From 699e20745b22e5a9e663ebd5acdcd94e01d0a466 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Wed, 22 Jul 2015 15:08:58 -0500
Subject: [PATCH] make the IPsec bypass LAN from LAN subnet to LAN subnet
 rather than from LAN subnet to LAN IP. Same end result except it'll work for
 VIPs on same interface now.

---
 etc/inc/vpn.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index 688e9ca9bd..8e73927fd0 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -727,7 +727,7 @@ EOD;
 					$ipsecconf .= <<<EOD
 
 conn bypasslan
-	leftsubnet = {$lanip}/32
+	leftsubnet = {$lansa}/{$lansn}
 	rightsubnet = {$lansa}/{$lansn}
 	authby = never
 	type = passthrough