Project

General

Profile

Download (33.8 KB) Statistics
| Branch: | Tag: | Revision:
1 4cd437f2 Ermal Lu?i
<?xml version="1.0" encoding="utf-8" ?>
2
<pfsensewizard>
3
<copyright>
4
/*
5 c7281770 Chris Buechler
	part of pfSense (https://www.pfsense.org/)
6 4cd437f2 Ermal Lu?i
7 6900e5b2 Ermal
	Copyright (C) 2010 Ermal Luci
8 5ce63c3e jim-p
	All rights reserved.
9 4cd437f2 Ermal Lu?i
10 5ce63c3e jim-p
	Redistribution and use in source and binary forms, with or without
11
	modification, are permitted provided that the following conditions are met:
12 4cd437f2 Ermal Lu?i
13 5ce63c3e jim-p
	1. Redistributions of source code must retain the above copyright notice,
14
	   this list of conditions and the following disclaimer.
15 4cd437f2 Ermal Lu?i
16 5ce63c3e jim-p
	2. Redistributions in binary form must reproduce the above copyright
17
	   notice, this list of conditions and the following disclaimer in the
18
	   documentation and/or other materials provided with the distribution.
19 4cd437f2 Ermal Lu?i
20 5ce63c3e jim-p
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
21
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
22
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
23
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
24
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29
	POSSIBILITY OF SUCH DAMAGE.
30 4cd437f2 Ermal Lu?i
*/
31
</copyright>
32 dba6bcbf Ermal Lu?i
<totalsteps>12</totalsteps>
33 4cd437f2 Ermal Lu?i
<step>
34
	<id>1</id>
35 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Authentication Type Selection</title>
36 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
37 9cb9c7d4 jim-p
	<disableheader>on</disableheader>
38 4cd437f2 Ermal Lu?i
	<fields>
39 9cb9c7d4 jim-p
		<field>
40
			<type>listtopic</type>
41
			<name>Select an Authentication Backend Type</name>
42
		</field>
43 4cd437f2 Ermal Lu?i
		<field>
44
			<type>select</type>
45
			<displayname>Type of Server</displayname>
46
			<name>authtype</name>
47 b256213d Warren Baker
			<description>&lt;br/&gt;&lt;b&gt;NOTE:&lt;/b&gt; If you are unsure, leave this set to "Local User Access."</description>
48 eb20f3c5 Ermal Lu?i
			<bindstofield>ovpnserver->step1->type</bindstofield>
49 4cd437f2 Ermal Lu?i
			<options>
50
				<option>
51
					<name>Local User Access</name>
52
					<value>local</value>
53
				</option>
54
				<option>
55
					<name>LDAP</name>
56
					<value>ldap</value>
57
				</option>
58
				<option>
59
					<name>Radius</name>
60
					<value>radius</value>
61
				</option>
62
			</options>
63
		</field>
64
		<field>
65
			<name>Next</name>
66
			<type>submit</type>
67
		</field>
68
	</fields>
69 2ca50c87 Ermal Lu?i
	<stepsubmitphpaction>step1_submitphpaction();</stepsubmitphpaction>
70 5ce63c3e jim-p
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
71 4cd437f2 Ermal Lu?i
</step>
72
<step>
73
	<id>2</id>
74 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: LDAP Server Selection</title>
75 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
76
	<disableheader>on</disableheader>
77 4cd437f2 Ermal Lu?i
	<fields>
78
		<field>
79
			<type>listtopic</type>
80 9cb9c7d4 jim-p
			<name>LDAP Authentication Server List</name>
81 4cd437f2 Ermal Lu?i
		</field>
82
		<field>
83 5ce63c3e jim-p
			<name>authserv</name>
84 916fae48 jim-p
			<displayname>LDAP servers</displayname>
85 5ce63c3e jim-p
			<type>select</type>
86
			<bindstofield>ovpnserver->step2->authserv</bindstofield>
87 4cd437f2 Ermal Lu?i
			<options>
88 5ce63c3e jim-p
				<option>
89
					<name>dummy</name>
90
					<value>dummy</value>
91
				</option>
92
			</options>
93
		</field>
94 dba6bcbf Ermal Lu?i
		<field>
95
			<type>submit</type>
96
			<name>Add new LDAP server</name>
97
		</field>
98 4cd437f2 Ermal Lu?i
		<field>
99
			<type>submit</type>
100
			<name>Next</name>
101
		</field>
102 2ca50c87 Ermal Lu?i
	</fields>
103
	<stepbeforeformdisplay>step2_stepbeforeformdisplay();</stepbeforeformdisplay>
104 5ce63c3e jim-p
	<stepsubmitphpaction>step2_submitphpaction();</stepsubmitphpaction>
105
	<javascriptafterformdisplay>enablechange();</javascriptafterformdisplay>
106
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
107 2ca50c87 Ermal Lu?i
</step>
108
<step>
109
	<id>3</id>
110 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Add LDAP Server</title>
111 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
112
	<disableheader>on</disableheader>
113 2ca50c87 Ermal Lu?i
	<fields>
114 4cd437f2 Ermal Lu?i
		<field>
115
			<type>listtopic</type>
116 9cb9c7d4 jim-p
			<name>LDAP Authentication Server Parameters</name>
117 4cd437f2 Ermal Lu?i
		</field>
118
		<field>
119
			<name>name</name>
120
			<displayname>Name</displayname>
121
			<type>input</type>
122
			<bindstofield>ovpnserver->step2->authtype</bindstofield>
123 6d80857f jim-p
			<size>30</size>
124 99a00640 jim-p
			<description>Descriptive server name, for your own reference.</description>
125 4cd437f2 Ermal Lu?i
		</field>
126
		<field>
127
			<name>ip</name>
128
			<displayname>Hostname or IP address</displayname>
129
			<type>input</type>
130
			<bindstofield>ovpnserver->step2->ip</bindstofield>
131 99a00640 jim-p
			<description>Address of the LDAP server.</description>
132 4cd437f2 Ermal Lu?i
		</field>
133
		<field>
134
			<name>port</name>
135
			<displayname>Port</displayname>
136
			<type>input</type>
137
			<size>8</size>
138
			<bindstofield>ovpnserver->step2->port</bindstofield>
139 99a00640 jim-p
			<description>LDAP Server port, leave blank for the default (389 for TCP, 636 for SSL).</description>
140 4cd437f2 Ermal Lu?i
		</field>
141
		<field>
142
