Project

General

Profile

Download (7.85 KB) Statistics
| Branch: | Tag: | Revision:
1 cf7d1057 Scott Ullrich
<?php
2
/* $Id$ */
3
/*
4
	diag_ipsec.php
5 13d193c2 Scott Ullrich
	Copyright (C) 2004-2009 Scott Ullrich
6 a93e56c5 Matthew Grooms
	Copyright (C) 2008 Shrew Soft Inc <mgrooms@shrew.net>.
7 cf7d1057 Scott Ullrich
	All rights reserved.
8
9
	Parts of this code was originally based on vpn_ipsec_sad.php
10
	Copyright (C) 2003-2004 Manuel Kasper
11
12
	Redistribution and use in source and binary forms, with or without
13
	modification, are permitted provided that the following conditions are met:
14
15
	1. Redistributions of source code must retain the above copyright notice,
16
	   this list of conditions and the following disclaimer.
17
18
	2. Redistributions in binary form must reproduce the above copyright
19
	   notice, this list of conditions and the following disclaimer in the
20
	   documentation and/or other materials provided with the distribution.
21
22
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
23
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
24
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
25
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
26
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
28
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
29
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
30
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
31
	POSSIBILITY OF SUCH DAMAGE.
32
*/
33
34 13d193c2 Scott Ullrich
/*
35
	pfSense_MODULE:	ipsec
36
*/
37
38 6b07c15a Matthew Grooms
##|+PRIV
39
##|*IDENT=page-status-ipsec
40
##|*NAME=Status: IPsec page
41
##|*DESCR=Allow access to the 'Status: IPsec' page.
42
##|*MATCH=diag_ipsec.php*
43
##|-PRIV
44
45
46 a93e56c5 Matthew Grooms
global $g;
47
48 f8ec8de4 Renato Botelho
$pgtitle = array(gettext("Status"),gettext("IPsec"));
49 b32dd0a6 jim-p
$shortcut_section = "ipsec";
50 cf7d1057 Scott Ullrich
51
require("guiconfig.inc");
52
include("head.inc");
53 483e6de8 Scott Ullrich
require("ipsec.inc");
54 a93e56c5 Matthew Grooms
55 6e8b0ec3 jim-p
if ($_GET['act'] == "connect") {
56 614be051 bcyrill
	if (is_ipaddrv4($_GET['remoteid']) && is_ipaddrv4($_GET['source'])) {
57 6e8b0ec3 jim-p
		exec("/sbin/ping -S " . escapeshellarg($_GET['source']) . " -c 1 " . escapeshellarg($_GET['remoteid']));
58
	}
59 614be051 bcyrill
	else if (is_ipaddrv6($_GET['remoteid']) && is_ipaddrv6($_GET['source'])) {
60
		exec("/sbin/ping6 -S " . escapeshellarg($_GET['source']) . " -c 1 " . escapeshellarg($_GET['remoteid']));
61
	}
62 6e8b0ec3 jim-p
}
63
64 6e0b68bf jim-p
if ($_GET['act'] == "disconnect") {
65
	if (!empty($_GET['user'])) {
66
		ipsec_disconnect_mobile($_GET['user']);
67
		sleep(1);
68
		$savemsg = gettext("Disconnected user") . " " . $_GET['user'];
69
	}
70
}
71
72 a93e56c5 Matthew Grooms
if (!is_array($config['ipsec']['phase2']))
73
    $config['ipsec']['phase2'] = array();
74
75
$a_phase2 = &$config['ipsec']['phase2'];
76
77
$spd = ipsec_dump_spd();
78
$sad = ipsec_dump_sad();
79 6e0b68bf jim-p
$mobile = ipsec_dump_mobile();
80 a93e56c5 Matthew Grooms
81 cf7d1057 Scott Ullrich
?>
82
83 6e0b68bf jim-p
<body link="#0000CC" vlink="#0000CC" alink="#0000CC" onload="<?php echo $jsevents["body"]["onload"]; ?>">
84 cf7d1057 Scott Ullrich
<?php include("fbegin.inc"); ?>
85
<div id="inputerrors"></div>
86
<table width="100%" border="0" cellpadding="0" cellspacing="0">
87
	<tr>
88 a93e56c5 Matthew Grooms
		<td>
89
			<?php
90
