mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Ensure that mobile IPsec client addresses are added to vpn_networks. Fixes #7005

Browse Source
This commit is contained in:
jim-p 2016-12-12 12:55:30 -05:00
parent 7739e0ce77
commit d4ed1bd9a8
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/etc/inc/filter.inc
View File

@ -939,6 +939,17 @@ function filter_get_vpns_list() {
require_once("ipsec.inc");
}
if (ipsec_enabled()) {
/* Include mobile IPsec client subnet in the VPN network list.
See https://redmine.pfsense.org/issues/7005 */
if (is_array($config['ipsec']['client'])
&& isset($config['ipsec']['client']['enable'])
&& isset($config['ipsec']['client']['pool_address'])
&& isset($config['ipsec']['client']['pool_netbits'])) {
$client_subnet = "{$config['ipsec']['client']['pool_address']}/{$config['ipsec']['client']['pool_netbits']}";
if (is_subnet($client_subnet)) {
$vpns_arr[] = $client_subnet;
}
}
if (is_array($config['ipsec']['phase2'])) {
foreach ($config['ipsec']['phase2'] as $ph2ent) {
if ((!$ph2ent['mobile']) && ($ph2ent['mode'] != 'transport')) {