1 |
cf7d1057
|
Scott Ullrich
|
<?php
|
2 |
|
|
/* $Id$ */
|
3 |
|
|
/*
|
4 |
|
|
diag_ipsec.php
|
5 |
13d193c2
|
Scott Ullrich
|
Copyright (C) 2004-2009 Scott Ullrich
|
6 |
a93e56c5
|
Matthew Grooms
|
Copyright (C) 2008 Shrew Soft Inc <mgrooms@shrew.net>.
|
7 |
cf7d1057
|
Scott Ullrich
|
All rights reserved.
|
8 |
|
|
|
9 |
|
|
Parts of this code was originally based on vpn_ipsec_sad.php
|
10 |
|
|
Copyright (C) 2003-2004 Manuel Kasper
|
11 |
|
|
|
12 |
|
|
Redistribution and use in source and binary forms, with or without
|
13 |
|
|
modification, are permitted provided that the following conditions are met:
|
14 |
|
|
|
15 |
|
|
1. Redistributions of source code must retain the above copyright notice,
|
16 |
|
|
this list of conditions and the following disclaimer.
|
17 |
|
|
|
18 |
|
|
2. Redistributions in binary form must reproduce the above copyright
|
19 |
|
|
notice, this list of conditions and the following disclaimer in the
|
20 |
|
|
documentation and/or other materials provided with the distribution.
|
21 |
|
|
|
22 |
|
|
THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
|
23 |
|
|
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
|
24 |
|
|
AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
25 |
|
|
AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
|
26 |
|
|
OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
27 |
|
|
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
28 |
|
|
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
29 |
|
|
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
30 |
|
|
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
31 |
|
|
POSSIBILITY OF SUCH DAMAGE.
|
32 |
|
|
*/
|
33 |
|
|
|
34 |
13d193c2
|
Scott Ullrich
|
/*
|
35 |
|
|
pfSense_MODULE: ipsec
|
36 |
|
|
*/
|
37 |
|
|
|
38 |
6b07c15a
|
Matthew Grooms
|
##|+PRIV
|
39 |
|
|
##|*IDENT=page-status-ipsec
|
40 |
|
|
##|*NAME=Status: IPsec page
|
41 |
|
|
##|*DESCR=Allow access to the 'Status: IPsec' page.
|
42 |
|
|
##|*MATCH=diag_ipsec.php*
|
43 |
|
|
##|-PRIV
|
44 |
|
|
|
45 |
|
|
|
46 |
a93e56c5
|
Matthew Grooms
|
global $g;
|
47 |
|
|
|
48 |
f8ec8de4
|
Renato Botelho
|
$pgtitle = array(gettext("Status"),gettext("IPsec"));
|
49 |
b32dd0a6
|
jim-p
|
$shortcut_section = "ipsec";
|
50 |
cf7d1057
|
Scott Ullrich
|
|
51 |
|
|
require("guiconfig.inc");
|
52 |
|
|
include("head.inc");
|
53 |
483e6de8
|
Scott Ullrich
|
require("ipsec.inc");
|
54 |
a93e56c5
|
Matthew Grooms
|
|
55 |
6e8b0ec3
|
jim-p
|
if ($_GET['act'] == "connect") {
|
56 |
614be051
|
bcyrill
|
if (is_ipaddrv4($_GET['remoteid']) && is_ipaddrv4($_GET['source'])) {
|
57 |
6e8b0ec3
|
jim-p
|
exec("/sbin/ping -S " . escapeshellarg($_GET['source']) . " -c 1 " . escapeshellarg($_GET['remoteid']));
|
58 |
|
|
}
|
59 |
614be051
|
bcyrill
|
else if (is_ipaddrv6($_GET['remoteid']) && is_ipaddrv6($_GET['source'])) {
|
60 |
|
|
