Revision afd0c1f2
Added by Ermal Luçi over 10 years ago
| etc/inc/vpn.inc | ||
|---|---|---|
| 1076 | 1076 |
$ipsecfin = ''; |
| 1077 | 1077 |
foreach ($rightsubnet_spec as $idx => $rsubnet) {
|
| 1078 | 1078 |
$ipsecfin .= "\nconn con{$ph1ent['ikeid']}00{$idx}\n";
|
| 1079 |
if (!empty($reqids[$idx])) |
|
| 1080 |
$ipsecfin .= "\treqid = " . $reqids[$idx] . "\n"; |
|
| 1079 |
//if (!empty($reqids[$idx]))
|
|
| 1080 |
// $ipsecfin .= "\treqid = " . $reqids[$idx] . "\n";
|
|
| 1081 | 1081 |
$ipsecfin .= $ipsecconnect; |
| 1082 | 1082 |
$ipsecfin .= "\trightsubnet = {$rsubnet}\n";
|
| 1083 | 1083 |
$ipsecfin .= "\tleftsubnet = " . $leftsubnet_spec[$idx] . "\n"; |
| ... | ... | |
| 1086 | 1086 |
log_error("No phase2 specifications for tunnel with REQID = {$ikeid}");
|
| 1087 | 1087 |
} else {
|
| 1088 | 1088 |
$ipsecfin = "\nconn con{$ph1ent['ikeid']}\n";
|
| 1089 |
if (!empty($reqids[$idx])) |
|
| 1090 |
$ipsecfin .= "\treqid = " . $reqids[0] . "\n"; |
|
| 1089 |
//if (!empty($reqids[$idx]))
|
|
| 1090 |
// $ipsecfin .= "\treqid = " . $reqids[0] . "\n";
|
|
| 1091 | 1091 |
$ipsecfin .= $ipsecconnect; |
| 1092 | 1092 |
if (!isset($ph1ent['mobile']) && !empty($rightsubnet_spec)) {
|
| 1093 | 1093 |
$tempsubnets = array(); |
Also available in: Unified diff
Seems strongswan 5.3.0 has improved the situation on putting multiple phase2 on IKEv1 behaviour and it behaves even better with reqid not defined in config.