From 6d7e7c0c5cd8ec613235cd9f2a01f60bb7c32c79 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ermal=20LU=C3=87I?= <eri@pfsense.org>
Date: Fri, 24 Apr 2015 17:33:18 +0200
Subject: [PATCH] Provide a description for the dirty hack to not come back
 scratching.... on it

---
 etc/inc/vpn.inc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index c4b86703a0..0138c03cd4 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -1080,6 +1080,11 @@ EOD;
 						if (!empty($reqids[$idx]))
 							$ipsecfin .= "\treqid = " . $reqids[$idx] . "\n";
 						$ipsecfin .= $ipsecconnect;
+						/*
+						 * This is for making strongswan consider the various similar
+						 * connection profiles as different and forces it to create
+						 * separate IKE SAs for each subnet from P2
+						 */
 						$ipsecfin .= "\tkeyingtries = {$keyingtries}\n";
 						$keyingtries++;
 						$ipsecfin .= "\trightsubnet = {$rsubnet}\n";