From 0b73e6f2466194cfa6cc2b72180db84fba3f81fa Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Fri, 7 Dec 2012 15:36:03 -0500
Subject: [PATCH] Don't allow transport mode to be selected for mobile clients.
 Fixes #2713

---
 usr/local/www/vpn_ipsec_phase2.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/usr/local/www/vpn_ipsec_phase2.php b/usr/local/www/vpn_ipsec_phase2.php
index c1f740370d..a8c859ea56 100644
--- a/usr/local/www/vpn_ipsec_phase2.php
+++ b/usr/local/www/vpn_ipsec_phase2.php
@@ -176,6 +176,8 @@ if ($_POST) {
 	}
 	/* Validate enabled phase2's are not duplicates */
 	if (isset($pconfig['mobile'])){
+		if (substr($pconfig['mode'], 0, 6) != "tunnel")
+			$input_errors[] = gettext("Mobile IPsec only supports Tunnel mode.");
 		/* User is adding phase 2 for mobile phase1 */
 		foreach($a_phase2 as $key => $name){
 			if (isset($name['mobile'])){