From 32a55ec06a041a74fa140ea811470d8743b6252e Mon Sep 17 00:00:00 2001
From: hwdsl2 <hwdsl2@users.noreply.github.com>
Date: Fri, 25 Feb 2022 21:17:09 -0600
Subject: [PATCH] Update IKEv2 script

- Make IKEv2 client address pool customizable using VPN_XAUTH_POOL,
  similar to vpnsetup.sh. This is for advanced users only.
---
 extras/ikev2setup.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/extras/ikev2setup.sh b/extras/ikev2setup.sh
index e1f1829..43e7c37 100755
--- a/extras/ikev2setup.sh
+++ b/extras/ikev2setup.sh
@@ -1032,6 +1032,7 @@ ANSWERS
 
 add_ikev2_connection() {
   bigecho2 "Adding a new IKEv2 connection..."
+  XAUTH_POOL=${VPN_XAUTH_POOL:-'192.168.43.10-192.168.43.250'}
   if ! grep -qs '^include /etc/ipsec\.d/\*\.conf$' "$IPSEC_CONF"; then
     echo >> "$IPSEC_CONF"
     echo 'include /etc/ipsec.d/*.conf' >> "$IPSEC_CONF"
@@ -1046,7 +1047,7 @@ conn ikev2-cp
   leftrsasigkey=%cert
   right=%any
   rightid=%fromcert
-  rightaddresspool=192.168.43.10-192.168.43.250
+  rightaddresspool=$XAUTH_POOL
   rightca=%same
   rightrsasigkey=%cert
   narrowing=yes