diff options
| author | jim-p <jim@pingle.org> | 2010-05-06 17:15:28 -0400 |
|---|---|---|
| committer | jim-p <jim@pingle.org> | 2010-05-06 17:15:28 -0400 |
| commit | 10d171f24991d31bf870cd2aff65ac8f27293b03 (patch) | |
| tree | 03976ca66f976245779091c4ef675821cd688816 /etc/inc/vpn.inc | |
| parent | cee72940274322126247661435840fa383ee0bf8 (diff) | |
| download | pfsense-10d171f24991d31bf870cd2aff65ac8f27293b03.zip pfsense-10d171f24991d31bf870cd2aff65ac8f27293b03.tar.gz | |
Add a few comments. This should be ready for testing/feedback. Ticket #108
Diffstat (limited to 'etc/inc/vpn.inc')
| -rw-r--r-- | etc/inc/vpn.inc | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index ef2747b..f2343e1 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -495,6 +495,7 @@ function vpn_ipsec_configure($ipchg = false) $passive = ""; if (isset($ph1ent['mobile'])) { $rgip = "anonymous"; + /* Mimic 1.2.3's behavior for pure-psk mobile tunnels */ if ($ph1ent['authentication_method'] == "pre_shared_key") { $passive = "passive on;"; $pcheck = "obey"; @@ -632,6 +633,7 @@ EOD; $localid_type = $ph2ent['localid']['type']; $localid_data = ipsec_idinfo_to_cidr($ph2ent['localid']); + /* Do not print localid in some cases, such as a pure-psk mobile tunnel */ if (($localid_type == "none") || ($ph1ent['authentication_method'] == "pre_shared_key") && isset($ph1ent['mobile'])) $localid_spec = " "; else if ($localid_type != "address") { |
