diff options
| author | Ermal LUÇI <eri@pfsense.org> | 2015-04-24 17:33:18 +0200 |
|---|---|---|
| committer | Ermal LUÇI <eri@pfsense.org> | 2015-04-24 17:33:26 +0200 |
| commit | 7bc36682339693dd10aa53e361f00ab7358115e1 (patch) | |
| tree | 5560856cace9f2d814f183aead16f13d90285ffd /etc/inc | |
| parent | 54dd568af28ebe7b4905fedd3cdf48269e63f001 (diff) | |
| download | pfsense-7bc36682339693dd10aa53e361f00ab7358115e1.zip pfsense-7bc36682339693dd10aa53e361f00ab7358115e1.tar.gz | |
Provide a description for the dirty hack to not come back scratching.... on it
Diffstat (limited to 'etc/inc')
| -rw-r--r-- | etc/inc/vpn.inc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 193a867..880ca88 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -1179,6 +1179,11 @@ EOD; $ipsecfin .= "\treqid = " . $reqids[$idx] . "\n"; } $ipsecfin .= $ipsecconnect; + /* + * This is for making strongswan consider the various similar + * connection profiles as different and forces it to create + * separate IKE SAs for each subnet from P2 + */ $ipsecfin .= "\tkeyingtries = {$keyingtries}\n"; $keyingtries++; $ipsecfin .= "\trightsubnet = {$rsubnet}\n"; |
