summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorViacheslav Hletenko <v.gletenko@vyos.io>2024-03-24 12:13:01 +0200
committerGitHub <noreply@github.com>2024-03-24 12:13:01 +0200
commit3e418913f8855d4ce8b90bb9a43019d5ef1742f2 (patch)
tree81a03c00a8e615c35ee0d02007e82b6bfaddcd09 /src
parent6ad88061271b118dc4d22fe816f8b393f3220115 (diff)
parentc104f9aea60416dbff3bf8de994921069ee6a928 (diff)
downloadvyos-1x-3e418913f8855d4ce8b90bb9a43019d5ef1742f2.tar.gz
vyos-1x-3e418913f8855d4ce8b90bb9a43019d5ef1742f2.zip
Merge pull request #3163 from vyos/mergify/bp/sagitta/pr-3157
vti: T6085: bring VTI interfaces up only when the IPsec tunnel is up (backport #3157)
Diffstat (limited to 'src')
-rwxr-xr-xsrc/etc/ipsec.d/vti-up-down4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/etc/ipsec.d/vti-up-down b/src/etc/ipsec.d/vti-up-down
index 441b316c2..01e9543c9 100755
--- a/src/etc/ipsec.d/vti-up-down
+++ b/src/etc/ipsec.d/vti-up-down
@@ -1,6 +1,6 @@
#!/usr/bin/env python3
#
-# Copyright (C) 2021-2023 VyOS maintainers and contributors
+# Copyright (C) 2021-2024 VyOS maintainers and contributors
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 or later as
@@ -57,7 +57,9 @@ if __name__ == '__main__':
if 'disable' not in vti:
tmp = VTIIf(interface)
tmp.update(vti)
+ call(f'sudo ip link set {interface} up')
else:
+ call(f'sudo ip link set {interface} down')
syslog(f'Interface {interface} is admin down ...')
elif verb in ['down-client', 'down-host']:
if vti_link_up: