VPN: IPsec: Connections - Support the default selector ([dynamic]) when local_ts or remote_ts are left empty. closes https://github.com/opnsense/core/issues/6579

This commit is contained in:
Ad Schellevis 2023-05-30 18:01:27 +02:00
parent efcc7fcffa
commit 1c9677c82a
2 changed files with 6 additions and 4 deletions

View File

@ -100,7 +100,9 @@
<type>select_multiple</type>
<style>tokenize</style>
<allownew>true</allownew>
<help>List of local traffic selectors to include in CHILD_SA. Each selector is a CIDR subnet definition.</help>
<help>List of local traffic selectors to include in CHILD_SA. Each selector is a CIDR subnet definition.
When left empty the address will be replaced by the tunnel outer address or the virtual IP if negotiated ([dynamic]).
</help>
</field>
<field>
<id>child.remote_ts</id>
@ -108,7 +110,9 @@
<type>select_multiple</type>
<style>tokenize</style>
<allownew>true</allownew>
<help>List of remote traffic selectors to include in CHILD_SA. Each selector is a CIDR subnet definition.</help>
<help>List of remote traffic selectors to include in CHILD_SA. Each selector is a CIDR subnet definition.
When left empty the address will be replaced by the tunnel outer address or the virtual IP if negotiated ([dynamic])
</help>
</field>
<field>
<id>child.rekey_time</id>

View File

@ -304,13 +304,11 @@
<Required>Y</Required>
</policies>
<local_ts type="NetworkField">
<Required>Y</Required>
<FieldSeparator>,</FieldSeparator>
<asList>Y</asList>
<WildcardEnabled>N</WildcardEnabled>
</local_ts>
<remote_ts type="NetworkField">
<Required>Y</Required>
<FieldSeparator>,</FieldSeparator>
<asList>Y</asList>
<WildcardEnabled>N</WildcardEnabled>