From 087e3023812fec5dc4d4d85724166e64c24ab4cc Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Thu, 20 Aug 2020 17:56:03 +0000 Subject: [PATCH] general-functions.pl: Do not check IPsec subnets for VTI/GRE connections Signed-off-by: Michael Tremer --- config/cfgroot/general-functions.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/cfgroot/general-functions.pl b/config/cfgroot/general-functions.pl index 8ee5eaa5d5..5de4fb84bb 100644 --- a/config/cfgroot/general-functions.pl +++ b/config/cfgroot/general-functions.pl @@ -529,7 +529,7 @@ sub checksubnets if($ownnet ne 'ipsec'){ &General::readhasharray("${General::swroot}/vpn/config", \%ipsecconf); foreach my $key (keys %ipsecconf){ - if ($ipsecconf{$key}[11] ne ''){ + if ($ipsecconf{$key}[11] ne '' && $ipsecconf{$key}[36] eq ""){ foreach my $ipsecsubitem (split(/\|/, $ipsecconf{$key}[11])) { my ($ipsecip,$ipsecsub) = split (/\//, $ipsecconf{$key}[11]); $ipsecsub=&iporsubtodec($ipsecsub); -- 2.39.2