pfSense

Jim P wrote:

CARP VIPs in the list for use by IPsec and OpenVPN are shown with the interface name (e.g. VIP22) instead of the CARP VIP description.

I guess you would like to have the same display as for firewall/nat rules ?
- for firewall nat rules, the display is "carpip (description)"
- actually for IPSec and OVPN, the display is "VIPxx (carpip)"

This difference is probably because for firewall/nat rules, IP is stored in config.xml, but for IPSec and OpenVPN, the interface is stored.

Pierre

That may explain the difference in why it was coded that way but it's still not optimal for the user. I'd really prefer the firewall rule way "IP (descr)" for both IP alias and CARP VIPs.

Yes, I agree.

And it would be probably better to store the ip rather than the inferface in config.xml. At least for OVPN, since it could be directly mapped to the "local" directive. However, this will break all running configurations... I do not know if is a good idea since RC1 is coming. What do you think ?

It's not broken as is, let's not break it. Taking the VIPxx and getting the description is easy enough.