diff options
| author | Ermal LUÇI <eri@pfsense.org> | 2015-04-30 22:53:39 +0200 |
|---|---|---|
| committer | Ermal LUÇI <eri@pfsense.org> | 2015-04-30 22:53:39 +0200 |
| commit | b27fdc8b8e46fe871ff08e771e80be426607c0ef (patch) | |
| tree | 393620a1b14b018d5d1a5a6742339915b8026801 /etc | |
| parent | 2f52fcbebc4cdf02d3167f0320e8717223cf47dd (diff) | |
| download | pfsense-b27fdc8b8e46fe871ff08e771e80be426607c0ef.zip pfsense-b27fdc8b8e46fe871ff08e771e80be426607c0ef.tar.gz | |
Seems strongswan 5.3.0 has improved the situation on putting multiple phase2 on IKEv1 behaviour and it behaves even better with reqid not defined in config.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/vpn.inc | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 31f907a..48996e7 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -1174,8 +1174,8 @@ EOD; $ipsecfin = ''; foreach ($rightsubnet_spec as $idx => $rsubnet) { $ipsecfin .= "\nconn con{$ph1ent['ikeid']}00{$idx}\n"; - if (!empty($reqids[$idx])) { - $ipsecfin .= "\treqid = " . $reqids[$idx] . "\n"; + //if (!empty($reqids[$idx])) { + // $ipsecfin .= "\treqid = " . $reqids[$idx] . "\n"; } $ipsecfin .= $ipsecconnect; $ipsecfin .= "\trightsubnet = {$rsubnet}\n"; @@ -1186,8 +1186,8 @@ EOD; } } else { $ipsecfin = "\nconn con{$ph1ent['ikeid']}\n"; - if (!empty($reqids[$idx])) { - $ipsecfin .= "\treqid = " . $reqids[0] . "\n"; + //if (!empty($reqids[$idx])) { + // $ipsecfin .= "\treqid = " . $reqids[0] . "\n"; } $ipsecfin .= $ipsecconnect; if (!isset($ph1ent['mobile']) && !empty($rightsubnet_spec)) { |
