From ab61fa92c2e63813cd35e275d67cbb6d398891df Mon Sep 17 00:00:00 2001 From: Kim Hagen Date: Wed, 14 Jun 2017 21:25:35 +0200 Subject: send right left subnet to support nat --- etc/opennhrp-script | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/opennhrp-script b/etc/opennhrp-script index e3902e7..ab27a30 100755 --- a/etc/opennhrp-script +++ b/etc/opennhrp-script @@ -47,7 +47,7 @@ peer-up) fi if grep "${NHRP_SRCADDR}" "${_nhrp_ipsec}"; then ipsec whack --delete --name $_connection > /dev/null 2>&1 - ipsec whack --name $_connection --host $NHRP_SRCNBMA --clientprotoport gre --to --host $NHRP_DESTNBMA --clientprotoport gre --psk $_pfs --encrypt $_ipsec_args || exit 1 + ipsec whack --name $_connection --host $NHRP_SRCNBMA --clientprotoport gre --to --host $NHRP_DESTNBMA --client $NHRP_SRCNBMA/32 --clientprotoport gre --psk $_pfs --encrypt $_ipsec_args || exit 1 ipsec up $_connection || exit 1 fi fi -- cgit v1.2.3