				$tab_array = array();
91 f8ec8de4 Renato Botelho
				$tab_array[0] = array(gettext("Overview"), true, "diag_ipsec.php");
92
				$tab_array[1] = array(gettext("SAD"), false, "diag_ipsec_sad.php");
93
				$tab_array[2] = array(gettext("SPD"), false, "diag_ipsec_spd.php");
94
				$tab_array[3] = array(gettext("Logs"), false, "diag_logs_ipsec.php");
95 a93e56c5 Matthew Grooms
				display_top_tabs($tab_array);
96
			?>
97 331aa57b Scott Ullrich
		</td>
98 cf7d1057 Scott Ullrich
	</tr>
99 a93e56c5 Matthew Grooms
	<tr>
100 6e0b68bf jim-p
	<td>
101 a93e56c5 Matthew Grooms
			<div id="mainarea">
102 034b4918 Scott Ullrich
				<table width="100%" border="0" cellpadding="6" cellspacing="0" class="tabcont sortable">
103 6e0b68bf jim-p
					<thead>
104 a93e56c5 Matthew Grooms
					<tr>
105 6e0b68bf jim-p
						<th nowrap class="listhdrr"><?php echo gettext("Local IP");?></th>
106
						<th nowrap class="listhdrr"><?php echo gettext("Remote IP");?></a></th>
107
						<th nowrap class="listhdrr"><?php echo gettext("Local Network");?></th>
108
						<th nowrap class="listhdrr"><?php echo gettext("Remote Network");?></a></th>
109
						<th nowrap class="listhdrr"><?php echo gettext("Description");?></a></th>
110
						<th nowrap class="listhdrr"><?php echo gettext("Status");?></th>
111 a93e56c5 Matthew Grooms
					</tr>
112 6e0b68bf jim-p
					</thead>
113
					<tbody>
114 a93e56c5 Matthew Grooms
					<?php
115
						foreach ($a_phase2 as $ph2ent) {
116 6e0b68bf jim-p
							if ($ph2ent['remoteid']['type'] == "mobile")
117
								continue;
118 221f5d17 Chris Buechler
							ipsec_lookup_phase1($ph2ent,$ph1ent);
119
							if (!isset($ph2ent['disabled']) && !isset($ph1ent['disabled'])) {
120 4976f453 Cristian Feldman
								if(ipsec_phase2_status($spd,$sad,$ph1ent,$ph2ent)) {
121 a93e56c5 Matthew Grooms
									$icon = "pass";
122 4976f453 Cristian Feldman
									$status = "Active";
123
								} elseif(!isset($config['ipsec']['enable'])) {
124 b385327a Chris Buechler
									$icon = "block";
125 4976f453 Cristian Feldman
									$status = "Disabled";
126
								} else {
127 a93e56c5 Matthew Grooms
									$icon = "reject";
128 4976f453 Cristian Feldman
									$status = "Error";
129
								}
130 a93e56c5 Matthew Grooms
					?>
131
					<tr>
132
						<td class="listlr">
133 6e0b68bf jim-p
							<?php echo htmlspecialchars(ipsec_get_phase1_src($ph1ent));?>
134 a93e56c5 Matthew Grooms
						</td>
135
						<td class="listr">
136 6e0b68bf jim-p
							<?php echo htmlspecialchars($ph1ent['remote-gateway']);?>
137 a93e56c5 Matthew Grooms
						</td>
138
						<td class="listr">
139
							<?php echo ipsec_idinfo_to_text($ph2ent['localid']); ?>
140
						</td>
141
						<td class="listr">
142
							<?php echo ipsec_idinfo_to_text($ph2ent['remoteid']); ?>
143
						</td>
144 6e0b68bf jim-p
						<td class="listr"><?php echo htmlspecialchars($ph2ent['descr']);?></td>
145 a93e56c5 Matthew Grooms
						<td class="listr">
146 ba363183 Scott Ullrich
							<center>
147 6e0b68bf jim-p
								<img src ="/themes/<?php echo $g['theme']; ?>/images/icons/icon_<?php echo $icon; ?>.gif" title="<?php echo $status; ?>">
148 ba363183 Scott Ullrich
							</center>
149 a93e56c5 Matthew Grooms
						</td>
150 6e8b0ec3 jim-p
						<td class="list">
151
							<?php
152
							$source = "";
153 59231855 Darren Embry
							$ip_interface = null;
154
							$ip_alias = null;
155 ec8b4d8d Ermal
							$localinfo = ipsec_idinfo_to_cidr($ph2ent['localid'], false, $ph2ent['mode']);
