From d5e84fab2e66fb4452516e3a5adc00c6ed772de1 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 28 Sep 2022 19:33:40 +0200
Subject: op-mode: ipsec: T4719: bugfix IKEv2 road-warrior profile generator

Commit bd4588827b ("ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peer")
changed the CLI syntax of ipsec. This resulted in a node not renamed in the
op-mode generator when generating IKEv2 IPSec iOS configuration profiles.
---
 data/templates/ipsec/ios_profile.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'data/templates/ipsec')

diff --git a/data/templates/ipsec/ios_profile.j2 b/data/templates/ipsec/ios_profile.j2
index c8e17729a..eb74924b8 100644
--- a/data/templates/ipsec/ios_profile.j2
+++ b/data/templates/ipsec/ios_profile.j2
@@ -41,7 +41,7 @@
                 <!-- Remote identity, can be a FQDN, a userFQDN, an IP or (theoretically) a certificate's subject DN. Can't be empty.
                      IMPORTANT: DNs are currently not handled correctly, they are always sent as identities of type FQDN -->
                 <key>RemoteIdentifier</key>
-                <string>{{ authentication.id if authentication.id is vyos_defined else 'VyOS' }}</string>
+                <string>{{ authentication.local_id if authentication.local_id is vyos_defined else 'VyOS' }}</string>
                 <!-- Local IKE identity, same restrictions as above. If it is empty the client's IP address will be used -->
                 <key>LocalIdentifier</key>
                 <string></string>
-- 
cgit v1.2.3