diff options
| author | Ermal <eri@pfsense.org> | 2014-08-07 20:53:45 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2014-08-07 20:53:45 +0000 |
| commit | 9f6a5b506745475b53593c811ff8cda34ae2797b (patch) | |
| tree | aebf6a0881ae4582813607c9014d254e83cdf8b1 | |
| parent | 0b5fc1d1a6c515d91df5ec1d848b6bbc1a05186b (diff) | |
| download | pfsense-9f6a5b506745475b53593c811ff8cda34ae2797b.zip pfsense-9f6a5b506745475b53593c811ff8cda34ae2797b.tar.gz | |
Do a reload on the cofniguration which is better than update. Also let the keyingtries to 3 rather than forever to avoid problems on recovery.
| -rw-r--r-- | etc/inc/vpn.inc | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 2e2100b..80eb1c0 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -736,7 +736,6 @@ conn con{$ph1ent['ikeid']} aggressive = {$aggressive} fragmentation = yes keyexchange = {$keyexchange} - keyingtries = %forever reauth = yes rekey = yes reqid = {$ikeid} @@ -780,7 +779,7 @@ EOD; /* Read secrets */ mwexec("/usr/local/sbin/ipsec rereadall", false); /* Update configuration changes */ - mwexec("/usr/local/sbin/ipsec update", false); + mwexec("/usr/local/sbin/ipsec reload", false); } else { mwexec("/usr/local/sbin/ipsec start", false); } |
