Project

General

Profile

Download (7.74 KB) Statistics
| Branch: | Tag: | Revision:
1 cf7d1057 Scott Ullrich
<?php
2
/* $Id$ */
3
/*
4
	diag_ipsec.php
5 13d193c2 Scott Ullrich
	Copyright (C) 2004-2009 Scott Ullrich
6 a93e56c5 Matthew Grooms
	Copyright (C) 2008 Shrew Soft Inc <mgrooms@shrew.net>.
7 cf7d1057 Scott Ullrich
	All rights reserved.
8
9
	Parts of this code was originally based on vpn_ipsec_sad.php
10
	Copyright (C) 2003-2004 Manuel Kasper
11
12
	Redistribution and use in source and binary forms, with or without
13
	modification, are permitted provided that the following conditions are met:
14
15
	1. Redistributions of source code must retain the above copyright notice,
16
	   this list of conditions and the following disclaimer.
17
18
	2. Redistributions in binary form must reproduce the above copyright
19
	   notice, this list of conditions and the following disclaimer in the
20
	   documentation and/or other materials provided with the distribution.
21
22
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
23
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
24
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
25
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
26
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
28
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
29
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
30
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
31
	POSSIBILITY OF SUCH DAMAGE.
32
*/
33
34 13d193c2 Scott Ullrich
/*
35
	pfSense_MODULE:	ipsec
36
*/
37
38 6b07c15a Matthew Grooms
##|+PRIV
39
##|*IDENT=page-status-ipsec
40
##|*NAME=Status: IPsec page
41
##|*DESCR=Allow access to the 'Status: IPsec' page.
42
##|*MATCH=diag_ipsec.php*
43
##|-PRIV
44
45
46 a93e56c5 Matthew Grooms
global $g;
47
48 f8ec8de4 Renato Botelho
$pgtitle = array(gettext("Status"),gettext("IPsec"));
49 b32dd0a6 jim-p
$shortcut_section = "ipsec";
50 cf7d1057 Scott Ullrich
51
require("guiconfig.inc");
52
include("head.inc");
53 483e6de8 Scott Ullrich
require("ipsec.inc");
54 a93e56c5 Matthew Grooms
55 6e8b0ec3 jim-p
if ($_GET['act'] == "connect") {
56
	if (is_ipaddr($_GET['remoteid']) && is_ipaddr($_GET['source'])) {
57
		exec("/sbin/ping -S " . escapeshellarg($_GET['source']) . " -c 1 " . escapeshellarg($_GET['remoteid']));
58
	}
59
}
60
61 6e0b68bf jim-p
62
if ($_GET['act'] == "disconnect") {
63
	if (!empty($_GET['user'])) {
64
		ipsec_disconnect_mobile($_GET['user']);
65
		sleep(1);
66
		$savemsg = gettext("Disconnected user") . " " . $_GET['user'];
67
	}
68
}
69
70 a93e56c5 Matthew Grooms
if (!is_array($config['ipsec']['phase2']))
71
    $config['ipsec']['phase2'] = array();
72
73
$a_phase2 = &$config['ipsec']['phase2'];
74
75
$spd = ipsec_dump_spd();
76
$sad = ipsec_dump_sad();
77 6e0b68bf jim-p
$mobile = ipsec_dump_mobile();
78 a93e56c5 Matthew Grooms
79 cf7d1057 Scott Ullrich
?>
80
81 6e0b68bf jim-p
<body link="#0000CC" vlink="#0000CC" alink="#0000CC" onload="<?php echo $jsevents["body"]["onload"]; ?>">
82 cf7d1057 Scott Ullrich
<?php include("fbegin.inc"); ?>
83
<div id="inputerrors"></div>
84
<table width="100%" border="0" cellpadding="0" cellspacing="0">
85
	<tr>
86 a93e56c5 Matthew Grooms
		<td>
87
			<?php
88
				$tab_array = array();
89 f8ec8de4 Renato Botelho
				$tab_array[0] = array(gettext("Overview"), true, "diag_ipsec.php");
90
				$tab_array[1] = array(gettext("SAD"), false, "diag_ipsec_sad.php");
