summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKim Hagen <kim.sidney@gmail.com>2017-06-14 21:25:35 +0200
committerKim Hagen <kim.sidney@gmail.com>2017-08-28 08:54:26 +0200
commitab61fa92c2e63813cd35e275d67cbb6d398891df (patch)
tree5844a7408a5b9a64799c66a980316e4f36686da5
parentdb513fb1c575e528cb897c71c55ad8345e466164 (diff)
downloadvyos-opennhrp-ab61fa92c2e63813cd35e275d67cbb6d398891df.tar.gz
vyos-opennhrp-ab61fa92c2e63813cd35e275d67cbb6d398891df.zip
send right left subnet to support nat
-rwxr-xr-xetc/opennhrp-script2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/opennhrp-script b/etc/opennhrp-script
index e3902e7..ab27a30 100755
--- a/etc/opennhrp-script
+++ b/etc/opennhrp-script
@@ -47,7 +47,7 @@ peer-up)
fi
if grep "${NHRP_SRCADDR}" "${_nhrp_ipsec}"; then
ipsec whack --delete --name $_connection > /dev/null 2>&1
- ipsec whack --name $_connection --host $NHRP_SRCNBMA --clientprotoport gre --to --host $NHRP_DESTNBMA --clientprotoport gre --psk $_pfs --encrypt $_ipsec_args || exit 1
+ ipsec whack --name $_connection --host $NHRP_SRCNBMA --clientprotoport gre --to --host $NHRP_DESTNBMA --client $NHRP_SRCNBMA/32 --clientprotoport gre --psk $_pfs --encrypt $_ipsec_args || exit 1
ipsec up $_connection || exit 1
fi
fi