			<name>transport</name>
143
			<displayname>Transport</displayname>
144
			<type>select</type>
145
			<bindstofield>ovpnserver->step2->transport</bindstofield>
146
			<options>
147
				<option>
148
					<name>TCP - Standard</name>
149
					<value>tcp</value>
150
				</option>
151
				<option>
152
					<name>SSL - Encrypted</name>
153
					<value>ssl</value>
154
				</option>
155
			</options>
156 99a00640 jim-p
			<description>&lt;br/&gt;The protocol used by your LDAP server. It can either be standard TCP or SSL encrypted.</description>
157 4cd437f2 Ermal Lu?i
		</field>
158
		<field>
159
			<name>scope</name>
160 99a00640 jim-p
			<displayname>Search Scope Level</displayname>
161
			<type>select</type>
162
			<options>
163
				<option>
164
					<name>One Level</name>
165
					<value>one</value>
166
				</option>
167
				<option>
168
					<name>Entire Subtree</name>
169
					<value>subtree</value>
170
				</option>
171
			</options>
172 4cd437f2 Ermal Lu?i
			<bindstofield>ovpnserver->step2->scope</bindstofield>
173
		</field>
174 99a00640 jim-p
		<field>
175
			<name>basedn</name>
176
			<displayname>Search Scope Base DN</displayname>
177
			<type>input</type>
178
			<size>40</size>
179
			<bindstofield>ovpnserver->step2->basedn</bindstofield>
180
		</field>
181 4cd437f2 Ermal Lu?i
		<field>
182
			<name>authscope</name>
183
			<displayname>Authentication Containers</displayname>
184
			<type>input</type>
185
			<size>40</size>
186
			<bindstofield>ovpnserver->step2->authscope</bindstofield>
187 99a00640 jim-p
			<description>Semi-Colon separated. This will be prepended to the search base dn above or you can specify full container path.&lt;br/&gt;EXAMPLE: CN=Users;DC=example&lt;br/&gt;EXAMPLE: CN=Users,DC=example,DC=com;OU=OtherUsers,DC=example,DC=com </description>
188 4cd437f2 Ermal Lu?i
		</field>
189
		<field>
190
			<name>userdn</name>
191 99a00640 jim-p
			<displayname>LDAP Bind User DN</displayname>
192 4cd437f2 Ermal Lu?i
			<type>input</type>
193
			<size>20</size>
194 99a00640 jim-p
			<description>If left blank, an anonymous bind will be done.</description>
195 eb20f3c5 Ermal Lu?i
			<bindstofield>ovpnserver->step2->userdn</bindstofield>
196 4cd437f2 Ermal Lu?i
		</field>
197
		<field>
198
			<name>passdn</name>
199 99a00640 jim-p
			<displayname>LDAP Bind Password</displayname>
200 4cd437f2 Ermal Lu?i
			<type>password</type>
201
			<size>20</size>
202 eb20f3c5 Ermal Lu?i
			<bindstofield>ovpnserver->step2->passdn</bindstofield>
203 99a00640 jim-p
			<description>If a user DN was supplied above, this password will also be used when performing a bind operation.</description>
204 4cd437f2 Ermal Lu?i
		</field>
205
		<field>
206
			<name>nameattr</name>
207 18f8f9a3 jim-p
			<displayname>User Naming Attribute</displayname>
208 4cd437f2 Ermal Lu?i
			<type>input</type>
209
			<bindstofield>ovpnserver->step2->nameattr</bindstofield>
210 a4973f08 jim-p
			<description>Typically "cn" (OpenLDAP, Novell eDirectory), "samAccountName" (Microsoft AD)</description>
211 5ce63c3e jim-p
		</field>
212 eb20f3c5 Ermal Lu?i
		<field>
213 5ce63c3e jim-p
			<name>groupattr</name>
214 18f8f9a3 jim-p
			<displayname>Group Naming Attribute</displayname>
215 5ce63c3e jim-p
			<type>input</type>
216
			<bindstofield>ovpnserver->step2->groupattr</bindstofield>
217 99a00640 jim-p
			<description>Typically "cn" (OpenLDAP, Microsoft AD, and Novell eDirectory)</description>
218
		</field>
219
		<field>
220
			<name>memberattr</name>
221 18f8f9a3 jim-p
			<displayname>Member Naming Attribute</displayname>
222 99a00640 jim-p
			<type>input</type>
223
			<bindstofield>ovpnserver->step2->memberattr</bindstofield>
224
			<description>Typically "member" (OpenLDAP), "memberOf" (Microsoft AD), "uniqueMember" (Novell eDirectory)</description>
225 5ce63c3e jim-p
		</field>
226 4cd437f2 Ermal Lu?i
		<field>
227
			<type>submit</type>
228
			<name>Add new Server</name>
229
		</field>
230
	</fields>
231
	<stepsubmitphpaction>step3_submitphpaction();</stepsubmitphpaction>
232
	<javascriptafterformdisplay>enablechange();</javascriptafterformdisplay>
233
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
234
</step>
235
<step>
236 5ce63c3e jim-p
	<id>4</id>
237 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: RADIUS Server Selection</title>
238 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
239
	<disableheader>on</disableheader>
240 5ce63c3e jim-p
	<fields>
241
		<field>
242
			<type>listtopic</type>
243 9cb9c7d4 jim-p
			<name>RADIUS Authentication Server List</name>
244 5ce63c3e jim-p
		</field>
245
		<field>
246
			<name>authserv</name>
247 916fae48 jim-p
			<displayname>RADIUS servers</displayname>
248 5ce63c3e jim-p
			<type>select</type>
249
			<bindstofield>ovpnserver->step2->authserv</bindstofield>
250
			<options>
251
				<option>
252
					<name>dummy</name>
253
					<value>dummy</value>
254
				</option>
255
			</options>
256
		</field>
257
		<field>
258
			<type>submit</type>
259
			<name>Add new RADIUS server</name>
260
		</field>
261
		<field>
262
			<type>submit</type>
263
			<name>Next</name>
264
		</field>
265 2ca50c87 Ermal Lu?i
	</fields>
266 5ce63c3e jim-p
	<stepbeforeformdisplay>step4_stepbeforeformdisplay();</stepbeforeformdisplay>
267
	<stepsubmitphpaction>step4_submitphpaction();</stepsubmitphpaction>
268
	<javascriptafterformdisplay>enablechange();</javascriptafterformdisplay>
269
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
270 2ca50c87 Ermal Lu?i
</step>
271
<step>
272
	<id>5</id>
273 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Add RADIUS Server</title>
274 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
