From a9502ba5dfea7ece7d7c6a9b8bacad3d304b144b Mon Sep 17 00:00:00 2001
From: Nataliia Solomko <natalirs1985@gmail.com>
Date: Thu, 12 Sep 2024 16:01:25 +0300
Subject: op-mode: T6682: Fix for show vpn ike sa peer always shows all SAs

(cherry picked from commit 8c6a57124af37ba410dd01797e9242b3a79f171a)
---
 src/op_mode/vpn_ike_sa.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/op_mode/vpn_ike_sa.py b/src/op_mode/vpn_ike_sa.py
index 5e2aaae6b..9385bcd0c 100755
--- a/src/op_mode/vpn_ike_sa.py
+++ b/src/op_mode/vpn_ike_sa.py
@@ -38,6 +38,8 @@ def ike_sa(peer, nat):
     peers = []
     for conn in sas:
         for name, sa in conn.items():
+            if peer and s(sa['remote-host']) != peer:
+                continue
             if name.startswith('peer_') and name in peers:
                 continue
             if nat and 'nat-local' not in sa:
-- 
cgit v1.2.3