vyos@vyos:~$ generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name VYOS-NET profile VYOS
(1) Encryption AES-256, Integrity SHA2-512, DH group 14
(2) Encryption AES-256, Integrity SHA2-256, DH group 14
(3) Encryption AES-128-GCM, Integrity SHA2-256, DH group 14
Select one of the above IKE groups: 1
(1) Encryption AES-256, Integrity SHA2-512
(2) Encryption AES-256, Integrity SHA2-384
(3) Encryption AES-256, Integrity SHA2-256
(4) Encryption AES-256, Integrity SHA1-96
(5) Encryption AES-128-GCM, Integrity SHA2-256
Select one of the above ESP groups: 1
==== <snip> ====
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/ikev2_profile_generator.py", line 313, in <module>
print(render_to_string('ipsec/ios_profile.j2', data))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/vyos/template.py", line 121, in render_to_string
rendered = template.render(content)
^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/jinja2/environment.py", line 1301, in render
self.environment.handle_exception()
File "/usr/lib/python3/dist-packages/jinja2/environment.py", line 936, in handle_exception
raise rewrite_traceback_stack(source=source)
File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code
{% if authentication.client_mode.startswith("eap") %}
^^^^^^^^^^^^^^^^^^^^^^^^^
jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode'Description
Description
Details
Details
- Version
- 1.4.1
- Is it a breaking change?
- Perfectly compatible
- Issue type
- Bug (incorrect behavior)
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | lucasec | T6617 ipsec: remote access VPN: "generate ipsec profile ios-remote-access" wrong profile for x509 auth | |||
| Resolved | BUG | c-po | T7225 Unhandled template error in "generate ipsec profile ios-remote-access" |