275
	<disableheader>on</disableheader>
276 2ca50c87 Ermal Lu?i
	<fields>
277 5ce63c3e jim-p
		<field>
278
			<type>listtopic</type>
279 9cb9c7d4 jim-p
			<name>RADIUS Authentication Server Parameters</name>
280 5ce63c3e jim-p
		</field>
281
		<field>
282
			<name>name</name>
283
			<displayname>Name</displayname>
284
			<type>input</type>
285 4cd437f2 Ermal Lu?i
			<bindstofield>ovpnserver->step2->authtype</bindstofield>
286 6d80857f jim-p
			<size>20</size>
287 916fae48 jim-p
			<description>Descriptive name for the RADIUS server, for your reference.</description>
288 5ce63c3e jim-p
		</field>
289
		<field>
290
			<name>ip</name>
291
			<displayname>Hostname or IP address</displayname>
292
			<type>input</type>
293 4cd437f2 Ermal Lu?i
			<bindstofield>ovpnserver->step2->ip</bindstofield>
294 916fae48 jim-p
			<description>Address of the RADIUS server.</description>
295 5ce63c3e jim-p
		</field>
296
		<field>
297
			<name>port</name>
298
			<displayname>Authentication Port</displayname>
299
			<type>input</type>
300
			<size>8</size>
301 4cd437f2 Ermal Lu?i
			<bindstofield>ovpnserver->step2->port</bindstofield>
302 916fae48 jim-p
			<description>Port used by the RADIUS server for accepting Authentication requests, typically 1812.</description>
303 5ce63c3e jim-p
		</field>
304
		<field>
305
			<name>secret</name>
306
			<displayname>Shared Secret</displayname>
307
			<type>password</type>
308
			<size>20</size>
309 4cd437f2 Ermal Lu?i
			<bindstofield>ovpnserver->step2->password</bindstofield>
310 916fae48 jim-p
			<description></description>
311 5ce63c3e jim-p
		</field>
312 4cd437f2 Ermal Lu?i
		<field>
313
			<name>Add new Server</name>
314
			<type>submit</type>
315
		</field>
316
	</fields>
317 2ca50c87 Ermal Lu?i
	<stepsubmitphpaction>step5_submitphpaction();</stepsubmitphpaction>
318 4cd437f2 Ermal Lu?i
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
319
</step>
320
<step>
321 2ca50c87 Ermal Lu?i
	<id>6</id>
322 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Certificate Authority Selection</title>
323 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
324
	<disableheader>on</disableheader>
325 4cd437f2 Ermal Lu?i
	<fields>
326 7a2ec71b Ermal Lu?i
		<field>
327 9cb9c7d4 jim-p
			<name>Choose a Certificate Authority (CA)</name>
328 7a2ec71b Ermal Lu?i
			<type>listtopic</type>
329
		</field>
330 4cd437f2 Ermal Lu?i
		<field>
331
			<type>certca_selection</type>
332
			<name>certca</name>
333
			<displayname>Certificate Authority</displayname>
334 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->authcertca</bindstofield>
335 4cd437f2 Ermal Lu?i
		</field>
336 dba6bcbf Ermal Lu?i
		<field>
337 5ce63c3e jim-p
			<type>submit</type>
338
			<name>Add new CA</name>
339
		</field>
340 4cd437f2 Ermal Lu?i
		<field>
341
			<name>Next</name>
342
			<type>submit</type>
343
		</field>
344 2ca50c87 Ermal Lu?i
	</fields>
345 5ce63c3e jim-p
	<stepbeforeformdisplay>step6_stepbeforeformdisplay();</stepbeforeformdisplay>
346
	<stepsubmitphpaction>step6_submitphpaction();</stepsubmitphpaction>
347
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
348 2ca50c87 Ermal Lu?i
</step>
349
<step>
350
	<id>7</id>
351 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Add Certificate Authority</title>
352 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
353
	<disableheader>on</disableheader>
354 5ce63c3e jim-p
	<fields>
355 4cd437f2 Ermal Lu?i
		<field>
356 9cb9c7d4 jim-p
			<name>Create a New Certificate Authority (CA) Certificate</name>
357 4cd437f2 Ermal Lu?i
			<type>listtopic</type>
358
		</field>
359
		<field>
360 8f87a4a2 jim-p
			<name>descr</name>
361 4cd437f2 Ermal Lu?i
			<displayname>Descriptive name</displayname>
362 5ce63c3e jim-p
			<description>A name for your reference, to identify this certificate. This is the same as common-name field for other Certificates.</description>
363 4cd437f2 Ermal Lu?i
			<type>input</type>
364 6d80857f jim-p
			<size>20</size>
365 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->certca</bindstofield>
366 4cd437f2 Ermal Lu?i
		</field>
367
		<field>
368
			<name>keylength</name>
369
			<displayname>Key length</displayname>
370 5ce63c3e jim-p
			<description>&lt;br/&gt;Size of the key which will be generated. The larger the key, the more security is offers, but larger keys are generally slower to use.</description>
371 4cd437f2 Ermal Lu?i
			<type>select</type>
372 47aa4fc4 Ermal
			<value>2048</value>
373 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->keylength</bindstofield>
374 4cd437f2 Ermal Lu?i
			<options>
375 5ce63c3e jim-p
				<option>
376
					<name>512 bit</name>
377
					<value>512</value>
378
				</option>
379
				<option>
380
					<name>1024 bit</name>
381
					<value>1024</value>
382
				</option>
383
				<option>
384
					<name>2048 bit</name>
385
					<value>2048</value>
386
				</option>
387
				<option>
388
					<name>4096 bit</name>
389
					<value>4096</value>
390
				</option>
391
			</options>
392 4cd437f2 Ermal Lu?i
		</field>
393
		<field>
394
			<name>lifetime</name>
395
			<displayname>Lifetime</displayname>
396
			<type>input</type>
397
			<size>10</size>
398 47aa4fc4 Ermal
			<value>3650</value>
399 5ce63c3e jim-p
			<description>Lifetime in days. This is commonly set to 3650 (Approximately 10 years.)</description>
400 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->lifetime</bindstofield>
401 4cd437f2 Ermal Lu?i
		</field>
402
		<field>
403
			<name>country</name>
404
			<displayname>Country Code</displayname>
405 5ce63c3e jim-p
			<description>Two-letter ISO country code (e.g. US, AU, CA) </description>
