From 48c768abbf53b752a55db2adea1f998cb28da55c Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 18 Jul 2021 21:35:53 +0200
Subject: ipsec: T1210: remote-access pools can not hold both IPv4 and IPv6
 prefixes

... this enables a dual-stack IKEv2 VPN deployment.
---
 interface-definitions/vpn_ipsec.xml.in | 1 +
 1 file changed, 1 insertion(+)

(limited to 'interface-definitions')

diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in
index 9dbebdc0f..14063091d 100644
--- a/interface-definitions/vpn_ipsec.xml.in
+++ b/interface-definitions/vpn_ipsec.xml.in
@@ -850,6 +850,7 @@
                         <validator name="ipv4-prefix"/>
                         <validator name="ipv6-prefix"/>
                       </constraint>
+                      <multi/>
                     </properties>
                   </leafNode>
                   <!-- Include Accel-PPP definition here, maybe time for a rename? -->
-- 
cgit v1.2.3