From 58010a4ccd52ebde70b4bb036c812450a70de8f8 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Tue, 9 Aug 2016 19:50:26 +0200
Subject: [PATCH] (ipsec) change default Negotiation Mode, closes
 https://github.com/opnsense/core/issues/1128

---
 src/www/vpn_ipsec_phase1.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/www/vpn_ipsec_phase1.php b/src/www/vpn_ipsec_phase1.php
index 38e7c9499..4daba82f5 100644
--- a/src/www/vpn_ipsec_phase1.php
+++ b/src/www/vpn_ipsec_phase1.php
@@ -123,7 +123,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'GET') {
         if (isset($config['interfaces']['lan'])) {
             $pconfig['localnet'] = "lan";
         }
-        $pconfig['mode'] = "aggressive";
+        $pconfig['mode'] = "main";
         $pconfig['protocol'] = "inet";
         $pconfig['myid_type'] = "myaddress";
         $pconfig['peerid_type'] = "peeraddress";