pfSense

Couple issues with diag_ipsec.php.

1) always shows NAT-T - shows NAT-T for seemingly all IPsec connections. A basic site to site config with NAT-T disabled is the easiest way to replicate, you'll end up with something like:

1.2.3.4:500 NAT-T

2) the Overview tab doesn't show tunnels that are configured, but don't have SAs. Every non-disabled IPsec tunnel needs to show up on diag_ipsec.php, as they always have.

3) the local and remote networks fields display something like:

10.0.0.0/24|/0

The |/0 needs to be trimmed off there to avoid confusing people.