diff options
author | Jeff Leung <jleung@v10networks.ca> | 2015-02-13 19:25:54 +0000 |
---|---|---|
committer | Jeff Leung <jleung@v10networks.ca> | 2015-02-13 19:25:54 +0000 |
commit | 7d94dd6e4d32eef9cea4a4f7270b0ea0d895dd12 (patch) | |
tree | 4be86fb2a35d9ba438e225bbd7f8bd00d7bad22e /scripts/vpn-config.pl | |
parent | c6864b6ca7c18ab4ec248186e1310e46b7a97676 (diff) | |
download | vyatta-cfg-vpn-7d94dd6e4d32eef9cea4a4f7270b0ea0d895dd12.tar.gz vyatta-cfg-vpn-7d94dd6e4d32eef9cea4a4f7270b0ea0d895dd12.zip |
Remove the automatic generation of implicit connections
Since charon's existence, generating them is redundant and as a matter of fact
causes issues with establishing multiple IKEv1 IPSec tunnels to the same peer.
Diffstat (limited to 'scripts/vpn-config.pl')
-rwxr-xr-x | scripts/vpn-config.pl | 9 |
1 files changed, 0 insertions, 9 deletions
diff --git a/scripts/vpn-config.pl b/scripts/vpn-config.pl index 0d5a63b..dd5da34 100755 --- a/scripts/vpn-config.pl +++ b/scripts/vpn-config.pl @@ -312,15 +312,6 @@ if ($vcVPN->exists('ipsec')) { } # - # Disable implicit connections - # - foreach my $conn (qw/clear clear-or-private private-or-clear private block packetdefault/){ - $genout .= "\n"; - $genout .= "conn $conn\n"; - $genout .= "\tauto=ignore\n"; - } - - # # Default keyengine is ikev1 # $genout .= "\n"; |