Project

General

Profile

« Previous | Next » 

Revision 699e2074

Added by Chris Buechler almost 10 years ago

make the IPsec bypass LAN from LAN subnet to LAN subnet rather than from
LAN subnet to LAN IP. Same end result except it'll work for VIPs on same
interface now.

View differences:

etc/inc/vpn.inc
727 727 
					$ipsecconf .= <<<EOD
728 728 

  		




  729
  729
  
    
conn bypasslan


  		




  730
  
  
    
	leftsubnet = {$lanip}/32


  		




  
  730
  
    
	leftsubnet = {$lansa}/{$lansn}


  		




  731
  731
  
    
	rightsubnet = {$lansa}/{$lansn}


  		




  732
  732
  
    
	authby = never


  		




  733
  733
  
    
	type = passthrough


  		












Also available in:  Unified diff