exec("/sbin/ping6 -S " . escapeshellarg($_GET['source']) . " -c 1 " . escapeshellarg($_GET['remoteid']));
|
61 |
|
|
}
|
62 |
6e8b0ec3
|
jim-p
|
}
|
63 |
|
|
|
64 |
6e0b68bf
|
jim-p
|
if ($_GET['act'] == "disconnect") {
|
65 |
|
|
if (!empty($_GET['user'])) {
|
66 |
|
|
ipsec_disconnect_mobile($_GET['user']);
|
67 |
|
|
sleep(1);
|
68 |
|
|
$savemsg = gettext("Disconnected user") . " " . $_GET['user'];
|
69 |
|
|
}
|
70 |
|
|
}
|
71 |
|
|
|
72 |
a93e56c5
|
Matthew Grooms
|
if (!is_array($config['ipsec']['phase2']))
|
73 |
|
|
$config['ipsec']['phase2'] = array();
|
74 |
|
|
|
75 |
|
|
$a_phase2 = &$config['ipsec']['phase2'];
|
76 |
|
|
|
77 |
|
|
$spd = ipsec_dump_spd();
|
78 |
|
|
$sad = ipsec_dump_sad();
|
79 |
6e0b68bf
|
jim-p
|
$mobile = ipsec_dump_mobile();
|
80 |
a93e56c5
|
Matthew Grooms
|
|
81 |
cf7d1057
|
Scott Ullrich
|
?>
|
82 |
|
|
|
83 |
6e0b68bf
|
jim-p
|
<body link="#0000CC" vlink="#0000CC" alink="#0000CC" onload="<?php echo $jsevents["body"]["onload"]; ?>">
|
84 |
cf7d1057
|
Scott Ullrich
|
<?php include("fbegin.inc"); ?>
|
85 |
|
|
<div id="inputerrors"></div>
|
86 |
|
|
<table width="100%" border="0" cellpadding="0" cellspacing="0">
|
87 |
|
|
<tr>
|
88 |
a93e56c5
|
Matthew Grooms
|
<td>
|
89 |
|
|
<?php
|
90 |
|
|
$tab_array = array();
|
91 |
f8ec8de4
|
Renato Botelho
|
$tab_array[0] = array(gettext("Overview"), true, "diag_ipsec.php");
|
92 |
|
|
$tab_array[1] = array(gettext("SAD"), false, "diag_ipsec_sad.php");
|
93 |
|
|
$tab_array[2] = array(gettext("SPD"), false, "diag_ipsec_spd.php");
|
94 |
|
|
$tab_array[3] = array(gettext("Logs"), false, "diag_logs_ipsec.php");
|
95 |
a93e56c5
|
Matthew Grooms
|
display_top_tabs($tab_array);
|
96 |
|
|
?>
|
97 |
331aa57b
|
Scott Ullrich
|
</td>
|
98 |
cf7d1057
|
Scott Ullrich
|
</tr>
|
99 |
a93e56c5
|
Matthew Grooms
|
<tr>
|
100 |
6e0b68bf
|
jim-p
|
<td>
|
101 |
a93e56c5
|
Matthew Grooms
|
<div id="mainarea">
|
102 |
034b4918
|
Scott Ullrich
|
<table width="100%" border="0" cellpadding="6" cellspacing="0" class="tabcont sortable">
|
103 |
6e0b68bf
|
jim-p
|
<thead>
|
104 |
a93e56c5
|
Matthew Grooms
|
<tr>
|
105 |
6e0b68bf
|
jim-p
|
<th nowrap class="listhdrr"><?php echo gettext("Local IP");?></th>
|
106 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Remote IP");?></a></th>
|
107 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Local Network");?></th>
|
108 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Remote Network");?></a></th>
|
109 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Description");?></a></th>
|
110 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Status");?></th>
|
111 |
a93e56c5
|
Matthew Grooms
|
</tr>
|
112 |
6e0b68bf
|
jim-p
|
</thead>
|
113 |
|
|
<tbody>
|
114 |
a93e56c5
|
Matthew Grooms
|
<?php
|
115 |
|
|
foreach ($a_phase2 as $ph2ent) {
|
116 |
6e0b68bf
|
jim-p
|
if ($ph2ent['remoteid']['type'] == "mobile")
