FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14455 questions

17168 answers

28195 comments

0 members

We are migrating to our new platform at https://community.teltonika.lt. Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.
0 votes
119 views 1 comments
by anonymous
Hello,

%dynamic is not allowed in IPSEC General Settings->Local subnet, the UI pretends that the value is invalid. Setting list local_subnet '%dynamic' directly in /etc/config/ipsec gives the desired result ie the SA are built the tunnel works but nothing can be saved from the UI after that.

Edit: found acceptable workaround: removing the local_subnet variable or leaving the field empty in the UI.

Regards,

1 Answer

0 votes
by anonymous
Hello,

This is just from string validation on the WebUI as this is quite a rare thing to do.
by anonymous
Agree with the string valiadation point, however %dynamic clearly marks the intention counting on some lazy interpretation of an absent or empty field doesn't. A combination of %config(4,6,) and %dynamic enables a single configuration location for a server with many clients in the wild.