156
							list($localip, $localsub) = explode("/", $localinfo);
157
							$ip_interface = find_ip_interface($localip, $localsub);
158
							if (!$ip_interface)
159
								$ip_alias = find_virtual_ip_alias($localip, $localsub);
160 59231855 Darren Embry
							if ($ip_interface) {
161 ec8b4d8d Ermal
								if (is_ipaddrv6($localip))
162 614be051 bcyrill
									$source = get_interface_ipv6($ip_interface);
163
								else
164
									$source = get_interface_ip($ip_interface);
165 59231855 Darren Embry
							} else if ($ip_alias) {
166
								$source = $ip_alias['subnet'];
167 6e8b0ec3 jim-p
							}
168 ec8b4d8d Ermal
							if (!empty($ph2ent['pinghost']))
169
								$remoteid = $ph2ent['pinghost'];
170
							else
171
								$remoteid = $ph2ent['remoteid']['address'];
172 6e8b0ec3 jim-p
							?>
173
							<?php if (($ph2ent['remoteid']['type'] != "mobile") && ($icon != "pass") && ($source != "")): ?>
174
							<center>
175 ec8b4d8d Ermal
								<a href="diag_ipsec.php?act=connect&amp;remoteid=<?php echo $remoteid; ?>&amp;source=<?php echo $source; ?>">
176 6e0b68bf jim-p
								<img src ="/themes/<?php echo $g['theme']; ?>/images/icons/icon_service_start.gif" alt="Connect VPN" title="Connect VPN" border="0">
177 6e8b0ec3 jim-p
								</a>
178
							</center>
179
							<?php else: ?>
180
								&nbsp;
181
							<?php endif; ?>
182
						</td>
183 a93e56c5 Matthew Grooms
					</tr>
184
					<?php
185
							}
186
						}
187
					?>
188 6e0b68bf jim-p
					</tbody>
189
				</table>
190
				<?php if (isset($config['ipsec']['client']['enable'])): ?>
191
				<table width="100%" border="0" cellpadding="6" cellspacing="0" class="tabcont sortable">
192
					<thead>
193
					<tr>
194
						<th nowrap class="listhdrr"><?php echo gettext("Mobile User");?></th>
195
						<th nowrap class="listhdrr"><?php echo gettext("Login Time");?></a></th>
196
						<th nowrap class="listhdrr"><?php echo gettext("Local");?></th>
197
						<th nowrap class="listhdrr"><?php echo gettext("Remote");?></a></th>
198
						<th nowrap class="list">&nbsp;</th>
199
					</tr>
200
					</thead>
201
					<tbody>
202
					<?php	foreach ($mobile as $muser): ?>
203
					<tr>
204
						<td class="listlr"><?php echo $muser['username']; ?></td>
205
						<td class="listr" align="center"><?php echo $muser['logintime']; ?></td>
206
						<td class="listr" align="center"><?php echo $muser['local']; ?></td>
207
						<td class="listr" align="center"><?php echo $muser['remote']; ?></td>
208
						<td class="list" align="center"><a href="diag_ipsec.php?act=disconnect&user=<?php echo $muser['username']; ?>"><img src='/themes/<?php echo $g['theme']; ?>/images/icons/icon_x.gif' height='17' width='17' border='0'/></a></td>
209
					</tr>
210
					<?php	endforeach; ?>
211
					</tbody>
212 a93e56c5 Matthew Grooms
				</table>
213 6e0b68bf jim-p
				<?php endif; ?>
214 a93e56c5 Matthew Grooms
			</div>
215 cf7d1057 Scott Ullrich
		</td>
216 a93e56c5 Matthew Grooms
	</tr>
217 cf7d1057 Scott Ullrich
</table>
218
219 0f78d3ad Scott Ullrich
<p/>
220
221
<span class="vexpl">
222
	<span class="red">
223 6e0b68bf jim-p
		<strong><?php echo gettext("Note:");?><br /></strong>
224 0f78d3ad Scott Ullrich
	</span>
225 6e0b68bf jim-p
	<?php echo gettext("You can configure IPsec");?>
226 0f78d3ad Scott Ullrich
	<a href="vpn_ipsec.php">here</a>.
227
</span>
228
229 cf7d1057 Scott Ullrich
<?php include("fend.inc"); ?>
230
</body>
231
</html>