|
117 |
|
|
continue;
|
118 |
221f5d17
|
Chris Buechler
|
ipsec_lookup_phase1($ph2ent,$ph1ent);
|
119 |
|
|
if (!isset($ph2ent['disabled']) && !isset($ph1ent['disabled'])) {
|
120 |
4976f453
|
Cristian Feldman
|
if(ipsec_phase2_status($spd,$sad,$ph1ent,$ph2ent)) {
|
121 |
a93e56c5
|
Matthew Grooms
|
$icon = "pass";
|
122 |
4976f453
|
Cristian Feldman
|
$status = "Active";
|
123 |
|
|
} elseif(!isset($config['ipsec']['enable'])) {
|
124 |
b385327a
|
Chris Buechler
|
$icon = "block";
|
125 |
4976f453
|
Cristian Feldman
|
$status = "Disabled";
|
126 |
|
|
} else {
|
127 |
a93e56c5
|
Matthew Grooms
|
$icon = "reject";
|
128 |
4976f453
|
Cristian Feldman
|
$status = "Error";
|
129 |
|
|
}
|
130 |
a93e56c5
|
Matthew Grooms
|
?>
|
131 |
|
|
<tr>
|
132 |
|
|
<td class="listlr">
|
133 |
6e0b68bf
|
jim-p
|
<?php echo htmlspecialchars(ipsec_get_phase1_src($ph1ent));?>
|
134 |
a93e56c5
|
Matthew Grooms
|
</td>
|
135 |
|
|
<td class="listr">
|
136 |
6e0b68bf
|
jim-p
|
<?php echo htmlspecialchars($ph1ent['remote-gateway']);?>
|
137 |
a93e56c5
|
Matthew Grooms
|
</td>
|
138 |
|
|
<td class="listr">
|
139 |
|
|
<?php echo ipsec_idinfo_to_text($ph2ent['localid']); ?>
|
140 |
|
|
</td>
|
141 |
|
|
<td class="listr">
|
142 |
|
|
<?php echo ipsec_idinfo_to_text($ph2ent['remoteid']); ?>
|
143 |
|
|
</td>
|
144 |
6e0b68bf
|
jim-p
|
<td class="listr"><?php echo htmlspecialchars($ph2ent['descr']);?></td>
|
145 |
a93e56c5
|
Matthew Grooms
|
<td class="listr">
|
146 |
ba363183
|
Scott Ullrich
|
<center>
|
147 |
6e0b68bf
|
jim-p
|
<img src ="/themes/<?php echo $g['theme']; ?>/images/icons/icon_<?php echo $icon; ?>.gif" title="<?php echo $status; ?>">
|
148 |
ba363183
|
Scott Ullrich
|
</center>
|
149 |
a93e56c5
|
Matthew Grooms
|
</td>
|
150 |
6e8b0ec3
|
jim-p
|
<td class="list">
|
151 |
|
|
<?php
|
152 |
|
|
$source = "";
|
153 |
59231855
|
Darren Embry
|
$ip_interface = null;
|
154 |
|
|
$ip_alias = null;
|
155 |
ec8b4d8d
|
Ermal
|
$localinfo = ipsec_idinfo_to_cidr($ph2ent['localid'], false, $ph2ent['mode']);
|
156 |
|
|
list($localip, $localsub) = explode("/", $localinfo);
|
157 |
|
|
$ip_interface = find_ip_interface($localip, $localsub);
|
158 |
|
|
if (!$ip_interface)
|
159 |
|
|
$ip_alias = find_virtual_ip_alias($localip, $localsub);
|
160 |
59231855
|
Darren Embry
|
if ($ip_interface) {
|
161 |
ec8b4d8d
|
Ermal
|
if (is_ipaddrv6($localip))
|
162 |
614be051
|
bcyrill
|
$source = get_interface_ipv6($ip_interface);
|
163 |
|
|
else
|
164 |
|
|
$source = get_interface_ip($ip_interface);
|
165 |
59231855
|
Darren Embry
|
} else if ($ip_alias) {
|
166 |
|
|
$source = $ip_alias['subnet'];
|
167 |
6e8b0ec3
|
jim-p
|
}
|
168 |
ec8b4d8d
|
Ermal
|
if (!empty($ph2ent['pinghost']))
|
169 |
|
|
$remoteid = $ph2ent['pinghost'];
|
170 |
|
|
else
|
171 |
|
|
$remoteid = $ph2ent['remoteid']['address'];
|
172 |
6e8b0ec3
