diff options
| author | Martin Willi <martin@revosec.ch> | 2013-09-04 10:43:35 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2013-09-04 10:43:35 +0200 |
| commit | 60fcbb8ba80fc5b5c4cfa71fb293bf497a533cbc (patch) | |
| tree | ce2664c18c38e86e12320d5b38d0571ccc82e8bd /src/charon-cmd/cmd/cmd_connection.c | |
| parent | f7cb6eaaa88d8f43e7d65fbca5f81d9c117aa959 (diff) | |
| parent | 6301ec0ac522b6b42cebc7e987cb53764be1abad (diff) | |
| download | strongswan-60fcbb8ba80fc5b5c4cfa71fb293bf497a533cbc.tar.bz2 strongswan-60fcbb8ba80fc5b5c4cfa71fb293bf497a533cbc.tar.xz | |
Merge branch 'ike-address-ranges'
Adds support for multiple subnets and address ranges in left/right ipsec.conf
options. As responder the connection is acceptable if the address is in one of
the ranges/subnets. To initiate connections, at least one single IP or hostname
is required for the peer address.
Diffstat (limited to 'src/charon-cmd/cmd/cmd_connection.c')
| -rw-r--r-- | src/charon-cmd/cmd/cmd_connection.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/charon-cmd/cmd/cmd_connection.c b/src/charon-cmd/cmd/cmd_connection.c index a697da804..180e8da98 100644 --- a/src/charon-cmd/cmd/cmd_connection.c +++ b/src/charon-cmd/cmd/cmd_connection.c @@ -163,8 +163,8 @@ static peer_cfg_t* create_peer_cfg(private_cmd_connection_t *this) { remote_port = IKEV2_NATT_PORT; } - ike_cfg = ike_cfg_create(version, TRUE, FALSE, "0.0.0.0", FALSE, local_port, - this->host, FALSE, remote_port, FRAGMENTATION_NO, 0); + ike_cfg = ike_cfg_create(version, TRUE, FALSE, "0.0.0.0", local_port, + this->host, remote_port, FRAGMENTATION_NO, 0); ike_cfg->add_proposal(ike_cfg, proposal_create_default(PROTO_IKE)); peer_cfg = peer_cfg_create("cmd", ike_cfg, CERT_SEND_IF_ASKED, UNIQUE_REPLACE, 1, /* keyingtries */ |