From e8a468e90f6dfe0b6045baf1bf8582e690b98bb8 Mon Sep 17 00:00:00 2001 From: Kim Hagen Date: Thu, 15 Jun 2017 13:28:11 +0200 Subject: change the whack command to use NHRP_DESTNBMA for client/right subnet --- etc/opennhrp-script | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc/opennhrp-script') diff --git a/etc/opennhrp-script b/etc/opennhrp-script index ab27a30..0af3e42 100755 --- a/etc/opennhrp-script +++ b/etc/opennhrp-script @@ -47,7 +47,7 @@ peer-up) fi if grep "${NHRP_SRCADDR}" "${_nhrp_ipsec}"; then ipsec whack --delete --name $_connection > /dev/null 2>&1 - ipsec whack --name $_connection --host $NHRP_SRCNBMA --clientprotoport gre --to --host $NHRP_DESTNBMA --client $NHRP_SRCNBMA/32 --clientprotoport gre --psk $_pfs --encrypt $_ipsec_args || exit 1 + ipsec whack --name $_connection --host $NHRP_SRCNBMA --clientprotoport gre --to --host $NHRP_DESTNBMA --client $NHRP_DESTNBMA/32 --clientprotoport gre --psk $_pfs --encrypt $_ipsec_args || exit 1 ipsec up $_connection || exit 1 fi fi -- cgit v1.2.3