pfSense

<packagegui>

	<name>openvpnclient</name>

	<title>OpenVPN: Client</title>

	<include_file>openvpn.inc</include_file>

	<delete_string>An OpenVPN client has been deleted.</delete_string>

	<addedit_string>An OpenVPN client has been created/modified.</addedit_string>

	<tabs>

		<tab>

			<text>Server</text>

			<url>/pkg.php?xml=openvpn.xml</url>

		</tab>

		<tab>

			<text>Client</text>

			<url>/pkg.php?xml=openvpn_cli.xml</url>

			<active/>

		</tab>

		</tab>

			<text>Certificate Authority</text>

			<url>/vpn_openvpn_certs.php</url>

        </tab>

        <tab>

			<text>Users</text>

			<url>/vpn_openvpn_users.php</url>

        </tab>

	<adddeleteeditpagefields>

		<columnitem>

			<fieldname>disable</fieldname>

			<fielddescr>Disabled</fielddescr>

			<type>checkbox</type>

		</columnitem>

		<columnitem>

			<fieldname>serveraddr</fieldname>

			<fielddescr>Server</fielddescr>

		</columnitem>

		<columnitem>

			<fieldname>protocol</fieldname>

			<fielddescr>Protocol</fielddescr>

		</columnitem>

		<columnitem>

			<fieldname>description</fieldname>

			<fielddescr>Description</fielddescr>

		</columnitem>

	</adddeleteeditpagefields>

	<fields>

		<field>

			<fieldname>disable</fieldname>

			<fielddescr>Disable this tunnel</fielddescr>

			<description>This allows you to disable this tunnel without removing it from the list.</description>

		</field>

		<field>

			<fieldname>protocol</fieldname>

			<fielddescr>Protocol</fielddescr>

			<description>The protocol to be used for the VPN.</description>

			<options>

				<option>

					<value>TCP</value>

					<name>TCP</name>

				</option>

					<value>UDP</value>

					<name>UDP</name>

				</option>

		<field>

			<fielddescr>Server address</fielddescr>

			<description>This is the address OpenVPN will try to connect to in order to establish the tunnel. Set it to the remote endpoint's address.</description>

			<required/>

		</field>

		<field>

			<fielddescr>Server port</fielddescr>

			<description>The port OpenVPN will use to connect to the server. Most people would want to use 1194 here.</description>

			<required/>

			<size>5</size>

		<field>

			<fielddescr>Interface IP</fielddescr>

			<description>This specifies the IPs to be assigned to the local interface. Expressed as a CIDR range. The first address in the range will be set to the remote endpoint of the interface, and the second will be assigned to the local endpoint. For TLS VPNs, the interface IPs are assigned by the server pool.</description>

		</field>

		<field>

			<fielddescr>Remote network</fielddescr>

			<description>This is the network that will be accessable from your endpoint. Expressed as a CIDR range. You may leave this blank if all you want is to access the VPN clients. You normally want this set to the remote endpoint's LAN network.</description>

		</field>

		<field>

			<fieldname>proxy_hostname</fieldname>

			<fielddescr>Proxy Host</fielddescr>

			<description>Proxy server hostname.</description>

			<fieldname>proxy_port</fieldname>

			<fielddescr>Proxy port</fielddescr>

			<description>The port OpenVPN will use on the proxy server.</description>

			<type>input</type>

			<default_value>3128</default_value>

			<size>5</size>

		</field>

			<fieldname>crypto</fieldname>

			<fielddescr>Cryptography</fielddescr>

			<description>Here you can choose the cryptography algorithm to be used.</description>

		</field>

		<field>

			<fieldname>auth_method</fieldname>

			<fielddescr>Authentication method</fielddescr>

			<description>The authentication method to be used.</description>

			<required/>

			<type>select</type>

			<options>

				<option>

					<value>shared_key</value>

					<name>Shared key</name>

				</option>

				<option>

					<value>pki</value>

					<name>PKI (Public Key Infrastructure)</name>

				</option>

			</options>

			<onchange>onAuthMethodChanged()</onchange>

		<field>

			<fieldname>shared_key</fieldname>

			<fielddescr>Shared key</fielddescr>

			<description>Paste your shared key here.</description>

			<type>textarea</type>

			<encoding>base64</encoding>

			<rows>8</rows>

			<cols>40</cols>

		</field>

			<description>Paste the server's CA certificate in X.509 format here.</description>

			<type>textarea</type>

			<encoding>base64</encoding>

			<rows>8</rows>

			<cols>40</cols>

		</field>

		<field>

			<description>Paste your client certificate in X.509 format here.</description>

			<type>textarea</type>

			<encoding>base64</encoding>

			<rows>8</rows>

			<cols>40</cols>

		</field>

		<field>

			<description>Paste your client key in RSA format here.</description>

			<type>textarea</type>

			<encoding>base64</encoding>

			<rows>8</rows>

			<cols>40</cols>

		</field>

			<fieldname>tls</fieldname>

			<fielddescr>TLS</fielddescr>

			<description>Paste your HMAC signature (TLS) here (optional).</description>

			<type>textarea</type>

			<encoding>base64</encoding>

			<rows>8</rows>

			<cols>40</cols>

		</field>

			<fieldname>use_lzo</fieldname>

			<fielddescr>LZO compression</fielddescr>

			<description>Checking this will compress the packets using the LZO algorithm before sending them.</description>

			<type>checkbox</type>

		</field>

			<fieldname>use_shaper</fieldname>

		</field>

			<fieldname>use_dynamicport</fieldname>

			<fielddescr>Dynamic sourceport</fielddescr>

			<description>Checking this will let the openvpn client choose a dynamic sourceport for this connection.</description>

			<type>checkbox</type>

		</field>

			<fieldname>passtos</fieldname>

			<fielddescr>Pass Type-Of-Service</fielddescr>

			<description>Checking this will set the TOS field of the tunnel packet to what the payload's TOS is.</description>

			<type>checkbox</type>

		</field>

			<fieldname>infiniteresolvretry</fieldname>

			<fielddescr>Infinitely resolve server</fielddescr>

			<description>Infinitely retry to resolve the host name of the OpenVPN server. Useful for not permanently internet-connected machines.</description>

			<type>checkbox</type>

		</field>

			<fieldname>custom_options</fieldname>

			<fielddescr>Custom options</fielddescr>

			<description>You can put your own custom options here, separated by semi-colons (;). They'll be added to the client configuration.</description>

			<cols>65</cols>

			<rows>5</rows>

			<fieldname>description</fieldname>

			<fielddescr>Description</fielddescr>

			<description>You may enter a description here. This is optional and is not parsed.</description>

			<type>input</type>

		</field>

	</fields>

		openvpn_delete('client', $id);

	</custom_delete_php_command>	

		openvpn_get_ciphers(&$pkg);

	</custom_php_command_before_form>

		openvpn_print_javascript('client');

	</custom_php_after_head_command>

	<custom_php_after_form_command>

		openvpn_print_javascript2();

	</custom_php_after_form_command>

		openvpn_validate_input('client', $_POST, &$input_errors);

	</custom_php_validation_command>

	<custom_php_resync_config_command>