diff options
| author | Ermal LUÇI <eri@pfsense.org> | 2014-11-25 21:39:34 +0100 |
|---|---|---|
| committer | Ermal LUÇI <eri@pfsense.org> | 2014-11-25 21:39:34 +0100 |
| commit | 1eb378ed3c4d19844eef686078bbaf238771a30a (patch) | |
| tree | 6faa59534d2c4d18deb42cf109a718a22fdfd169 | |
| parent | 156a086d7231292dc7c4110450f400024523cc22 (diff) | |
| download | pfsense-1eb378ed3c4d19844eef686078bbaf238771a30a.zip pfsense-1eb378ed3c4d19844eef686078bbaf238771a30a.tar.gz | |
Put the aggressive line only during ikev1 configs
| -rw-r--r-- | etc/inc/vpn.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index b5aa913..c8392ea 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -800,7 +800,6 @@ EOD; $ipsecconf .=<<<EOD conn con{$ph1ent['ikeid']} - aggressive = {$aggressive} fragmentation = yes keyexchange = {$keyexchange} {$reauth} @@ -837,6 +836,8 @@ EOD; $ipsecconf .= "\t{$authentication}\n"; if (!empty($peerid_spec)) $ipsecconf .= "\trightid = {$peerid_spec}\n"; + if ($keyexchange == 'ikev1') + aggressive = {$aggressive} } } } |
