From 8f96ff81edc491e179385896fa30d5f3341ada5f Mon Sep 17 00:00:00 2001
From: Max Weller <maximilian.weller@stud.tu-darmstadt.de>
Date: Fri, 1 Feb 2019 18:40:23 +0100
Subject: [PATCH] IPSec: allow same Local Subnet if used in different Phase1
 (#3121)

---
 src/www/vpn_ipsec_phase2.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/www/vpn_ipsec_phase2.php b/src/www/vpn_ipsec_phase2.php
index 12e6991eb..c9869b65a 100644
--- a/src/www/vpn_ipsec_phase2.php
+++ b/src/www/vpn_ipsec_phase2.php
@@ -274,7 +274,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'GET') {
     if (isset($pconfig['mobile'])) {
         /* User is adding phase 2 for mobile phase1 */
         foreach ($config['ipsec']['phase2'] as $key => $name) {
-            if (isset($name['mobile']) && $name['uniqid'] != $pconfig['uniqid']) {
+            if (isset($name['mobile']) && $pconfig['ikeid'] == $name['ikeid'] && $name['uniqid'] != $pconfig['uniqid']) {
                 /* check duplicate localids only for mobile clents */
                 $localid_data = ipsec_idinfo_to_cidr($name['localid'], false, $name['mode']);
                 $entered = array();