summaryrefslogtreecommitdiffstats
path: root/etc/inc/vpn.inc
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2004-11-19 21:10:43 +0000
committerScott Ullrich <sullrich@pfsense.org>2004-11-19 21:10:43 +0000
commitd41f17ce1c836b6cd9485a2b8c4d1a75908ec127 (patch)
tree0388eb6542a4db2f06db9c9099b19d8c97bbbbff /etc/inc/vpn.inc
parentf0fe3d307a06d707f1ab9e4ff17d0a29aa17eb0d (diff)
downloadpfsense-d41f17ce1c836b6cd9485a2b8c4d1a75908ec127.zip
pfsense-d41f17ce1c836b6cd9485a2b8c4d1a75908ec127.tar.gz
add support for net.key.preferred_oldsa
Diffstat (limited to 'etc/inc/vpn.inc')
-rw-r--r--etc/inc/vpn.inc5
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index 7a38ef3..5c6c3aa 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -50,6 +50,11 @@ function find_last_gif_device() {
function vpn_ipsec_configure($ipchg = false) {
global $config, $g;
+ if(isset($config['ipsec']['key.preferred_oldsa'])) {
+ // Set sysctl -w net.key.preferred_oldsa=0
+ mwexec("sysctl -w net.key.preferred_oldsa=0");
+ }
+
$number_of_gifs = find_last_gif_device();
for($x=0; $x<$number_of_gifs; $x++) {
mwexec("/sbin/ifconfig gif" . $x . " delete");
OpenPOWER on IntegriCloud