From 9dc7e170d4eab2a76f373886d2f0b21d51dabeb5 Mon Sep 17 00:00:00 2001
From: Lucas Christian <lucas@lucasec.com>
Date: Sun, 21 Jul 2024 22:46:55 -0700
Subject: T6599: ipsec: fix incorect default behavior for dead-peer-detection
(cherry picked from commit 23a3419d512139650cfe3dc76759b370b0c0c3d6)
---
smoketest/scripts/cli/test_vpn_ipsec.py | 9 +++++++++
1 file changed, 9 insertions(+)
(limited to 'smoketest/scripts')
diff --git a/smoketest/scripts/cli/test_vpn_ipsec.py b/smoketest/scripts/cli/test_vpn_ipsec.py
index 515e55ee4..2dc66485b 100755
--- a/smoketest/scripts/cli/test_vpn_ipsec.py
+++ b/smoketest/scripts/cli/test_vpn_ipsec.py
@@ -252,6 +252,15 @@ class TestVPNIPsec(VyOSUnitTestSHIM.TestCase):
for line in swanctl_conf_lines:
self.assertIn(line, swanctl_conf)
+ # if dpd is not specified it should not be enabled (see T6599)
+ swanctl_unexpected_lines = [
+ f'dpd_timeout'
+ f'dpd_delay'
+ ]
+
+ for unexpected_line in swanctl_unexpected_lines:
+ self.assertNotIn(unexpected_line, swanctl_conf)
+
swanctl_secrets_lines = [
f'id-{regex_uuid4} = "{local_id}"',
f'id-{regex_uuid4} = "{remote_id}"',
--
cgit v1.2.3