From 656934e85cee799dba5b495d143f6be445ac22d5 Mon Sep 17 00:00:00 2001
From: Lucas Christian <lucas@lucasec.com>
Date: Thu, 28 Dec 2023 22:07:07 -0800
Subject: T5870: ipsec remote access VPN: add x509 ("pubkey") authentication.

---
 data/templates/ipsec/swanctl/remote_access.j2 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'data/templates/ipsec')

diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2
index 60d2d1807..01dc8a4a7 100644
--- a/data/templates/ipsec/swanctl/remote_access.j2
+++ b/data/templates/ipsec/swanctl/remote_access.j2
@@ -29,8 +29,10 @@
 {% endif %}
         }
         remote {
+{% if rw_conf.authentication.client_mode == 'x509' %}
+            auth = pubkey
+{% elif rw_conf.authentication.client_mode.startswith("eap") %}
             auth = {{ rw_conf.authentication.client_mode }}
-{% if rw_conf.authentication.client_mode.startswith("eap") %}
             eap_id = %any
 {% endif %}
         }
-- 
cgit v1.2.3