diff --git a/src/etc/inc/plugins.inc.d/ipsec.inc b/src/etc/inc/plugins.inc.d/ipsec.inc index 80b5b5035..a91d9dd1a 100644 --- a/src/etc/inc/plugins.inc.d/ipsec.inc +++ b/src/etc/inc/plugins.inc.d/ipsec.inc @@ -1451,9 +1451,11 @@ EOD; for ($idx = 0; $idx < count($leftsubnet_spec); ++$idx) { if (count($leftsubnet_spec) == 1) { $tmpconf = str_replace('<>', "{$ph1ent['ikeid']}", $connEntry); + $tmpconf .= sprintf("\treqid = %d\n", (int)$ph1ent['ikeid'] * 1000 ); } else { // suffix connection with sequence number $tmpconf = str_replace('<>', sprintf('%s-%03d', $ph1ent['ikeid'], $idx), $connEntry); + $tmpconf .= sprintf("\treqid = %d\n", (int)$ph1ent['ikeid'] * 1000 + $idx ); } $tmpconf .= "\trightsubnet = " . $rightsubnet_spec[$idx]. "\n"; $tmpconf .= "\tleftsubnet = " . $leftsubnet_spec[$idx] . "\n"; @@ -1477,6 +1479,7 @@ EOD; // name from the first configured tunnel ($idx == 0): $conn_suffix = $idx ? sprintf('-%03d', $idx) : ''; $tmpconf[] = "conn con{$ph1ent['ikeid']}{$conn_suffix}"; + $tmpconf[] = sprintf("\treqid = %d\n", (int)$ph1ent['ikeid'] * 1000 + $idx ); if (!empty($rightsubnet_spec[$idx])) { $tmpconf[] = "\trightsubnet = {$rightsubnet_spec[$idx]}"; } @@ -1495,6 +1498,7 @@ EOD; } } else { $tmpconf = str_replace('<>', "{$ph1ent['ikeid']}", $connEntry); + $tmpconf .= sprintf("\treqid = %d\n", (int)$ph1ent['ikeid'] * 1000 ); if (!empty($rightsubnet_spec)) { $tmpconf .= "\trightsubnet = " . join(',', array_unique($rightsubnet_spec)) . "\n"; }