406 4cd437f2 Ermal Lu?i
			<type>input</type>
407
			<size>5</size>
408 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->country</bindstofield>
409 4cd437f2 Ermal Lu?i
		</field>
410
		<field>
411
			<name>state</name>
412
			<displayname>State or Province</displayname>
413 5ce63c3e jim-p
			<description>Full State of Province name, not abbreviated (e.g. Kentucky, Indiana, Ontario).</description>
414 4cd437f2 Ermal Lu?i
			<type>input</type>
415
			<size>30</size>
416 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->state</bindstofield>
417 4cd437f2 Ermal Lu?i
		</field>
418
		<field>
419
			<name>city</name>
420
			<displayname>City</displayname>
421 5ce63c3e jim-p
			<description>City or other Locality name (e.g. Louisville, Indianapolis, Toronto).</description>
422 4cd437f2 Ermal Lu?i
			<type>input</type>
423
			<size>30</size>
424 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->city</bindstofield>
425 4cd437f2 Ermal Lu?i
		</field>
426
		<field>
427
			<name>organization</name>
428
			<displayname>Organization</displayname>
429 5ce63c3e jim-p
			<description>Organization name, often the Company or Group name.</description>
430 4cd437f2 Ermal Lu?i
			<type>input</type>
431
			<size>30</size>
432 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->organization</bindstofield>
433 4cd437f2 Ermal Lu?i
		</field>
434
		<field>
435
			<name>email</name>
436
			<displayname>E-mail</displayname>
437 5ce63c3e jim-p
			<description>E-mail address for the Certificate contact. Often the e-mail of the person generating the certificate (i.e. You.)</description>
438 4cd437f2 Ermal Lu?i
			<type>input</type>
439
			<size>30</size>
440 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step6->email</bindstofield>
441 4cd437f2 Ermal Lu?i
		</field>
442
		<field>
443
			<name>Add new CA</name>
444
			<type>submit</type>
445
		</field>
446
	</fields>
447 2ca50c87 Ermal Lu?i
	<stepsubmitphpaction>step7_submitphpaction();</stepsubmitphpaction>
448 4cd437f2 Ermal Lu?i
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
449
	<javascriptafterformdisplay>enablechange();</javascriptafterformdisplay>
450
</step>
451
<step>
452 2ca50c87 Ermal Lu?i
	<id>8</id>
453 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Server Certificate Selection</title>
454 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
455
	<disableheader>on</disableheader>
456 4cd437f2 Ermal Lu?i
	<fields>
457 7a2ec71b Ermal Lu?i
		<field>
458 5ce63c3e jim-p
			<name>Choose a Server Certificate</name>
459
			<type>listtopic</type>
460
		</field>
461 4cd437f2 Ermal Lu?i
		<field>
462
			<type>cert_selection</type>
463 1e3c34b0 Ermal Lu?i
			<name>certname</name>
464 4cd437f2 Ermal Lu?i
			<displayname>Certificate</displayname>
465 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->authcertname</bindstofield>
466 4cd437f2 Ermal Lu?i
		</field>
467 dba6bcbf Ermal Lu?i
		<field>
468 5ce63c3e jim-p
			<type>submit</type>
469
			<name>Add new Certificate</name>
470
		</field>
471 4cd437f2 Ermal Lu?i
		<field>
472
			<name>Next</name>
473
			<type>submit</type>
474
		</field>
475 2ca50c87 Ermal Lu?i
	</fields>
476
	<stepbeforeformdisplay>step8_stepbeforeformdisplay();</stepbeforeformdisplay>
477
	<stepsubmitphpaction>step8_submitphpaction();</stepsubmitphpaction>
478 5ce63c3e jim-p
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
479 2ca50c87 Ermal Lu?i
</step>
480
<step>
481 5ce63c3e jim-p
	<id>9</id>
482 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Add a Server Certificate</title>
483 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
484
	<disableheader>on</disableheader>
485 5ce63c3e jim-p
	<fields>
486 4cd437f2 Ermal Lu?i
		<field>
487 9cb9c7d4 jim-p
			<name>Create a New Server Certificate</name>
488 4cd437f2 Ermal Lu?i
			<type>listtopic</type>
489
		</field>
490
		<field>
491 8f87a4a2 jim-p
			<name>descr</name>
492 4cd437f2 Ermal Lu?i
			<displayname>Descriptive name</displayname>
493 5ce63c3e jim-p
			<description>A name for your reference, to identify this certificate. This is also known as the certificate's "Common Name."</description>
494 4cd437f2 Ermal Lu?i
			<type>input</type>
495 6d80857f jim-p
			<size>20</size>
496 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->certname</bindstofield>
497 4cd437f2 Ermal Lu?i
		</field>
498
		<field>
499
			<name>keylength</name>
500
			<displayname>Key length</displayname>
501 5ce63c3e jim-p
			<description>&lt;br/&gt;Size of the key which will be generated. The larger the key, the more security is offers, but larger keys are generally slower to use.</description>
502 4cd437f2 Ermal Lu?i
			<type>select</type>
503 47aa4fc4 Ermal
			<value>2048</value>
504 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->keylength</bindstofield>
505 4cd437f2 Ermal Lu?i
			<options>
506 5ce63c3e jim-p
				<option>
507
					<name>512 bits</name>
508
					<value>512</value>
509
				</option>
510
				<option>
511
					<name>1024 bits</name>
512
					<value>1024</value>
513
				</option>
514
				<option>
515
					<name>2048 bits</name>
516
					<value>2048</value>
517
				</option>
518
				<option>
519
					<name>4096 bits</name>
520
					<value>4096</value>
521
				</option>
522
			</options>
523 4cd437f2 Ermal Lu?i
		</field>
524
		<field>
525
			<name>lifetime</name>
526
			<displayname>Lifetime</displayname>
527 5ce63c3e jim-p
			<description>Lifetime in days. This is commonly set to 3650 (Approximately 10 years.)</description>
528 4cd437f2 Ermal Lu?i
			<type>input</type>
529
			<size>10</size>
530 47aa4fc4 Ermal
			<value>3650</value>
