pfSense

Eventually it would be nice to allow using aliases on the IPsec phase 2 definition screen for local and remote networks. It would be an easy and clean way to avoid having to manually make many entries that are identical except for the subnet definitions.

The GUI code would just need to add the alias autcomplete mechanism to the "Address" field, perhaps either by sharing the "Network" choice in type, so it would be "Network or alias", or use a choice for just "Alias". We might need to restrict it to host and network alias types. The backend would just need to generate the appropriate pairings of phase 2 declarations in racoon.conf, matching each entry in the local alias/network to an entry in the remote alias/network.