summaryrefslogtreecommitdiffstats
path: root/src/etc/inc
diff options
context:
space:
mode:
authorhamnur <hamnur@protonmail.com>2017-06-29 16:08:54 +0200
committerhamnur <hamnur@protonmail.com>2017-06-29 16:18:09 +0200
commit9542011684a26e0b1b959d9b56d5fcfc12023893 (patch)
tree06cb646a8fed1282689c26a4ef3a5784ceda3330 /src/etc/inc
parentfaab657a256f9385d5e0ffb4084666e760b515a5 (diff)
downloadpfsense-9542011684a26e0b1b959d9b56d5fcfc12023893.zip
pfsense-9542011684a26e0b1b959d9b56d5fcfc12023893.tar.gz
Add strongswan rekeymargin attribute to vpn ipsec phase1 view
Diffstat (limited to 'src/etc/inc')
-rw-r--r--src/etc/inc/vpn.inc5
1 files changed, 5 insertions, 0 deletions
diff --git a/src/etc/inc/vpn.inc b/src/etc/inc/vpn.inc
index 1398135..8200b5e 100644
--- a/src/etc/inc/vpn.inc
+++ b/src/etc/inc/vpn.inc
@@ -978,6 +978,10 @@ EOD;
$ikelifeline = "ikelifetime = {$ph1ent['lifetime']}s";
}
+ if ($ph1ent['rekeymargin']) {
+ $rekeymargin = "rekeymargin = {$ph1ent['rekeymargin']}s";
+ }
+
$rightsourceip = NULL;
if (isset($ph1ent['mobile'])) {
$rightsourceips = array();
@@ -1304,6 +1308,7 @@ EOD;
{$mobike}
{$tfc}
{$rekey}
+ {$rekeymargin}
installpolicy = yes
{$tunneltype}
{$dpdline}
OpenPOWER on IntegriCloud