pfSense

 * system_hasync.php

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2004-2013 BSD Perimeter

 * Copyright (c) 2014-2024 Rubicon Communications, LLC (Netgate)

 * All rights reserved.

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 *

 * http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 */

require_once("guiconfig.inc");

config_init_path('hasync');

$checkbox_names = array(

	'adminsync',

	'synchronizeusers',

	'synchronizedhcrelay',

	'synchronizekea6',

	'synchronizedhcrelay6',

	'synchronizewol',

	$old_pfhostid = isset($a_hasync['pfhostid']) ? $a_hasync['pfhostid'] : '';

	$a_hasync['pfsyncpeerip'] = $pconfig['pfsyncpeerip'];

	$a_hasync['pfsyncinterface'] = $pconfig['pfsyncinterface'];

	$a_hasync['username'] = $pconfig['username'];

		if ($pconfig['passwordfld'] != DMYPWD) {

	} else {

	if ((!empty($pconfig['pfhostid']) &&

	if (!empty($pconfig['pfsyncpeerip']) && !is_ipaddrv4($pconfig['pfsyncpeerip'])) {

		$input_errors[] = gettext("Synchronize Config to IP must be a valid IP address.");

	}

	if (!$input_errors) {

		config_set_path('hasync', $a_hasync);

		write_config("Updated High Availability Sync configuration");

		if ($old_pfhostid != $a_hasync['pfhostid']) {

		header("Location: system_hasync.php");

}

$pconfig['pfhostid']	= $a_hasync['pfhostid'];

$pconfig['pfsyncpeerip']	= $a_hasync['pfsyncpeerip'];

$pconfig['pfsyncinterface'] = $a_hasync['pfsyncinterface'];

$pconfig['username']		= $a_hasync['username'];

$pgtitle = array(gettext('System'), gettext('High Availability'));

include("head.inc");

if ($input_errors) {

$form = new Form;

$section = new Form_Section(gettext('State Synchronization Settings (pfsync)'));

	gettext('Synchronize states'),

	($pconfig['pfsyncenabled'] === 'on'),

))->setHelp(gettext('Each firewall sends these messages out via multicast on a specified interface, using the PFSYNC protocol (IP Protocol 240).' .

			' It also listens on that interface for similar messages from other firewalls, and imports them into the local state table.%1$s' .

			'Clicking "Save" will force a configuration sync if it is enabled! (see Configuration Synchronization Settings below)'), '<br />');

	gettext('Synchronize Interface'),

	$pconfig['pfsyncinterface'],

))->setHelp(gettext('If Synchronize States is enabled this interface will be used for communication.%1$s' .

			'It is recommended to set this to an interface other than LAN! A dedicated interface works the best.%1$s' .

			'An IP must be assigned to the interface on any participating sync nodes.'), '<br />');

$section->addInput(new Form_Input(

	gettext('Filter Host ID'),

	'text',

))->setHelp(gettext('Custom pf host identifier carried in state data to uniquely identify which host created a firewall state.%1$s' .

		'Must be a non-zero hexadecimal string 8 characters or less (e.g. 1, 2, ff01, abcdef01).%1$s' .

		'Each node participating in state synchronization must have a different ID.'), '<br />');

$section->addInput(new Form_Input(

	gettext('pfsync Synchronize Peer IP'),

	'text',

))->setHelp(gettext('Setting this option will force pfsync to synchronize its state table to this IP address. The default is directed multicast.'));

$section = new Form_Section(gettext('Configuration Synchronization Settings (XMLRPC Sync)'));

	gettext('Synchronize Config to IP'),

	'text',

))->setHelp(gettext('Enter the IP address of the firewall to which the selected configuration sections should be synchronized.%1$s%1$s' .

			'XMLRPC sync is currently only supported over connections using the same protocol and port as this system - make sure the remote system\'s port and protocol are set accordingly!%1$s' .

			'Do not use the Synchronize Config to IP and password option on backup cluster members!'), '<br />');

	gettext('Remote System Username'),

	'text',

	$pconfig['username'],

))->setHelp(gettext('Enter the webConfigurator username of the system entered above for synchronizing the configuration.%1$s' .

$section->addPassword(new Form_Input(

	'passwordfld',

	gettext('Remote System Password'),

	'password',

))->setHelp(gettext('Enter the webConfigurator password of the system entered above for synchronizing the configuration.%1$s' .

$section->addInput(new Form_Checkbox(

	gettext('Synchronize admin'),

	($pconfig['adminsync'] === 'on'),

))->setHelp(gettext('By default, the admin account does not synchronize, and each node may have a different admin password.%1$s' .

			'This option automatically updates XMLRPC Remote System Password when the password is changed on

			the Remote System Username account.'), '<br />');

$group = new Form_MultiCheckboxGroup(gettext('Select options to sync'));

	'synchronizeusers',

	gettext('Synchronize Users and Groups'),

	($pconfig['synchronizeusers'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizeauthservers',

	gettext('Synchronize Auth Servers'),

	($pconfig['synchronizeauthservers'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizecerts',

	gettext('Synchronize Certificates'),

	($pconfig['synchronizecerts'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizerules',

	gettext('Synchronize Rules'),

	($pconfig['synchronizerules'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizeschedules',

	gettext('Synchronize Firewall schedules'),

	($pconfig['synchronizeschedules'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizealiases',

	gettext('Synchronize Firewall aliases'),

	($pconfig['synchronizealiases'] === 'on'),

	'on'

$group->add(new Form_MultiCheckbox(

	'synchronizenat',

	gettext('Synchronize NAT'),

	($pconfig['synchronizenat'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizeipsec',

	gettext('Synchronize IPsec'),

	($pconfig['synchronizeipsec'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizeopenvpn',

	gettext('Synchronize OpenVPN'),

	($pconfig['synchronizeopenvpn'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizedhcpd',

	gettext('Synchronize DHCPD'),

	($pconfig['synchronizedhcpd'] === 'on'),

$group->add(new Form_MultiCheckbox(

	gettext('Synchronize DHCP Relay'),

	($pconfig['synchronizedhcrelay'] === 'on'),

if (dhcp_is_backend('kea')) {

$group->add(new Form_MultiCheckbox(

	gettext('Synchronize DHCPv6 Relay'),

	($pconfig['synchronizedhcrelay6'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizewol',

	gettext('Synchronize Wake-on-LAN'),

	($pconfig['synchronizewol'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizestaticroutes',

	gettext('Synchronize Static Routes'),

	($pconfig['synchronizestaticroutes'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizevirtualip',

	gettext('Synchronize Virtual IPs'),

	($pconfig['synchronizevirtualip'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizetrafficshaper',

	gettext('Synchronize traffic shaper (queues)'),

	($pconfig['synchronizetrafficshaper'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizetrafficshaperlimiter',

	gettext('Synchronize traffic shaper (limiter)'),

	($pconfig['synchronizetrafficshaperlimiter'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizednsforwarder',

	gettext('Synchronize DNS (Forwarder/Resolver)'),

	($pconfig['synchronizednsforwarder'] === 'on'),

$group->add(new Form_MultiCheckbox(

	'synchronizecaptiveportal',

	gettext('Synchronize Captive Portal'),

	($pconfig['synchronizecaptiveportal'] === 'on'),

$section->add($group);

$form->add($section);

include("foot.inc");