91
				$tab_array[2] = array(gettext("SPD"), false, "diag_ipsec_spd.php");
92
				$tab_array[3] = array(gettext("Logs"), false, "diag_logs_ipsec.php");
93 a93e56c5 Matthew Grooms
				display_top_tabs($tab_array);
94
			?>
95 331aa57b Scott Ullrich
		</td>
96 cf7d1057 Scott Ullrich
	</tr>
97 a93e56c5 Matthew Grooms
	<tr>
98 6e0b68bf jim-p
	<td>
99 a93e56c5 Matthew Grooms
			<div id="mainarea">
100 034b4918 Scott Ullrich
				<table width="100%" border="0" cellpadding="6" cellspacing="0" class="tabcont sortable">
101 6e0b68bf jim-p
					<thead>
102 a93e56c5 Matthew Grooms
					<tr>
103 6e0b68bf jim-p
						<th nowrap class="listhdrr"><?php echo gettext("Local IP");?></th>
104
						<th nowrap class="listhdrr"><?php echo gettext("Remote IP");?></a></th>
105
						<th nowrap class="listhdrr"><?php echo gettext("Local Network");?></th>
106
						<th nowrap class="listhdrr"><?php echo gettext("Remote Network");?></a></th>
107
						<th nowrap class="listhdrr"><?php echo gettext("Description");?></a></th>
108
						<th nowrap class="listhdrr"><?php echo gettext("Status");?></th>
109 a93e56c5 Matthew Grooms
					</tr>
110 6e0b68bf jim-p
					</thead>
111
					<tbody>
112 a93e56c5 Matthew Grooms
					<?php
113
						foreach ($a_phase2 as $ph2ent) {
114 6e0b68bf jim-p
							if ($ph2ent['remoteid']['type'] == "mobile")
115
								continue;
116 221f5d17 Chris Buechler
							ipsec_lookup_phase1($ph2ent,$ph1ent);
117
							if (!isset($ph2ent['disabled']) && !isset($ph1ent['disabled'])) {
118 4976f453 Cristian Feldman
								if(ipsec_phase2_status($spd,$sad,$ph1ent,$ph2ent)) {
119 a93e56c5 Matthew Grooms
									$icon = "pass";
120 4976f453 Cristian Feldman
									$status = "Active";
121
								} elseif(!isset($config['ipsec']['enable'])) {
122 b385327a Chris Buechler
									$icon = "block";
123 4976f453 Cristian Feldman
									$status = "Disabled";
124
								} else {
125 a93e56c5 Matthew Grooms
									$icon = "reject";
126 4976f453 Cristian Feldman
									$status = "Error";
127
								}
128 a93e56c5 Matthew Grooms
					?>
129
					<tr>
130
						<td class="listlr">
131 6e0b68bf jim-p
							<?php echo htmlspecialchars(ipsec_get_phase1_src($ph1ent));?>
132 a93e56c5 Matthew Grooms
						</td>
133
						<td class="listr">
134 6e0b68bf jim-p
							<?php echo htmlspecialchars($ph1ent['remote-gateway']);?>
135 a93e56c5 Matthew Grooms
						</td>
136
						<td class="listr">
137
							<?php echo ipsec_idinfo_to_text($ph2ent['localid']); ?>
138
						</td>
139
						<td class="listr">
140
							<?php echo ipsec_idinfo_to_text($ph2ent['remoteid']); ?>
141
						</td>
142 6e0b68bf jim-p
						<td class="listr"><?php echo htmlspecialchars($ph2ent['descr']);?></td>
143 a93e56c5 Matthew Grooms
						<td class="listr">
144 ba363183 Scott Ullrich
							<center>
145 6e0b68bf jim-p
								<img src ="/themes/<?php echo $g['theme']; ?>/images/icons/icon_<?php echo $icon; ?>.gif" title="<?php echo $status; ?>">
146 ba363183 Scott Ullrich
							</center>
147 a93e56c5 Matthew Grooms
						</td>
148 6e8b0ec3 jim-p
						<td class="list">
149
							<?php
150
							$source = "";
151 59231855 Darren Embry
							$ip_interface = null;
152
							$ip_alias = null;
153 6e8b0ec3 jim-p
							if ($ph2ent['localid']['type'] == 'lan') {
154
								$source = get_interface_ip('lan');
155 59231855 Darren Embry
							} else if ($ph2ent['localid']['type'] == 'network') {