531 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->lifetime</bindstofield>
532 4cd437f2 Ermal Lu?i
		</field>
533
		<field>
534
			<name>country</name>
535
			<displayname>Country Code</displayname>
536 5ce63c3e jim-p
			<description>Two-letter ISO country code (e.g. US, AU, CA) </description>
537 4cd437f2 Ermal Lu?i
			<type>input</type>
538
			<size>5</size>
539 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->country</bindstofield>
540 4cd437f2 Ermal Lu?i
		</field>
541
		<field>
542
			<name>state</name>
543
			<displayname>State or Province</displayname>
544 5ce63c3e jim-p
			<description>Full State of Province name, not abbreviated (e.g. Kentucky, Indiana, Ontario).</description>
545 4cd437f2 Ermal Lu?i
			<type>input</type>
546
			<size>30</size>
547 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->state</bindstofield>
548 4cd437f2 Ermal Lu?i
		</field>
549
		<field>
550
			<name>city</name>
551
			<displayname>City</displayname>
552 5ce63c3e jim-p
			<description>City or other Locality name (e.g. Louisville, Indianapolis, Toronto).</description>
553 4cd437f2 Ermal Lu?i
			<type>input</type>
554
			<size>30</size>
555 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->city</bindstofield>
556 4cd437f2 Ermal Lu?i
		</field>
557
		<field>
558
			<name>organization</name>
559
			<displayname>Organization</displayname>
560 5ce63c3e jim-p
			<description>Organization name, often the Company or Group name.</description>
561 4cd437f2 Ermal Lu?i
			<type>input</type>
562
			<size>30</size>
563 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->organization</bindstofield>
564 4cd437f2 Ermal Lu?i
		</field>
565
		<field>
566
			<name>email</name>
567
			<displayname>E-mail</displayname>
568 5ce63c3e jim-p
			<description>E-mail address for the Certificate contact. Often the e-mail of the person generating the certificate (i.e. You.)</description>
569 4cd437f2 Ermal Lu?i
			<type>input</type>
570
			<size>30</size>
571 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step9->email</bindstofield>
572 4cd437f2 Ermal Lu?i
		</field>
573
		<field>
574
			<name>Create new Certificate</name>
575
			<type>submit</type>
576
		</field>
577
	</fields>
578 a314bebc Ermal
	<stepbeforeformdisplay>step9_stepbeforeformdisplay();</stepbeforeformdisplay>
579 2ca50c87 Ermal Lu?i
	<stepsubmitphpaction>step9_submitphpaction();</stepsubmitphpaction>
580 4cd437f2 Ermal Lu?i
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
581
</step>
582
<step>
583 2ca50c87 Ermal Lu?i
	<id>10</id>
584 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Server Setup</title>
585 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
586
	<disableheader>on</disableheader>
587 4cd437f2 Ermal Lu?i
	<fields>
588
		<field>
589
			<type>listtopic</type>
590 9cb9c7d4 jim-p
			<name>General OpenVPN Server Information</name>
591 4cd437f2 Ermal Lu?i
		</field>
592
		<field>
593
			<name>interface</name>
594
			<type>interfaces_selection</type>
595 5ce63c3e jim-p
			<description>The interface where OpenVPN will listen for incoming connections (typically WAN.)</description>
596 4cd437f2 Ermal Lu?i
			<displayname>Interface</displayname>
597 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->interface</bindstofield>
598 4cd437f2 Ermal Lu?i
		</field>
599
		<field>
600
			<name>Protocol</name>
601
			<type>select</type>
602 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->protocol</bindstofield>
603 4cd437f2 Ermal Lu?i
			<options>
604 5ce63c3e jim-p
				<option>
605
					<name>UDP</name>
606 c0f650c4 jim-p
					<value>UDP</value>
607 5ce63c3e jim-p
				</option>
608
				<option>
609
					<name>TCP</name>
610 c0f650c4 jim-p
					<value>TCP</value>
611 5ce63c3e jim-p
				</option>
612
			</options>
613
			<description>&lt;br/&gt;Protocol to use for OpenVPN connections. If you are unsure, leave this set to UDP.</description>
614 4cd437f2 Ermal Lu?i
		</field>
615
		<field>
616
			<name>localport</name>
617 b6fe3414 jim-p
			<displayname>Local Port</displayname>
618 5ce63c3e jim-p
			<description>Local port upon which OpenVPN will listen for connections. The default port is 1194. Leave this blank unless you need to use a different port.</description>
619 4cd437f2 Ermal Lu?i
			<type>input</type>
620
			<size>10</size>
621 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->localport</bindstofield>
622 4cd437f2 Ermal Lu?i
		</field>
623
		<field>
624
			<name>description</name>
625
			<displayname>Description</displayname>
626 5ce63c3e jim-p
			<description>A name for this OpenVPN instance, for your reference. It can be set however you like, but is often used to distinguish the purpose of the service (e.g. "Remote Technical Staff").</description>
627 4cd437f2 Ermal Lu?i
			<type>input</type>
628
			<size>30</size>
629 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->descr</bindstofield>
630 4cd437f2 Ermal Lu?i
		</field>
631
		<field>
632
			<type>listtopic</type>
633
			<name>Cryptographic Settings</name>
634
		</field>
635
		<field>
636
			<name>TLS Authentication</name>
637
			<type>checkbox</type>
638 eb20f3c5 Ermal Lu?i
			<value>on</value>
639 4cd437f2 Ermal Lu?i
			<description>Enable authentication of TLS packets.</description>
640 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->tlsauth</bindstofield>
641 4cd437f2 Ermal Lu?i
		</field>
642
		<field>
643 5ce63c3e jim-p
			<displayname>Generate TLS Key</displayname>
644 4cd437f2 Ermal Lu?i
			<name>generatetlskey</name>
645 1ae55320 Ermal
			<disablefields>tlssharedkey</disablefields>
646 eb20f3c5 Ermal Lu?i
			<value>on</value>
647 4cd437f2 Ermal Lu?i
			<type>checkbox</type>
648
