From 9b2e9133f8726caf83d76f8f6836742880cd617b Mon Sep 17 00:00:00 2001 From: jim-p Date: Thu, 6 May 2010 16:33:08 -0400 Subject: Do not specify subnet in sainfo if we are dealing with a mobile PSK-only tunnel. Ticket #108 --- etc/inc/vpn.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc') diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index daaf82c..a2e3d1e 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -618,7 +618,7 @@ EOD; $localid_type = $ph2ent['localid']['type']; $localid_data = ipsec_idinfo_to_cidr($ph2ent['localid']); - if ($localid_type == "none") + if (($localid_type == "none") || ($ph1ent['authentication_method'] == "pre_shared_key") && isset($ph1ent['mobile'])) $localid_spec = " "; else if ($localid_type != "address") { $localid_type = "subnet"; -- cgit v1.1