@@ -615,21 +615,6 @@ function openvpn_reconfigure($mode, $settings, $device_only = false)
615
615
$ conf .= "up /usr/local/etc/inc/plugins.inc.d/openvpn/ovpn-linkup \n" ;
616
616
$ conf .= "down /usr/local/etc/inc/plugins.inc.d/openvpn/ovpn-linkdown \n" ;
617
617
618
- switch ($ settings ['mode ' ]) {
619
- case 'server_user ' :
620
- case 'server_tls_user ' :
621
- $ conf .= "client-disconnect \"/usr/local/etc/inc/plugins.inc.d/openvpn/attributes.sh {$ mode_id } \"\n" ;
622
- break ;
623
- case 'server_tls ' :
624
- case 'p2p_tls ' :
625
- // For non user auth types setup client specific overrides, user authenticated ones are commissioned
626
- // using the auth script in option auth-user-pass-verify
627
- $ conf .= "client-connect \"/usr/local/etc/inc/plugins.inc.d/openvpn/ovpn_setup_cso.php {$ mode_id }\"\n" ;
628
- break ;
629
- default :
630
- break ;
631
- }
632
-
633
618
if (!empty ($ iface_ip )) {
634
619
$ conf .= "local {$ iface_ip }\n" ;
635
620
}
@@ -644,6 +629,23 @@ function openvpn_reconfigure($mode, $settings, $device_only = false)
644
629
list ($ ipv6 , $ prefix ) = explode ('/ ' , $ settings ['tunnel_networkv6 ' ]);
645
630
$ mask = gen_subnet_mask ($ cidr );
646
631
632
+ // client connect and disconnect handling
633
+ switch ($ settings ['mode ' ]) {
634
+ case 'server_user ' :
635
+ case 'server_tls_user ' :
636
+ $ conf .= "client-disconnect \"/usr/local/etc/inc/plugins.inc.d/openvpn/attributes.sh {$ mode_id }\"\n" ;
637
+ break ;
638
+ case 'server_tls ' :
639
+ case 'p2p_tls ' :
640
+ // For non user auth types setup client specific overrides,
641
+ // user authenticated ones are commissioned using the auth
642
+ // script in option auth-user-pass-verify.
643
+ $ conf .= "client-connect \"/usr/local/etc/inc/plugins.inc.d/openvpn/ovpn_setup_cso.php {$ mode_id }\"\n" ;
644
+ break ;
645
+ default :
646
+ break ;
647
+ }
648
+
647
649
// configure tls modes
648
650
switch ($ settings ['mode ' ]) {
649
651
case 'p2p_tls ' :
0 commit comments