			<description>Automatically generate a shared TLS authentication key.</description>
649 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->gentlskey</bindstofield>
650 4cd437f2 Ermal Lu?i
		</field>
651
		<field>
652 5ce63c3e jim-p
			<displayname>TLS Shared Key</displayname>
653 4cd437f2 Ermal Lu?i
			<name>tlssharedkey</name>
654 5ce63c3e jim-p
			<description>Paste in a shared TLS key if one has already been generated.</description>
655 4cd437f2 Ermal Lu?i
			<type>textarea</type>
656
			<cols>30</cols>
657
			<rows>5</rows>
658 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->tlskey</bindstofield>
659 4cd437f2 Ermal Lu?i
		</field>
660
		<field>
661
			<displayname>DH Parameters Length</displayname>
662
			<name>dhparameters</name>
663
			<type>select</type>
664 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->dhkey</bindstofield>
665 4cd437f2 Ermal Lu?i
			<options>
666 5ce63c3e jim-p
				<option>
667
					<name>1024 bit</name>
668
					<value>1024</value>
669
				</option>
670
				<option>
671
					<name>2048 bit</name>
672
					<value>2048</value>
673
				</option>
674
				<option>
675
					<name>4096 bit</name>
676
					<value>4096</value>
677
				</option>
678
			</options>
679
			<description>&lt;br/&gt;Length of Diffie-Hellman (DH) key exchange parameters, used for establishing a secure communications channel. As with other such settings, the larger values are more secure, but may be slower in operation.</description>
680 4cd437f2 Ermal Lu?i
		</field>
681 eb20f3c5 Ermal Lu?i
		<field>
682
			<name>crypto</name>
683
			<type>select</type>
684 b6fe3414 jim-p
			<displayname>Encryption Algorithm</displayname>
685 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->crypto</bindstofield>
686 eb20f3c5 Ermal Lu?i
			<options>
687 5ce63c3e jim-p
				<option>
688
					<name>dummy</name>
689
					<value>dummy</value>
690
				</option>
691 eb20f3c5 Ermal Lu?i
			</options>
692 5ce63c3e jim-p
			<description>&lt;br/&gt;The method used to encrypt traffic between endpoints. This setting must match on the client and server side, but is otherwise set however you like. Certain algorithms will perform better on different hardware, depending on the availability of supported VPN accelerator chips.</description>
693 eb20f3c5 Ermal Lu?i
		</field>
694 85bdf997 jim-p
		<field>
695
			<name>digest</name>
696
			<type>select</type>
697
			<displayname>Auth Digest Algorithm</displayname>
698
			<bindstofield>ovpnserver->step10->digest</bindstofield>
699
			<options>
700
				<option>
701
					<name>dummy</name>
702
					<value>dummy</value>
703
				</option>
704
			</options>
705
			<value>SHA1</value>
706
			<description>&lt;br/&gt;The method used to authenticate traffic between endpoints. This setting must match on the client and server side, but is otherwise set however you like.</description>
707
		</field>
708 582c58ae jim-p
		<field>
709
			<name>engine</name>
710
			<type>select</type>
711
			<displayname>Hardware Crypto</displayname>
712
			<bindstofield>ovpnserver->step10->engine</bindstofield>
713
			<options>
714
				<option>
715
					<name>dummy</name>
716
					<value>dummy</value>
717
				</option>
718
			</options>
719
			<description>&lt;br/&gt;The hardware cryptographic accelerator to use for this VPN connection, if any.</description>
720
		</field>
721 4cd437f2 Ermal Lu?i
		<field>
722
			<type>listtopic</type>
723
			<name>Tunnel Settings</name>
724
		</field>
725
		<field>
726 b6fe3414 jim-p
			<displayname>Tunnel Network</displayname>
727 eb20f3c5 Ermal Lu?i
			<name>tunnelnet</name>
728 4cd437f2 Ermal Lu?i
			<type>input</type>
729
			<size>20</size>
730 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->tunnelnet</bindstofield>
731 5ce63c3e jim-p
			<description>This is the virtual network used for private communications between this server and client hosts expressed using CIDR notation (eg. 10.0.8.0/24). The first network address will be assigned to the server virtual interface. The remaining network addresses can optionally be assigned to connecting clients. (see Address Pool)</description>
732 4cd437f2 Ermal Lu?i
		</field>
733
		<field>
734
			<displayname>Redirect Gateway</displayname>
735
			<name>redirectgw</name>
736
			<type>checkbox</type>
737
			<description>Force all client generated traffic through the tunnel.</description>
738 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->rdrgw</bindstofield>
739 4cd437f2 Ermal Lu?i
		</field>
740
		<field>
741 b6fe3414 jim-p
			<displayname>Local Network</displayname>
742 eb20f3c5 Ermal Lu?i
			<name>localnet</name>
743 4cd437f2 Ermal Lu?i
			<type>input</type>
744
			<size>20</size>
745 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->localnet</bindstofield>
746 5ce63c3e jim-p
			<description>This is the network that will be accessible from the remote endpoint, expressed as a CIDR range. You may leave this blank if you don't want to add a route to the local network through this tunnel on the remote machine. This is generally set to your LAN network.</description>
747
		</field>
748 4cd437f2 Ermal Lu?i
		<field>
749
			<displayname>Concurrent Connections</displayname>
750
			<name>concurrentcon</name>
751
			<description>Specify the maximum number of clients allowed to concurrently connect to this server.</description>
752
			<type>input</type>
753
			<size>10</size>
754 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->concurrentcon</bindstofield>
755 4cd437f2 Ermal Lu?i
		</field>
756
		<field>
757 5ce63c3e jim-p
			<displayname>Compression</displayname>
758
			<name>compression</name>
759 edba1982 jim-p
