diff options
| author | Ermal <eri@pfsense.org> | 2014-08-18 10:18:24 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2014-08-18 10:18:24 +0000 |
| commit | 5d37d51581119ebe6eaf0edc04a62296164e133e (patch) | |
| tree | e8b6ff6dce18603bb2a6a542cc24fbd9339dbbb0 /etc | |
| parent | 3b68ec45c7a03e16f37fa49e7438f99471f0a15f (diff) | |
| download | pfsense-5d37d51581119ebe6eaf0edc04a62296164e133e.zip pfsense-5d37d51581119ebe6eaf0edc04a62296164e133e.tar.gz | |
Do not accept proposal out of that configured even for IKEv2 even though there is no possibility in the GUI to set more than one proposal for Phase1 so far.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/vpn.inc | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 06ebcb1..0b58516 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -567,8 +567,7 @@ EOD; if (!empty($modp)) $ealgosp1 .= "-{$modp}"; - if ($keyexchange == "ikev1") - $ealgosp1 .= "!"; + $ealgosp1 .= "!"; } if ($ph1ent['dpd_delay'] && $ph1ent['dpd_maxfail']) { |
