diff options
| author | Renato Botelho <garga@FreeBSD.org> | 2013-09-03 15:13:10 -0300 |
|---|---|---|
| committer | Renato Botelho <garga@FreeBSD.org> | 2013-09-03 15:13:10 -0300 |
| commit | 03131eb95c975ed990ddf955c762ef51137288a0 (patch) | |
| tree | 4c9248a782fd1e77b019568cd39460e7233d7148 /etc | |
| parent | fcca1783e98760e1edc6f887872bd643529826dc (diff) | |
| download | pfsense-03131eb95c975ed990ddf955c762ef51137288a0.zip pfsense-03131eb95c975ed990ddf955c762ef51137288a0.tar.gz | |
Remove SPD when disable phase2, it fixes #2719
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/vpn.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index bf9e611..62d997c 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -1905,7 +1905,7 @@ function reload_tunnel_spd_policy($phase1, $phase2, $old_phase1, $old_phase2) { } } /* add new SPD policies to replace them */ - if (!isset($phase1['disabled'])) { + if (!isset($phase1['disabled']) && !isset($phase2['disabled'])) { $spdconf .= "spdadd {$family} {$local_subnet} " . "{$remote_subnet} any -P out ipsec " . "{$phase2['protocol']}/tunnel/{$ep}-" . |
