From 0b1695221657336b436fc27217614b07a34cc132 Mon Sep 17 00:00:00 2001
From: sarthurdev <965089+sarthurdev@users.noreply.github.com>
Date: Sat, 12 Jun 2021 23:18:19 +0200
Subject: ipsec: T57: Support disable on peer, tunnel, dmvpn profile

---
 data/templates/ipsec/ipsec.secrets.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'data/templates/ipsec/ipsec.secrets.tmpl')

diff --git a/data/templates/ipsec/ipsec.secrets.tmpl b/data/templates/ipsec/ipsec.secrets.tmpl
index a1432de57..0d2654abc 100644
--- a/data/templates/ipsec/ipsec.secrets.tmpl
+++ b/data/templates/ipsec/ipsec.secrets.tmpl
@@ -2,7 +2,7 @@
 
 {%  if site_to_site is defined and "peer" in site_to_site %}
 {%      set ns = namespace(local_key_set=False) %}
-{%      for peer, peer_conf in site_to_site.peer.items() %}
+{%      for peer, peer_conf in site_to_site.peer.items() if peer not in dhcp_no_address and peer_conf.disable is not defined %}
 {%          if peer_conf.authentication.mode == 'pre-shared-secret' %}
 {{ (peer_conf.local_address if "local_address" in peer_conf else "%any") ~
     (" " ~ peer) ~
-- 
cgit v1.2.3