			<description>&lt;br/&gt;Compress tunnel packets using the LZO algorithm. Adaptive compression will dynamically disable compression for a period of time if OpenVPN detects that the data in the packets is not being compressed efficiently.</description>
760 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->compression</bindstofield>
761 edba1982 jim-p
			<type>select</type>
762
			<options>
763
				<option>
764
					<name>dummy</name>
765
					<value>dummy</value>
766
				</option>
767
			</options>
768 5ce63c3e jim-p
		</field>
769 4cd437f2 Ermal Lu?i
		<field>
770 5ce63c3e jim-p
			<displayname>Type-of-Service</displayname>
771
			<name>tos</name>
772
			<type>checkbox</type>
773
			<description>Set the TOS IP header value of tunnel packets to match the encapsulated packet value.</description>
774 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->tos</bindstofield>
775 5ce63c3e jim-p
		</field>
776 4cd437f2 Ermal Lu?i
		<field>
777 b6fe3414 jim-p
			<displayname>Inter-Client Communication</displayname>
778 5ce63c3e jim-p
			<name>interclient</name>
779
			<type>checkbox</type>
780
			<description>Allow communication between clients connected to this server.</description>
781 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->interclient</bindstofield>
782 5ce63c3e jim-p
		</field>
783 bca35cff jim-p
		<field>
784
			<displayname>Duplicate Connections</displayname>
785
			<name>duplicate_cn</name>
786
			<type>checkbox</type>
787
			<description>Allow multiple concurrent connections from clients using the same Common Name.&lt;br/&gt;NOTE: This is not generally recommended, but may be needed for some scenarios.</description>
788
			<bindstofield>ovpnserver->step10->duplicate_cn</bindstofield>
789
		</field>
790 4cd437f2 Ermal Lu?i
		<field>
791
			<type>listtopic</type>
792
			<name>Client Settings</name>
793
		</field>
794 df6df70f jim-p
		<field>
795
			<displayname>Dynamic IP</displayname>
796
			<name>dynip</name>
797
			<type>checkbox</type>
798
			<value>on</value>
799
			<description>Allow connected clients to retain their connections if their IP address changes.</description>
800
			<bindstofield>ovpnserver->step10->dynip</bindstofield>
801
		</field>
802 4cd437f2 Ermal Lu?i
		<field>
803 5ce63c3e jim-p
			<displayname>Address Pool</displayname>
804
			<name>addrpool</name>
805
			<type>checkbox</type>
806 30d98ad3 Ermal
			<value>on</value>
807 5ce63c3e jim-p
			<description>Provide a virtual adapter IP address to clients (see Tunnel Network).</description>
808 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->addrpool</bindstofield>
809 5ce63c3e jim-p
		</field>
810
		<field>
811
			<displayname>DNS Default Domain</displayname>
812
			<name>defaultdomain</name>
813
			<type>input</type>
814
			<description>Provide a default domain name to clients.</description>
815 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->defaultdomain</bindstofield>
816 5ce63c3e jim-p
		</field>
817
		<field>
818
			<displayname>DNS Server 1</displayname>
819
			<name>dnsserver1</name>
820
			<type>input</type>
821 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->dns1</bindstofield>
822 5ce63c3e jim-p
			<description>DNS server to provide for connecting client systems.</description>
823 4cd437f2 Ermal Lu?i
		</field>
824
		<field>
825 5ce63c3e jim-p
			<displayname>DNS Server 2</displayname>
826 4cd437f2 Ermal Lu?i
			<name>dnserver2</name>
827
			<type>input</type>
828 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->dns2</bindstofield>
829 5ce63c3e jim-p
			<description>DNS server to provide for connecting client systems.</description>
830 4cd437f2 Ermal Lu?i
		</field>
831
		<field>
832 5ce63c3e jim-p
			<displayname>DNS Server 3</displayname>
833 4cd437f2 Ermal Lu?i
			<name>dnserver3</name>
834
			<type>input</type>
835 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->dns3</bindstofield>
836 5ce63c3e jim-p
			<description>DNS server to provide for connecting client systems.</description>
837 4cd437f2 Ermal Lu?i
		</field>
838
		<field>
839 5ce63c3e jim-p
			<displayname>DNS Server 4</displayname>
840 4cd437f2 Ermal Lu?i
			<name>dnserver4</name>
841
			<type>input</type>
842 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->dns4</bindstofield>
843 5ce63c3e jim-p
			<description>DNS server to provide for connecting client systems.</description>
844
		</field>
845 4cd437f2 Ermal Lu?i
		<field>
846 5ce63c3e jim-p
			<displayname>NTP Server</displayname>
847
			<name>ntpserver1</name>
848
			<type>input</type>
849 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->ntp1</bindstofield>
850 5ce63c3e jim-p
			<description>Network Time Protocol server to provide for connecting client systems.</description>
851
		</field>
852
		<field>
853
			<displayname>NTP Server 2</displayname>
854
			<name>ntpserver2</name>
855 4cd437f2 Ermal Lu?i
			<type>input</type>
856 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->ntp2</bindstofield>
857 5ce63c3e jim-p
			<description>Network Time Protocol server to provide for connecting client systems.</description>
858
		</field>
859 eb20f3c5 Ermal Lu?i
		<field>
860
			<name>nbtenable</name>
861
			<type>checkbox</type>
862 5ce63c3e jim-p
			<displayname>NetBIOS Options</displayname>
863 528992be jim-p
			<bindstofield>ovpnserver->step10->nbtenable</bindstofield>
864 5ce63c3e jim-p
			<description>Enable NetBIOS over TCP/IP. &lt;br/&gt;If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) will be disabled. </description>
865
		</field>
866
		<field>
867
			<displayname>NetBIOS Node Type</displayname>
868
			<name>nbttype</name>
869
