Revision b27fdc8b
Added by Ermal Luçi about 10 years ago
| etc/inc/vpn.inc | ||
|---|---|---|
| 1174 | 1174 |
$ipsecfin = ''; |
| 1175 | 1175 |
foreach ($rightsubnet_spec as $idx => $rsubnet) {
|
| 1176 | 1176 |
$ipsecfin .= "\nconn con{$ph1ent['ikeid']}00{$idx}\n";
|
| 1177 |
if (!empty($reqids[$idx])) {
|
|
| 1178 |
$ipsecfin .= "\treqid = " . $reqids[$idx] . "\n"; |
|
| 1177 |
//if (!empty($reqids[$idx])) {
|
|
| 1178 |
// $ipsecfin .= "\treqid = " . $reqids[$idx] . "\n";
|
|
| 1179 | 1179 |
} |
| 1180 | 1180 |
$ipsecfin .= $ipsecconnect; |
| 1181 | 1181 |
$ipsecfin .= "\trightsubnet = {$rsubnet}\n";
|
| ... | ... | |
| 1186 | 1186 |
} |
| 1187 | 1187 |
} else {
|
| 1188 | 1188 |
$ipsecfin = "\nconn con{$ph1ent['ikeid']}\n";
|
| 1189 |
if (!empty($reqids[$idx])) {
|
|
| 1190 |
$ipsecfin .= "\treqid = " . $reqids[0] . "\n"; |
|
| 1189 |
//if (!empty($reqids[$idx])) {
|
|
| 1190 |
// $ipsecfin .= "\treqid = " . $reqids[0] . "\n";
|
|
| 1191 | 1191 |
} |
| 1192 | 1192 |
$ipsecfin .= $ipsecconnect; |
| 1193 | 1193 |
if (!isset($ph1ent['mobile']) && !empty($rightsubnet_spec)) {
|
Also available in: Unified diff
Seems strongswan 5.3.0 has improved the situation on putting multiple phase2 on IKEv1 behaviour and it behaves even better with reqid not defined in config.