diff options
| author | Chris Buechler <cmb@pfsense.org> | 2015-01-09 21:59:00 -0600 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2015-01-09 21:59:21 -0600 |
| commit | c182616905892d32edab9fe93b9f069d229f90ab (patch) | |
| tree | 64c8eee8a2f84ece30bea793379075e6ac32b183 | |
| parent | 422a2007d59ad58e57621210749a31e55af99abb (diff) | |
| download | pfsense-c182616905892d32edab9fe93b9f069d229f90ab.zip pfsense-c182616905892d32edab9fe93b9f069d229f90ab.tar.gz | |
Default IPsec to main mode, unless mobile client.
| -rw-r--r-- | usr/local/www/vpn_ipsec_phase1.php | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/usr/local/www/vpn_ipsec_phase1.php b/usr/local/www/vpn_ipsec_phase1.php index 152f25d..c8a962a 100644 --- a/usr/local/www/vpn_ipsec_phase1.php +++ b/usr/local/www/vpn_ipsec_phase1.php @@ -123,7 +123,7 @@ if (isset($p1index) && $a_phase1[$p1index]) { $pconfig['interface'] = "wan"; if($config['interfaces']['lan']) $pconfig['localnet'] = "lan"; - $pconfig['mode'] = "aggressive"; + $pconfig['mode'] = "main"; $pconfig['protocol'] = "inet"; $pconfig['myid_type'] = "myaddress"; $pconfig['peerid_type'] = "peeraddress"; @@ -137,8 +137,10 @@ if (isset($p1index) && $a_phase1[$p1index]) { $pconfig['iketype'] = "ikev1"; /* mobile client */ - if($_GET['mobile']) + if($_GET['mobile']) { $pconfig['mobile']=true; + $pconfig['mode'] = "aggressive"; + } } if (isset($_GET['dup']) && is_numericint($_GET['dup'])) |
