summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeff Leung <jleung@v10networks.ca>2015-02-13 19:25:54 +0000
committerJeff Leung <jleung@v10networks.ca>2015-02-13 19:25:54 +0000
commit7d94dd6e4d32eef9cea4a4f7270b0ea0d895dd12 (patch)
tree4be86fb2a35d9ba438e225bbd7f8bd00d7bad22e
parentc6864b6ca7c18ab4ec248186e1310e46b7a97676 (diff)
downloadvyatta-cfg-vpn-7d94dd6e4d32eef9cea4a4f7270b0ea0d895dd12.tar.gz
vyatta-cfg-vpn-7d94dd6e4d32eef9cea4a4f7270b0ea0d895dd12.zip
Remove the automatic generation of implicit connections
Since charon's existence, generating them is redundant and as a matter of fact causes issues with establishing multiple IKEv1 IPSec tunnels to the same peer.
-rwxr-xr-xscripts/vpn-config.pl9
1 files changed, 0 insertions, 9 deletions
diff --git a/scripts/vpn-config.pl b/scripts/vpn-config.pl
index 0d5a63b..dd5da34 100755
--- a/scripts/vpn-config.pl
+++ b/scripts/vpn-config.pl
@@ -312,15 +312,6 @@ if ($vcVPN->exists('ipsec')) {
}
#
- # Disable implicit connections
- #
- foreach my $conn (qw/clear clear-or-private private-or-clear private block packetdefault/){
- $genout .= "\n";
- $genout .= "conn $conn\n";
- $genout .= "\tauto=ignore\n";
- }
-
- #
# Default keyengine is ikev1
#
$genout .= "\n";