From cdb97173c8ba251c577e30bb324555a418c32828 Mon Sep 17 00:00:00 2001
From: Oleksandr Kuchmystyi <o.kuchmystyi@vyos.io>
Date: Tue, 15 Jul 2025 12:31:07 +0300
Subject: ipsec: T7593: Add dynamic prefix for local and remote traffic
 selectors

In case when there is no local/remote prefix configured in a tunnel settings,
a protocol configured for such tunnel is ignored.

The correct way to generate the configuration is to set the prefix
to `dynamic` if it was not set. The correct config for the described case is:

```
local_ts = dynamic[gre/]
remote_ts = dynamic[gre/]
```
---
 interface-definitions/vpn_ipsec.xml.in | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'interface-definitions')

diff --git a/interface-definitions/vpn_ipsec.xml.in b/interface-definitions/vpn_ipsec.xml.in
index a54b16736..517bf89fd 100644
--- a/interface-definitions/vpn_ipsec.xml.in
+++ b/interface-definitions/vpn_ipsec.xml.in
@@ -1228,6 +1228,13 @@
                       #include <include/generic-disable-node.xml.i>
                       #include <include/ipsec/esp-group.xml.i>
                       #include <include/ipsec/local-traffic-selector.xml.i>
+                      <node name="local">
+                        <children>
+                          <leafNode name="prefix">
+                            <defaultValue>dynamic</defaultValue>
+                          </leafNode>
+                        </children>
+                      </node>
                       #include <include/ip-protocol.xml.i>
                       <leafNode name="priority">
                         <properties>
@@ -1264,6 +1271,7 @@
                               </constraint>
                               <multi/>
                             </properties>
+                            <defaultValue>dynamic</defaultValue>
                           </leafNode>
                         </children>
                       </node>
-- 
cgit v1.2.3