diff options
| author | Ermal LUÇI <eri@pfsense.org> | 2015-04-18 10:34:46 +0200 |
|---|---|---|
| committer | Ermal LUÇI <eri@pfsense.org> | 2015-04-18 10:34:46 +0200 |
| commit | 0608bd3c354ea76eb6df9ed9322e2ef8686f15e7 (patch) | |
| tree | bd38ab383e402896305b9c392d3b5b380f0a8672 /etc | |
| parent | a0f190a25863d6b95839919005b50a43115a8cac (diff) | |
| download | pfsense-0608bd3c354ea76eb6df9ed9322e2ef8686f15e7.zip pfsense-0608bd3c354ea76eb6df9ed9322e2ef8686f15e7.tar.gz | |
Implement make bofre break feature avaliable on strongswan 5.3.0 useful for IKEv2. Fixes #4626
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/vpn.inc | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index ad054c0..a9c50aa 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -353,6 +353,11 @@ function vpn_ipsec_configure($restart = false) conf_mount_ro(); } + $makebeforebreak = ''; + if (isset($config['ipsec']['makebeforebreak'])) { + $makebeforebreak = 'make_before_break = yes'; + } + if (isset($config['ipsec']['enableinterfacesuse'])) { if (!empty($ifacesuse)) { $ifacesuse = 'interfaces_use = ' . implode(',', array_unique($ifacesuse)); @@ -383,6 +388,7 @@ install_routes = no {$accept_unencrypted} cisco_unity = {$unity_enabled} {$ifacesuse} +{$makebeforebreak} # And two loggers using syslog. The subsections define the facility to log # to, currently one of: daemon, auth. |