			<type>select</type>
870
			<bindstofield>ovpnserver->step10->nbttype</bindstofield>
871
			<options>
872
				<option>
873
					<name>dummy</name>
874
					<value>dummy</value>
875
				</option>
876
			</options>
877
			<description>&lt;br/&gt;Possible options: b-node (broadcasts), p-node (point-to-point name queries to a WINS server), m-node (broadcast then query name server), and h-node (query name server, then broadcast).</description>
878
		</field>
879
		<field>
880
			<displayname>NetBIOS Scope ID</displayname>
881
			<name>nbtscope</name>
882
			<type>input</type>
883
			<bindstofield>ovpnserver->step10->nbtscope</bindstofield>
884
			<description>A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to only those nodes with the same NetBIOS scope ID.</description>
885
		</field>
886
		<field>
887
			<displayname>WINS Server 1</displayname>
888
			<name>winsserver1</name>
889
			<type>input</type>
890
			<bindstofield>ovpnserver->step10->wins1</bindstofield>
891
			<description>A Windows Internet Name Service (WINS) server to provide for connecting clients, which allows them to browse Windows shares. This is typically an Active Directory Domain Controller, designated WINS server, or Samba server.</description>
892
		</field>
893
		<field>
894
			<displayname>WINS Server 2</displayname>
895
			<name>winsserver2</name>
896
			<type>input</type>
897
			<bindstofield>ovpnserver->step10->wins2</bindstofield>
898
			<description>A Windows Internet Name Service (WINS) server to provide for connecting clients, which allows them to browse Windows shares. This is typically an Active Directory Domain Controller, designated WINS server, or Samba server.</description>
899
		</field>
900 4cd437f2 Ermal Lu?i
		<field>
901
			<name>Advanced</name>
902
			<type>textarea</type>
903
			<cols>30</cols>
904
			<rows>5</rows>
905
			<description>Enter any additional options you would like to add to the OpenVPN server configuration here, separated by a semicolon. EXAMPLE: push "route 10.0.0.0 255.255.255.0"</description>
906 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step10->advanced</bindstofield>
907 4cd437f2 Ermal Lu?i
		</field>
908
		<field>
909
			<name>Next</name>
910
			<type>submit</type>
911
		</field>
912
	</fields>
913 2ca50c87 Ermal Lu?i
	<stepbeforeformdisplay>step10_stepbeforeformdisplay();</stepbeforeformdisplay>
914
	<stepsubmitphpaction>step10_submitphpaction();</stepsubmitphpaction>
915 4cd437f2 Ermal Lu?i
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
916
</step>
917
<step>
918 2ca50c87 Ermal Lu?i
	<id>11</id>
919 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Firewall Rule Configuration</title>
920 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
921
	<disableheader>on</disableheader>
922 4cd437f2 Ermal Lu?i
	<fields>
923 f9fa5d10 Ermal
		<field>
924
			<type>listtopic</type>
925 5ce63c3e jim-p
			<name>Firewall Rule Configuration</name>
926 f9fa5d10 Ermal
		</field>
927
		<field>
928
			<type>text</type>
929 b1aa904f Chris Buechler
			<description>Firewall Rules control what network traffic is permitted. You must add rules to allow traffic to the OpenVPN server's IP and port, as well as allowing traffic from connected clients through the tunnel. These rules can be automatically added here, or configured manually after completing the wizard.</description>
930 f9fa5d10 Ermal
		</field>
931 4cd437f2 Ermal Lu?i
		<field>
932
			<type>listtopic</type>
933
			<name>Traffic from clients to server</name>
934
		</field>
935
		<field>
936
			<name>ovpnrule</name>
937
			<displayname>Firewall Rule</displayname>
938 5ce63c3e jim-p
			<description>Add a rule to permit traffic from clients on the Internet to the OpenVPN server process.</description>
939 4cd437f2 Ermal Lu?i
			<type>checkbox</type>
940 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step11->ovpnrule</bindstofield>
941 4cd437f2 Ermal Lu?i
		</field>
942
		<field>
943
			<type>listtopic</type>
944
			<name>Traffic from clients through VPN</name>
945
		</field>
946
		<field>
947
			<name>ovpnallow</name>
948
			<displayname>OpenVPN rule</displayname>
949 5ce63c3e jim-p
			<description>Add a rule to allow all traffic from connected clients to pass across the VPN tunnel.</description>
950 4cd437f2 Ermal Lu?i
			<type>checkbox</type>
951 2ca50c87 Ermal Lu?i
			<bindstofield>ovpnserver->step11->ovpnallow</bindstofield>
952 4cd437f2 Ermal Lu?i
		</field>
953
		<field>
954
			<name>Next</name>
955
			<type>submit</type>
956
		</field>
957
	</fields>
958
</step>
959
<step>
960 2ca50c87 Ermal Lu?i
	<id>12</id>
961 9cb9c7d4 jim-p
	<title>OpenVPN Wizard: Finished!</title>
962 7a2ec71b Ermal Lu?i
	<description>OpenVPN Remote Access Server Setup Wizard</description>
963
	<disableheader>on</disableheader>
964 4cd437f2 Ermal Lu?i
	<fields>
965 f9fa5d10 Ermal
		<field>
966
			<type>listtopic</type>
967
			<name>Configuration Complete!</name>
968
		</field>
969
		<field>
970
			<type>text</type>
971
			<description>Your configuration is now complete.</description>
972
		</field>
973 4cd437f2 Ermal Lu?i
		<field>
974
			<type>text</type>
975 f9fa5d10 Ermal
			<description>To be able to export client configurations, browse to System->Packages and install the OpenVPN Client Export package.</description>
976 4cd437f2 Ermal Lu?i
		</field>
977
		<field>
978
			<type>submit</type>
979
			<name>Finish</name>
980
		</field>
981
	</fields>
982 2ca50c87 Ermal Lu?i
	<stepsubmitphpaction>step12_submitphpaction();</stepsubmitphpaction>
983 4cd437f2 Ermal Lu?i
	<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
984
</step>
985 0e01b3c6 jim-p
</pfsensewizard>