diff options
| author | Ermal <eri@pfsense.org> | 2014-11-04 21:21:47 +0100 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2014-11-04 21:21:47 +0100 |
| commit | 0810a719e903cef1d48fc94821ee6aa8ac8073fd (patch) | |
| tree | 2b511e00f90f29c83613d1499bf0407c035c2811 /etc | |
| parent | 1db2634e32a588932e55bf972d3cf57063af0571 (diff) | |
| download | pfsense-0810a719e903cef1d48fc94821ee6aa8ac8073fd.zip pfsense-0810a719e903cef1d48fc94821ee6aa8ac8073fd.tar.gz | |
Restore 3 values back on NAT-T settings Just Enable now its Auto as per strongswan default. and off disabled mobike. Ticket #3979
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/vpn.inc | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 1e181c1..12589f7 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -628,10 +628,12 @@ EOD; else $rekey = "rekey = yes"; - if ($ph1ent['nat_traversal'] != 'off') - $forceencaps = "forceencaps = yes"; + if ($ph1ent['nat_traversal'] == 'off') + $forceencaps = 'forceencaps = no\n\tmobike = no'; + else if ($ph1ent['nat_traversal'] == 'force') + $forceencaps = 'forceencaps = yes'; else - $forceencaps = "forceencaps = no"; + $forceencaps = 'forceencaps = no'; $ipseclifetime = 0; $rightsubnet_spec = array(); |
