From 8da8f2f87a74006d637481ea4a62b2ff95893f10 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Sat, 17 Mar 2007 19:53:10 +0000
Subject: [PATCH] Allow multiple racoon listen ips so that racoon can live on
 two different wan carp ips (multiple isps)

---
 etc/inc/vpn.inc           | 7 ++++++-
 usr/local/pkg/sasyncd.xml | 4 +++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index f769f08418..7c59d47c99 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -270,10 +270,15 @@ function vpn_ipsec_configure($ipchg = false) {
 
 				}
 				$interface_ip = $sasyncd['ip'];
+				$interface_ips = split("\n", $interface_ip);
 				if($interface_ip <> "") {
+					foreach($interface_ips as $intip) {
+						if($intip) 
+							$racoon_ips .= "isakmp {$intip} [500];\n";
+					}
 					$racoonconf .= <<<EOD
 listen {
-	isakmp {$interface_ip} [500];
+	{$racoon_ips}
 	{$natt}
 }
 
diff --git a/usr/local/pkg/sasyncd.xml b/usr/local/pkg/sasyncd.xml
index 94d3fe44eb..61906d3ee7 100644
--- a/usr/local/pkg/sasyncd.xml
+++ b/usr/local/pkg/sasyncd.xml
@@ -54,7 +54,9 @@
 			<fielddescr>Failover IP</fielddescr>
 			<fieldname>ip</fieldname>
 			<description>Enter the IP address you would like to use for failover.  HINT:  You normally want to use a public CARP ip.</description>
-			<type>input</type>
+			<type>textarea</type>
+			<rows>3</rows>
+			<cols>20</cols><type>input</type>
 		</field>
 	</fields>
 	<custom_add_php_command>