From b60e27af1bbe757dd2b975d1f53409bd6ee615a1 Mon Sep 17 00:00:00 2001
From: Nataliia Solomko <natalirs1985@gmail.com>
Date: Thu, 12 Sep 2024 16:01:25 +0300
Subject: op-mode: T6682: Fix for show vpn ike sa peer always shows all SAs
(cherry picked from commit 8c6a57124af37ba410dd01797e9242b3a79f171a)
---
src/op_mode/vpn_ike_sa.py | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/op_mode/vpn_ike_sa.py b/src/op_mode/vpn_ike_sa.py
index 5e2aaae6b..9385bcd0c 100755
--- a/src/op_mode/vpn_ike_sa.py
+++ b/src/op_mode/vpn_ike_sa.py
@@ -38,6 +38,8 @@ def ike_sa(peer, nat):
peers = []
for conn in sas:
for name, sa in conn.items():
+ if peer and s(sa['remote-host']) != peer:
+ continue
if name.startswith('peer_') and name in peers:
continue
if nat and 'nat-local' not in sa:
--
cgit v1.2.3