summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
diff options
context:
space:
mode:
authorMohammed Hawari <mohammed@hawari.fr>2021-02-10 09:38:05 +0100
committerDamjan Marion <dmarion@me.com>2021-03-15 17:53:41 +0000
commit7db75dd0d32d92674bbb7aa1b23341e8a349e05a (patch)
treef0a63fa541b04e7f617cd612434e00b21c63d175 /src/vnet/ipsec
parentab3151c52e3686c629c79a6447cf9df4f73d5c6d (diff)
ipsec: allow inbound non-tunnel SA through CLI
Change-Id: Ia304488900bd9236ab4e7cc6f17ae029ee6f2c00 Type: fix Signed-off-by: Mohammed Hawari <mohammed@hawari.fr>
Diffstat (limited to 'src/vnet/ipsec')
-rw-r--r--src/vnet/ipsec/ipsec_cli.c6
1 files changed, 0 insertions, 6 deletions
diff --git a/src/vnet/ipsec/ipsec_cli.c b/src/vnet/ipsec/ipsec_cli.c
index 2c7a923adc3..3a3e53b663e 100644
--- a/src/vnet/ipsec/ipsec_cli.c
+++ b/src/vnet/ipsec/ipsec_cli.c
@@ -170,12 +170,6 @@ ipsec_sa_add_del_command_fn (vlib_main_t * vm,
goto done;
}
}
- if ((flags & IPSEC_SA_FLAG_IS_INBOUND)
- && !(flags & IPSEC_SA_FLAG_IS_TUNNEL))
- {
- error = clib_error_return (0, "inbound specified on non-tunnel SA");
- goto done;
- }
if (!(m_args & 1))
{