From 16c0272244e10b3b0c847eb6efc4bf611b4e4667 Mon Sep 17 00:00:00 2001
From: Ermal <eri@pfsense.org>
Date: Fri, 12 Sep 2014 19:34:35 +0200
Subject: Actually use the new toggles

---
 etc/inc/vpn.inc | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index 804a27c..cd07f34 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -615,6 +615,15 @@ EOD;
 
 				$left_spec = $ep;
 
+				if (isset($ph1ent['reauth_enable']))
+					$reauth = "reauth = yes";
+				else
+					$reauth = "reauth = no";
+				if (isset($ph1ent['rekey_enable']))
+					$rekey = "rekey = yes";
+				else
+					$rekey = "rekey = no";
+
 				$ipseclifetime = 0;
 				$rightsubnet_spec = array();
 				$leftsubnet_spec = array();
@@ -775,8 +784,8 @@ conn con{$ph1ent['ikeid']}
 	aggressive = {$aggressive}
 	fragmentation = yes
 	keyexchange = {$keyexchange}
-	reauth = yes
-	rekey = yes
+	{$reauth}
+	{$rekey}
 	reqid = {$ikeid}
 	installpolicy = yes
 	{$tunneltype}
-- 
cgit v1.1