|
jim-p
|
?>
|
173 |
|
|
<?php if (($ph2ent['remoteid']['type'] != "mobile") && ($icon != "pass") && ($source != "")): ?>
|
174 |
|
|
<center>
|
175 |
ec8b4d8d
|
Ermal
|
<a href="diag_ipsec.php?act=connect&remoteid=<?php echo $remoteid; ?>&source=<?php echo $source; ?>">
|
176 |
6e0b68bf
|
jim-p
|
<img src ="/themes/<?php echo $g['theme']; ?>/images/icons/icon_service_start.gif" alt="Connect VPN" title="Connect VPN" border="0">
|
177 |
6e8b0ec3
|
jim-p
|
</a>
|
178 |
|
|
</center>
|
179 |
|
|
<?php else: ?>
|
180 |
|
|
|
181 |
|
|
<?php endif; ?>
|
182 |
|
|
</td>
|
183 |
a93e56c5
|
Matthew Grooms
|
</tr>
|
184 |
|
|
<?php
|
185 |
|
|
}
|
186 |
|
|
}
|
187 |
|
|
?>
|
188 |
6e0b68bf
|
jim-p
|
</tbody>
|
189 |
|
|
</table>
|
190 |
|
|
<?php if (isset($config['ipsec']['client']['enable'])): ?>
|
191 |
|
|
<table width="100%" border="0" cellpadding="6" cellspacing="0" class="tabcont sortable">
|
192 |
|
|
<thead>
|
193 |
|
|
<tr>
|
194 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Mobile User");?></th>
|
195 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Login Time");?></a></th>
|
196 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Local");?></th>
|
197 |
|
|
<th nowrap class="listhdrr"><?php echo gettext("Remote");?></a></th>
|
198 |
|
|
<th nowrap class="list"> </th>
|
199 |
|
|
</tr>
|
200 |
|
|
</thead>
|
201 |
|
|
<tbody>
|
202 |
|
|
<?php foreach ($mobile as $muser): ?>
|
203 |
|
|
<tr>
|
204 |
|
|
<td class="listlr"><?php echo $muser['username']; ?></td>
|
205 |
|
|
<td class="listr" align="center"><?php echo $muser['logintime']; ?></td>
|
206 |
|
|
<td class="listr" align="center"><?php echo $muser['local']; ?></td>
|
207 |
|
|
<td class="listr" align="center"><?php echo $muser['remote']; ?></td>
|
208 |
|
|
<td class="list" align="center"><a href="diag_ipsec.php?act=disconnect&user=<?php echo $muser['username']; ?>"><img src='/themes/<?php echo $g['theme']; ?>/images/icons/icon_x.gif' height='17' width='17' border='0'/></a></td>
|
209 |
|
|
</tr>
|
210 |
|
|
<?php endforeach; ?>
|
211 |
|
|
</tbody>
|
212 |
a93e56c5
|
Matthew Grooms
|
</table>
|
213 |
6e0b68bf
|
jim-p
|
<?php endif; ?>
|
214 |
a93e56c5
|
Matthew Grooms
|
</div>
|
215 |
cf7d1057
|
Scott Ullrich
|
</td>
|
216 |
a93e56c5
|
Matthew Grooms
|
</tr>
|
217 |
cf7d1057
|
Scott Ullrich
|
</table>
|
218 |
|
|
|
219 |
0f78d3ad
|
Scott Ullrich
|
<p/>
|
220 |
|
|
|
221 |
|
|
<span class="vexpl">
|
222 |
|
|
<span class="red">
|
223 |
6e0b68bf
|
jim-p
|
<strong><?php echo gettext("Note:");?><br /></strong>
|
224 |
0f78d3ad
|
Scott Ullrich
|
</span>
|
225 |
6e0b68bf
|
jim-p
|
<?php echo gettext("You can configure IPsec");?>
|
226 |
0f78d3ad
|
Scott Ullrich
|
<a href="vpn_ipsec.php">here</a>.
|
227 |
|
|
</span>
|
228 |
|
|
|
229 |
cf7d1057
|
Scott Ullrich
|
<?php include("fend.inc"); ?>
|
230 |
|
|
</body>
|
231 |
|
|
</html>
|