From 1a6857d0eb39e72f12c6f02763863f218ad07293 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20BONANNI?= <abonanni@teicee.com>
Date: Fri, 11 May 2018 14:44:00 +0200
Subject: [PATCH] Fix bug for rules 'permit ip any any' from LDAP/AD

---
 src/etc/inc/ipsec.attributes.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/etc/inc/ipsec.attributes.php b/src/etc/inc/ipsec.attributes.php
index 32debb3e0e..425ab583a5 100644
--- a/src/etc/inc/ipsec.attributes.php
+++ b/src/etc/inc/ipsec.attributes.php
@@ -117,10 +117,10 @@ function parse_cisco_acl($attribs) {
 					$isblock = false;
 				}
 			} else if (trim($rule[$index]) == "any") {
-				$tmprule .= "from any";
+				$tmprule .= "from any ";
 				$index++;
 			} else {
-				$tmprule .= "from {$rule[$index]}";
+				$tmprule .= "from {$rule[$index]} ";
 				$index++;
 				$netmask = cisco_to_cidr($rule[$index]);
 				$tmprule .= "/{$netmask} ";