diff options
author | Chris Buechler <cmb@pfsense.org> | 2015-01-09 21:59:00 -0600 |
---|---|---|
committer | Chris Buechler <cmb@pfsense.org> | 2015-01-09 21:59:00 -0600 |
commit | 460719c819af753a081ce6ef8570d05732f3e3b8 (patch) | |
tree | a8d8a1e59952ee364659453fa297fb2a639d08d1 /usr/local/www | |
parent | 9c0ec56ea8a978213a173dfcbbfe502e7e4a5084 (diff) | |
download | pfsense-460719c819af753a081ce6ef8570d05732f3e3b8.zip pfsense-460719c819af753a081ce6ef8570d05732f3e3b8.tar.gz |
Default IPsec to main mode, unless mobile client.
Diffstat (limited to 'usr/local/www')
-rw-r--r-- | usr/local/www/vpn_ipsec_phase1.php | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/usr/local/www/vpn_ipsec_phase1.php b/usr/local/www/vpn_ipsec_phase1.php index 152f25d..c8a962a 100644 --- a/usr/local/www/vpn_ipsec_phase1.php +++ b/usr/local/www/vpn_ipsec_phase1.php @@ -123,7 +123,7 @@ if (isset($p1index) && $a_phase1[$p1index]) { $pconfig['interface'] = "wan"; if($config['interfaces']['lan']) $pconfig['localnet'] = "lan"; - $pconfig['mode'] = "aggressive"; + $pconfig['mode'] = "main"; $pconfig['protocol'] = "inet"; $pconfig['myid_type'] = "myaddress"; $pconfig['peerid_type'] = "peeraddress"; @@ -137,8 +137,10 @@ if (isset($p1index) && $a_phase1[$p1index]) { $pconfig['iketype'] = "ikev1"; /* mobile client */ - if($_GET['mobile']) + if($_GET['mobile']) { $pconfig['mobile']=true; + $pconfig['mode'] = "aggressive"; + } } if (isset($_GET['dup']) && is_numericint($_GET['dup'])) |