diff options
author | Scott Ullrich <sullrich@pfsense.org> | 2004-11-19 21:10:43 +0000 |
---|---|---|
committer | Scott Ullrich <sullrich@pfsense.org> | 2004-11-19 21:10:43 +0000 |
commit | d41f17ce1c836b6cd9485a2b8c4d1a75908ec127 (patch) | |
tree | 0388eb6542a4db2f06db9c9099b19d8c97bbbbff /etc/inc/vpn.inc | |
parent | f0fe3d307a06d707f1ab9e4ff17d0a29aa17eb0d (diff) | |
download | pfsense-d41f17ce1c836b6cd9485a2b8c4d1a75908ec127.zip pfsense-d41f17ce1c836b6cd9485a2b8c4d1a75908ec127.tar.gz |
add support for net.key.preferred_oldsa
Diffstat (limited to 'etc/inc/vpn.inc')
-rw-r--r-- | etc/inc/vpn.inc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 7a38ef3..5c6c3aa 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -50,6 +50,11 @@ function find_last_gif_device() { function vpn_ipsec_configure($ipchg = false) { global $config, $g; + if(isset($config['ipsec']['key.preferred_oldsa'])) { + // Set sysctl -w net.key.preferred_oldsa=0 + mwexec("sysctl -w net.key.preferred_oldsa=0"); + } + $number_of_gifs = find_last_gif_device(); for($x=0; $x<$number_of_gifs; $x++) { mwexec("/sbin/ifconfig gif" . $x . " delete"); |