Révision 76fa9adb
Ajouté par Ermal il y a plus de 9 ans
| etc/inc/vpn.inc | ||
|---|---|---|
| 586 | 586 |
if ($ph1ent['lifetime']) |
| 587 | 587 |
$ikelifeline = "ikelifetime = {$ph1ent['lifetime']}s";
|
| 588 | 588 |
|
| 589 |
$authentication = ""; |
|
| 590 | 589 |
$rightsourceip = NULL; |
| 590 |
if (!empty($a_client['pool_address'])) |
|
| 591 |
$rightsourceip = "\trightsourceip = {$a_client['pool_address']}/{$a_client['pool_netbits']}\n";
|
|
| 592 |
|
|
| 593 |
$authentication = ""; |
|
| 591 | 594 |
switch ($ph1ent['authentication_method']) {
|
| 592 | 595 |
case 'xauth_rsa_server': |
| 593 | 596 |
$authentication = "leftauth = pubkey\n\trightauth = pubkey"; |
| ... | ... | |
| 596 | 599 |
case 'xauth_psk_server': |
| 597 | 600 |
$authentication = "leftauth = psk\n\trightauth = psk"; |
| 598 | 601 |
$authentication .= "\n\trightauth2 = xauth-generic"; |
| 599 |
if (!empty($a_client['pool_address'])) |
|
| 600 |
$rightsourceip = "\trightsourceip = {$a_client['pool_address']}/{$a_client['pool_netbits']}\n";
|
|
| 601 | 602 |
break; |
| 602 | 603 |
case 'pre_shared_key': |
| 603 | 604 |
$authentication = "leftauth = psk\n\trightauth = psk"; |
Formats disponibles : Unified diff
Blah unconditionally set rightsourceip per https://forum.pfsense.org/index.php?topic=80300.0 Until pools can be supported properly.