From 7253e407240d00d6acb3fee6e8028618a92465d9 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Tue, 21 Jun 2016 15:24:43 -0500
Subject: Only omit aggressive line from ipsec.conf where IKEv2. Ticket #6513

---
 src/etc/inc/vpn.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src')

diff --git a/src/etc/inc/vpn.inc b/src/etc/inc/vpn.inc
index 1abf2fd..cdf8aca 100644
--- a/src/etc/inc/vpn.inc
+++ b/src/etc/inc/vpn.inc
@@ -1394,7 +1394,7 @@ EOD;
 			if (!empty($peerid_spec)) {
 				$ipsecconnect .= "\trightid = {$peerid_spec}\n";
 			}
-			if ($keyexchange == 'ikev1') {
+			if ($keyexchange != 'ikev2') {
 				$ipsecconnect .= "\taggressive = {$aggressive}\n";
 			}
 
-- 
cgit v1.1