lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-15 00:54:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

(legacy) ipsec, obey force nat travesal

Browse Source
This commit is contained in:
Ad Schellevis 2015-11-04 09:54:29 +00:00
parent 38d70ed73e
commit ca4cf5538b
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/etc/inc/vpn.inc
View File

@ -621,6 +621,11 @@ EOD;
$rekey = "rekey = yes";
}
$forceencaps = 'forceencaps = no' ;
if (!empty($ph1ent['nat_traversal']) && $ph1ent['nat_traversal'] == 'force') {
$forceencaps = 'forceencaps = yes';
}
$ipseclifetime = 0;
$rightsubnet_spec = array();
$leftsubnet_spec = array();
@ -773,6 +778,7 @@ conn con<<connectionId>>
keyexchange = {$keyexchange}
{$reauth}
{$rekey}
{$forceencaps}
reqid = {$ikeid}
installpolicy = yes
{$tunneltype}