From f8c4bfc52a867d2f9db3fbc83ed208f02408ef4a Mon Sep 17 00:00:00 2001 From: Renato Botelho do Couto Date: Tue, 3 Sep 2019 15:43:16 -0300 Subject: [PATCH] IPSec: Just destroy interface if it exists and it's not booting Based on PR: https://github.com/pfsense/pfsense/pull/4076 --- src/etc/inc/interfaces.inc | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/src/etc/inc/interfaces.inc b/src/etc/inc/interfaces.inc index ae35869155..216a387a2c 100644 --- a/src/etc/inc/interfaces.inc +++ b/src/etc/inc/interfaces.inc @@ -1427,12 +1427,10 @@ function interface_ipsec_vti_configure($ph1ent) { continue; } // Create IPsec interface - if (platform_booting() || !does_interface_exist($ipsecif)) { + if (!platform_booting() && does_interface_exist($ipsecif)) { mwexec("/sbin/ifconfig " . escapeshellarg($ipsecif) . " destroy", false); - mwexec("/sbin/ifconfig " . escapeshellarg($ipsecif) . " create reqid " . escapeshellarg($ipsecifnum), false); - } else { - mwexec("/sbin/ifconfig " . escapeshellarg($ipsecif) . " create reqid " . escapeshellarg($ipsecifnum), false); } + mwexec("/sbin/ifconfig " . escapeshellarg($ipsecif) . " create reqid " . escapeshellarg($ipsecifnum), false); /* Apply the outer tunnel addresses to the interface */ $inet = is_ipaddrv6($left_spec) ? "inet6" : "inet";