diff options
| author | Ermal LUÇI <eri@pfsense.org> | 2015-04-30 22:53:00 +0200 |
|---|---|---|
| committer | Ermal LUÇI <eri@pfsense.org> | 2015-04-30 22:53:00 +0200 |
| commit | afd0c1f2c9c46eaa8e496e98bea8a8e0887d504f (patch) | |
| tree | 2e4a843505f2639176eefdff3a454ad23b9ca732 /etc | |
| parent | 1e92a236f4e61a4fef97d35ba0107a54c06ac65a (diff) | |
| download | pfsense-afd0c1f2c9c46eaa8e496e98bea8a8e0887d504f.zip pfsense-afd0c1f2c9c46eaa8e496e98bea8a8e0887d504f.tar.gz | |
Seems strongswan 5.3.0 has improved the situation on putting multiple phase2 on IKEv1 behaviour and it behaves even better with reqid not defined in config.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/vpn.inc | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 3e60e1a..630b52d 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -1076,8 +1076,8 @@ EOD; $ipsecfin = ''; foreach ($rightsubnet_spec as $idx => $rsubnet) { $ipsecfin .= "\nconn con{$ph1ent['ikeid']}00{$idx}\n"; - if (!empty($reqids[$idx])) - $ipsecfin .= "\treqid = " . $reqids[$idx] . "\n"; + //if (!empty($reqids[$idx])) + // $ipsecfin .= "\treqid = " . $reqids[$idx] . "\n"; $ipsecfin .= $ipsecconnect; $ipsecfin .= "\trightsubnet = {$rsubnet}\n"; $ipsecfin .= "\tleftsubnet = " . $leftsubnet_spec[$idx] . "\n"; @@ -1086,8 +1086,8 @@ EOD; log_error("No phase2 specifications for tunnel with REQID = {$ikeid}"); } else { $ipsecfin = "\nconn con{$ph1ent['ikeid']}\n"; - if (!empty($reqids[$idx])) - $ipsecfin .= "\treqid = " . $reqids[0] . "\n"; + //if (!empty($reqids[$idx])) + // $ipsecfin .= "\treqid = " . $reqids[0] . "\n"; $ipsecfin .= $ipsecconnect; if (!isset($ph1ent['mobile']) && !empty($rightsubnet_spec)) { $tempsubnets = array(); |
