Révision 76fa9adb
Ajouté par Ermal il y a plus de 9 ans
etc/inc/vpn.inc | ||
---|---|---|
586 | 586 |
if ($ph1ent['lifetime']) |
587 | 587 |
$ikelifeline = "ikelifetime = {$ph1ent['lifetime']}s"; |
588 | 588 |
|
589 |
$authentication = ""; |
|
590 | 589 |
$rightsourceip = NULL; |
590 |
if (!empty($a_client['pool_address'])) |
|
591 |
$rightsourceip = "\trightsourceip = {$a_client['pool_address']}/{$a_client['pool_netbits']}\n"; |
|
592 |
|
|
593 |
$authentication = ""; |
|
591 | 594 |
switch ($ph1ent['authentication_method']) { |
592 | 595 |
case 'xauth_rsa_server': |
593 | 596 |
$authentication = "leftauth = pubkey\n\trightauth = pubkey"; |
... | ... | |
596 | 599 |
case 'xauth_psk_server': |
597 | 600 |
$authentication = "leftauth = psk\n\trightauth = psk"; |
598 | 601 |
$authentication .= "\n\trightauth2 = xauth-generic"; |
599 |
if (!empty($a_client['pool_address'])) |
|
600 |
$rightsourceip = "\trightsourceip = {$a_client['pool_address']}/{$a_client['pool_netbits']}\n"; |
|
601 | 602 |
break; |
602 | 603 |
case 'pre_shared_key': |
603 | 604 |
$authentication = "leftauth = psk\n\trightauth = psk"; |
Formats disponibles : Unified diff
Blah unconditionally set rightsourceip per https://forum.pfsense.org/index.php?topic=80300.0 Until pools can be supported properly.