From 61487b13da8dc270907633a3140bd0cc2aa0926a Mon Sep 17 00:00:00 2001 From: Oleksandr Kuchmystyi Date: Wed, 31 Dec 2025 10:50:21 +0300 Subject: openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnels MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces (used as fallback cipher in site-to-site mode) - Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces --- python/vyos/template.py | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'python') diff --git a/python/vyos/template.py b/python/vyos/template.py index 128471f42..6b3e329a3 100755 --- a/python/vyos/template.py +++ b/python/vyos/template.py @@ -572,6 +572,11 @@ def get_openvpn_data_ciphers(ciphers): out.append(cipher) return ':'.join(out).upper() + +@register_filter('openvpn_data_ciphers_fallback') +def get_openvpn_data_ciphers_fallback(cipher): + return get_openvpn_cipher(cipher) + @register_filter('snmp_auth_oid') def snmp_auth_oid(type): if type not in ['md5', 'sha', 'aes', 'des', 'none']: -- cgit v1.2.3