 0 deletions
diff --git a/src/migration-scripts/ipsec/12-to-13 b/src/migration-scripts/ipsec/12-to-13
index 504a2e9c7..c11f708bd 100755
--- a/src/migration-scripts/ipsec/12-to-13
+++ b/src/migration-scripts/ipsec/12-to-13
@@ -15,6 +15,7 @@
# along with this program. If not, see <http://www.gnu.org/licenses/>.
# Changed value of dead-peer-detection.action from hold to trap
+# Changed value of close-action from hold to trap and from restart to start
import re
@@ -41,8 +42,14 @@ if not config.exists(base):
else:
for ike_group in config.list_nodes(base):
base_dpd_action = base + [ike_group, 'dead-peer-detection', 'action']
+ base_close_action = base + [ike_group, 'close-action']
if config.exists(base_dpd_action) and config.return_value(base_dpd_action) == 'hold':
config.set(base_dpd_action, 'trap', replace=True)
+ if config.exists(base_close_action):
+ if config.return_value(base_close_action) == 'hold':
+ config.set(base_close_action, 'trap', replace=True)
+ if config.return_value(base_close_action) == 'restart':
+ config.set(base_close_action, 'start', replace=True)
try:
with open(file_name, 'w') as f: