From c3a7fdc5cc75949361915db73fbac107ee53edd9 Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Thu, 6 Mar 2025 16:35:08 +0100
Subject: ipsec: T7225: "generate ipsec profile ios-remote-access" throws
 UndefinedError

Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name
VYOS-NET profile VYOS" in op-mode causes

File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code
  {% if authentication.client_mode.startswith("eap") %}
  ^^^^^^^^^^^^^^^^^^^^^^^^^
jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode'
---
 data/templates/ipsec/ios_profile.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'data/templates')

diff --git a/data/templates/ipsec/ios_profile.j2 b/data/templates/ipsec/ios_profile.j2
index 966fad433..eaf00018b 100644
--- a/data/templates/ipsec/ios_profile.j2
+++ b/data/templates/ipsec/ios_profile.j2
@@ -55,7 +55,7 @@
                 <!-- The server is authenticated using a certificate -->
                 <key>AuthenticationMethod</key>
                 <string>Certificate</string>
-{% if authentication.client_mode.startswith("eap") %}
+{% if authentication.client_mode is vyos_defined and authentication.client_mode.startswith("eap") %}
                 <!-- The client uses EAP to authenticate -->
                 <key>ExtendedAuthEnabled</key>
                 <integer>1</integer>
-- 
cgit v1.2.3