156
								$ip_interface = find_ip_interface($ph2ent['localid']['address'], $ph2ent['localid']['netbits']);
157
								if (!$ip_interface) {
158
									$ip_alias = find_virtual_ip_alias($ph2ent['localid']['address'], $ph2ent['localid']['netbits']);
159
								}
160 6e8b0ec3 jim-p
							} else {
161 59231855 Darren Embry
								$ip_interface = find_ip_interface($ph2ent['localid']['address']);
162
								if (!$ip_interface) {
163
									$ip_alias = find_virtual_ip_alias($ph2ent['localid']['address']);
164
								}
165
							}
166
							if ($ip_interface) {
167
								$source = get_interface_ip($ip_interface);
168
							} else if ($ip_alias) {
169
								$source = $ip_alias['subnet'];
170 6e8b0ec3 jim-p
							}
171
							?>
172
							<?php if (($ph2ent['remoteid']['type'] != "mobile") && ($icon != "pass") && ($source != "")): ?>
173
							<center>
174 6e0b68bf jim-p
								<a href="diag_ipsec.php?act=connect&remoteid=<?php echo $ph2ent['remoteid']['address']; ?>&source=<?php echo $source; ?>">
175
								<img src ="/themes/<?php echo $g['theme']; ?>/images/icons/icon_service_start.gif" alt="Connect VPN" title="Connect VPN" border="0">
176 6e8b0ec3 jim-p
								</a>
177
							</center>
178
							<?php else: ?>
179
								&nbsp;
180
							<?php endif; ?>
181
						</td>
182 a93e56c5 Matthew Grooms
					</tr>
183
					<?php
184
							}
185
						}
186
					?>
187 6e0b68bf jim-p
					</tbody>
188
				</table>
189
				<?php if (isset($config['ipsec']['client']['enable'])): ?>
190
				<table width="100%" border="0" cellpadding="6" cellspacing="0" class="tabcont sortable">
191
					<thead>
192
					<tr>
193
						<th nowrap class="listhdrr"><?php echo gettext("Mobile User");?></th>
194
						<th nowrap class="listhdrr"><?php echo gettext("Login Time");?></a></th>
195
						<th nowrap class="listhdrr"><?php echo gettext("Local");?></th>
196
						<th nowrap class="listhdrr"><?php echo gettext("Remote");?></a></th>
197
						<th nowrap class="list">&nbsp;</th>
198
					</tr>
199
					</thead>
200
					<tbody>
201
					<?php	foreach ($mobile as $muser): ?>
202
					<tr>
203
						<td class="listlr"><?php echo $muser['username']; ?></td>
204
						<td class="listr" align="center"><?php echo $muser['logintime']; ?></td>
205
						<td class="listr" align="center"><?php echo $muser['local']; ?></td>
206
						<td class="listr" align="center"><?php echo $muser['remote']; ?></td>
207
						<td class="list" align="center"><a href="diag_ipsec.php?act=disconnect&user=<?php echo $muser['username']; ?>"><img src='/themes/<?php echo $g['theme']; ?>/images/icons/icon_x.gif' height='17' width='17' border='0'/></a></td>
208
					</tr>
209
					<?php	endforeach; ?>
210
					</tbody>
211 a93e56c5 Matthew Grooms
				</table>
212 6e0b68bf jim-p
				<?php endif; ?>
213 a93e56c5 Matthew Grooms
			</div>
214 cf7d1057 Scott Ullrich
		</td>
215 a93e56c5 Matthew Grooms
	</tr>
216 cf7d1057 Scott Ullrich
</table>
217
218 0f78d3ad Scott Ullrich
<p/>
219
220
<span class="vexpl">
221
	<span class="red">
222 6e0b68bf jim-p
		<strong><?php echo gettext("Note:");?><br /></strong>
223 0f78d3ad Scott Ullrich
	</span>
224 6e0b68bf jim-p
	<?php echo gettext("You can configure IPsec");?>
225 0f78d3ad Scott Ullrich
	<a href="vpn_ipsec.php">here</a>.
226
</span>
227
228 cf7d1057 Scott Ullrich
<?php include("fend.inc"); ?>
229
</body>
230
</html>