mirror of
https://github.com/pfsense/pfsense.git
synced 2025-10-26 11:38:35 +00:00
Honor a phase 1 proposal_check if one is set, otherwise use the default.
This commit is contained in:
parent
0ac1dafd6f
commit
29a3ac407f
@ -474,14 +474,14 @@ function vpn_ipsec_configure($ipchg = false)
|
||||
|
||||
$init = "on";
|
||||
$genp = "off";
|
||||
$pcheck = "claim";
|
||||
$pcheck = empty($ph1ent['proposal_check']) ? $ph1ent['proposal_check'] : $pcheck = "claim";
|
||||
$passive = "";
|
||||
if (isset($ph1ent['mobile'])) {
|
||||
$rgip = "anonymous";
|
||||
/* Mimic 1.2.3's behavior for pure-psk mobile tunnels */
|
||||
if ($ph1ent['authentication_method'] == "pre_shared_key") {
|
||||
$passive = "passive on;";
|
||||
$pcheck = "obey";
|
||||
$pcheck = empty($ph1ent['proposal_check']) ? $ph1ent['proposal_check'] : $pcheck = "obey";
|
||||
$genp = "on";
|
||||
} else {
|
||||
$init = "off";
|
||||
|
||||
Loading…
Reference in New Issue
Block a user