From 7db75dd0d32d92674bbb7aa1b23341e8a349e05a Mon Sep 17 00:00:00 2001
From: Mohammed Hawari <mohammed@hawari.fr>
Date: Wed, 10 Feb 2021 09:38:05 +0100
Subject: ipsec: allow inbound non-tunnel SA through CLI

Change-Id: Ia304488900bd9236ab4e7cc6f17ae029ee6f2c00
Type: fix
Signed-off-by: Mohammed Hawari <mohammed@hawari.fr>
---
 src/vnet/ipsec/ipsec_cli.c | 6 ------
 1 file changed, 6 deletions(-)

(limited to 'src/vnet/ipsec/ipsec_cli.c')

diff --git a/src/vnet/ipsec/ipsec_cli.c b/src/vnet/ipsec/ipsec_cli.c
index 2c7a923adc3..3a3e53b663e 100644
--- a/src/vnet/ipsec/ipsec_cli.c
+++ b/src/vnet/ipsec/ipsec_cli.c
@@ -170,12 +170,6 @@ ipsec_sa_add_del_command_fn (vlib_main_t * vm,
 	  goto done;
 	}
     }
-  if ((flags & IPSEC_SA_FLAG_IS_INBOUND)
-      && !(flags & IPSEC_SA_FLAG_IS_TUNNEL))
-    {
-      error = clib_error_return (0, "inbound specified on non-tunnel SA");
-      goto done;
-    }
 
   if (!(m_args & 1))
     {
-- 
cgit 1.2.3-korg