From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 20 Aug 2020 17:56:03 +0000 (+0000)
Subject: general-functions.pl: Do not check IPsec subnets for VTI/GRE connections
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=087e3023812fec5dc4d4d85724166e64c24ab4cc;p=people%2Fms%2Fipfire-2.x.git

general-functions.pl: Do not check IPsec subnets for VTI/GRE connections

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/cfgroot/general-functions.pl b/config/cfgroot/general-functions.pl
index 8ee5eaa5d5..5de4fb84bb 100644
--- a/config/cfgroot/general-functions.pl
+++ b/config/cfgroot/general-functions.pl
@@ -529,7 +529,7 @@ sub checksubnets
 	if($ownnet ne 'ipsec'){
 		&General::readhasharray("${General::swroot}/vpn/config", \%ipsecconf);
 		foreach my $key (keys %ipsecconf){
-			if ($ipsecconf{$key}[11] ne ''){
+			if ($ipsecconf{$key}[11] ne '' && $ipsecconf{$key}[36] eq ""){
 				foreach my $ipsecsubitem (split(/\|/, $ipsecconf{$key}[11])) {
 					my ($ipsecip,$ipsecsub) = split (/\//, $ipsecconf{$key}[11]);
 					$ipsecsub=&iporsubtodec($ipsecsub);