From b60e27af1bbe757dd2b975d1f53409bd6ee615a1 Mon Sep 17 00:00:00 2001 From: Nataliia Solomko Date: Thu, 12 Sep 2024 16:01:25 +0300 Subject: op-mode: T6682: Fix for show vpn ike sa peer always shows all SAs (cherry picked from commit 8c6a57124af37ba410dd01797e9242b3a79f171a) --- src/op_mode/vpn_ike_sa.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/op_mode/vpn_ike_sa.py b/src/op_mode/vpn_ike_sa.py index 5e2aaae6b..9385bcd0c 100755 --- a/src/op_mode/vpn_ike_sa.py +++ b/src/op_mode/vpn_ike_sa.py @@ -38,6 +38,8 @@ def ike_sa(peer, nat): peers = [] for conn in sas: for name, sa in conn.items(): + if peer and s(sa['remote-host']) != peer: + continue if name.startswith('peer_') and name in peers: continue if nat and 'nat-local' not in sa: -- cgit v1.2.3