From 80be089f050f0f27398a2f35ff5d48f43c7cfa3f Mon Sep 17 00:00:00 2001 From: Ermal Date: Fri, 7 Nov 2014 19:28:56 +0100 Subject: [PATCH] Fixes #3995. Do not set rightsourceip on site-to-site VPNs but only on mobile users ones otherwise nothing works. --- etc/inc/vpn.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 3cb6deb9c..24fe51195 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -586,7 +586,7 @@ EOD; $ikelifeline = "ikelifetime = {$ph1ent['lifetime']}s"; $rightsourceip = NULL; - if (!empty($a_client['pool_address'])) + if (isset($ph1ent['mobile']) && !empty($a_client['pool_address'])) $rightsourceip = "\trightsourceip = {$a_client['pool_address']}/{$a_client['pool_netbits']}\n"; $authentication = "";