diff options
| author | Daniil Baturin <daniil@vyos.io> | 2025-07-28 13:27:20 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-07-28 13:27:20 +0100 |
| commit | fd2df0f1b34609fea5dc186b3898a0c786e1bf2b (patch) | |
| tree | 2e7097915bea996714fcf30e9f72faf903d7b38f /src | |
| parent | fc5ea5bdf1a1fb0092d2f4847b100b29f1ac25a4 (diff) | |
| parent | cdb97173c8ba251c577e30bb324555a418c32828 (diff) | |
| download | vyos-1x-fd2df0f1b34609fea5dc186b3898a0c786e1bf2b.tar.gz vyos-1x-fd2df0f1b34609fea5dc186b3898a0c786e1bf2b.zip | |
Merge pull request #4608 from alexandr-san4ez/T7593-current
ipsec: T7593: Add dynamic prefix for local and remote traffic selectors
Diffstat (limited to 'src')
| -rwxr-xr-x | src/conf_mode/vpn_ipsec.py | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/conf_mode/vpn_ipsec.py b/src/conf_mode/vpn_ipsec.py index 1871956b2..dcb9f9c69 100755 --- a/src/conf_mode/vpn_ipsec.py +++ b/src/conf_mode/vpn_ipsec.py @@ -696,6 +696,8 @@ def generate(ipsec): generate_pki_files_x509(ipsec['pki'], rw_conf['authentication']['x509']) if 'site_to_site' in ipsec and 'peer' in ipsec['site_to_site']: + DEFAULT_TS_PREFIX = 'dynamic' + for peer, peer_conf in ipsec['site_to_site']['peer'].items(): if f'peer_{peer}' in ipsec['dhcp_no_address']: continue @@ -724,7 +726,13 @@ def generate(ipsec): passthrough = None for local_prefix in local_prefixes: + if local_prefix == DEFAULT_TS_PREFIX: + continue + for remote_prefix in remote_prefixes: + if remote_prefix == DEFAULT_TS_PREFIX: + continue + local_net = ipaddress.ip_network(local_prefix) remote_net = ipaddress.ip_network(remote_prefix) if local_net.subnet_of(remote_net): |