make the IPsec bypass LAN from LAN subnet to LAN subnet rather than from

LAN subnet to LAN IP. Same end result except it'll work for VIPs on same
interface now.
This commit is contained in:
Chris Buechler 2015-07-22 15:08:58 -05:00
parent df4de32d34
commit 699e20745b

View File

@ -727,7 +727,7 @@ EOD;
$ipsecconf .= <<<EOD
conn bypasslan
leftsubnet = {$lanip}/32
leftsubnet = {$lansa}/{$lansn}
rightsubnet = {$lansa}/{$lansn}
authby = never
type = passthrough