diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index a26c9cea5e..73d46d7833 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1411,6 +1411,11 @@ EOD; $lan_subnet = $config['interfaces']['lan']['subnet']; $wan_ip = $config['interfaces']['wan']['ipaddr']; $internal_subnet = gen_subnet($lan_ip, $lan_subnet) . "/" . $config['interfaces']['lan']['subnet']; + /* Is IP Compression enabled? */ + if(isset($config['ipsec']['ipcomp']) + exec("/sbin/sysctl net.inet.ipcomp.ipcomp_enable=1"); + else + exec("/sbin/sysctl net.inet.ipcomp.ipcomp_enable=0"); if(is_array($config['ipsec']['tunnel'])) { foreach ($config['ipsec']['tunnel'] as $tunnel) { $remote_gateway = $tunnel['remote-gateway']; diff --git a/usr/local/www/vpn_ipsec.php b/usr/local/www/vpn_ipsec.php index f34c897af6..3863293e39 100755 --- a/usr/local/www/vpn_ipsec.php +++ b/usr/local/www/vpn_ipsec.php @@ -8,7 +8,7 @@ originally part of m0n0wall (http://m0n0.ch/wall) Copyright (C) 2003-2004 Manuel Kasper . All rights reserved. - + Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: @@ -41,6 +41,7 @@ $wancfg = &$config['interfaces']['wan']; $pconfig['enable'] = isset($config['ipsec']['enable']); $pconfig['preferredoldsa'] = isset($config['ipsec']['preferredoldsa']); +$pconfig['ipcomp'] = isset($config['ipsec']['ipcomp']); if ($_POST) { @@ -58,6 +59,7 @@ if ($_POST) { $config['ipsec']['enable'] = $_POST['enable'] ? true : false; $config['ipsec']['preferredoldsa'] = $_POST['preferredoldsa'] ? true : false; + $config['ipsec']['ipcomp'] = $_POST['ipcomp'] ? true : false; write_config(); @@ -124,6 +126,11 @@ if ($_GET['act'] == "del") { Prefer newer SA's.

+

+ > + Enable VPN IP Compression
+

+