From 8b8bbc3bc73c78b536a7bd3e83dcf22e490c1678 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Wed, 20 Mar 2019 17:07:38 +0100
Subject: [PATCH] IPsec, bug in https://github.com/opnsense/core/issues/2332 
 "installpolicy" should be set by default

---
 src/www/vpn_ipsec_phase1.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/www/vpn_ipsec_phase1.php b/src/www/vpn_ipsec_phase1.php
index 33305de19..391efcf87 100644
--- a/src/www/vpn_ipsec_phase1.php
+++ b/src/www/vpn_ipsec_phase1.php
@@ -135,6 +135,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'GET') {
         $pconfig['dhgroup'] = array('14');
         $pconfig['lifetime'] = "28800";
         $pconfig['nat_traversal'] = "on";
+        $pconfig['installpolicy'] = true;
         $pconfig['authservers'] = array();
 
         /* mobile client */