1 |
4cd437f2
|
Ermal Lu?i
|
<?xml version="1.0" encoding="utf-8" ?>
|
2 |
|
|
<pfsensewizard>
|
3 |
|
|
<copyright>
|
4 |
|
|
/*
|
5 |
c7281770
|
Chris Buechler
|
part of pfSense (https://www.pfsense.org/)
|
6 |
4cd437f2
|
Ermal Lu?i
|
|
7 |
6900e5b2
|
Ermal
|
Copyright (C) 2010 Ermal Luci
|
8 |
5ce63c3e
|
jim-p
|
All rights reserved.
|
9 |
4cd437f2
|
Ermal Lu?i
|
|
10 |
5ce63c3e
|
jim-p
|
Redistribution and use in source and binary forms, with or without
|
11 |
|
|
modification, are permitted provided that the following conditions are met:
|
12 |
4cd437f2
|
Ermal Lu?i
|
|
13 |
5ce63c3e
|
jim-p
|
1. Redistributions of source code must retain the above copyright notice,
|
14 |
|
|
this list of conditions and the following disclaimer.
|
15 |
4cd437f2
|
Ermal Lu?i
|
|
16 |
5ce63c3e
|
jim-p
|
2. Redistributions in binary form must reproduce the above copyright
|
17 |
|
|
notice, this list of conditions and the following disclaimer in the
|
18 |
|
|
documentation and/or other materials provided with the distribution.
|
19 |
4cd437f2
|
Ermal Lu?i
|
|
20 |
5ce63c3e
|
jim-p
|
THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
|
21 |
|
|
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
|
22 |
|
|
AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
23 |
|
|
AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
|
24 |
|
|
OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
25 |
|
|
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
26 |
|
|
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
27 |
|
|
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
28 |
|
|
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
29 |
|
|
POSSIBILITY OF SUCH DAMAGE.
|
30 |
4cd437f2
|
Ermal Lu?i
|
*/
|
31 |
|
|
</copyright>
|
32 |
dba6bcbf
|
Ermal Lu?i
|
<totalsteps>12</totalsteps>
|
33 |
4cd437f2
|
Ermal Lu?i
|
<step>
|
34 |
|
|
<id>1</id>
|
35 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Authentication Type Selection</title>
|
36 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
37 |
9cb9c7d4
|
jim-p
|
<disableheader>on</disableheader>
|
38 |
4cd437f2
|
Ermal Lu?i
|
<fields>
|
39 |
9cb9c7d4
|
jim-p
|
<field>
|
40 |
|
|
<type>listtopic</type>
|
41 |
|
|
<name>Select an Authentication Backend Type</name>
|
42 |
|
|
</field>
|
43 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
44 |
|
|
<type>select</type>
|
45 |
|
|
<displayname>Type of Server</displayname>
|
46 |
|
|
<name>authtype</name>
|
47 |
b256213d
|
Warren Baker
|
<description><br/><b>NOTE:</b> If you are unsure, leave this set to "Local User Access."</description>
|
48 |
eb20f3c5
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step1->type</bindstofield>
|
49 |
4cd437f2
|
Ermal Lu?i
|
<options>
|
50 |
|
|
<option>
|
51 |
|
|
<name>Local User Access</name>
|
52 |
|
|
<value>local</value>
|
53 |
|
|
</option>
|
54 |
|
|
<option>
|
55 |
|
|
<name>LDAP</name>
|
56 |
|
|
<value>ldap</value>
|
57 |
|
|
</option>
|
58 |
|
|
<option>
|
59 |
|
|
<name>Radius</name>
|
60 |
|
|
<value>radius</value>
|
61 |
|
|
</option>
|
62 |
|
|
</options>
|
63 |
|
|
</field>
|
64 |
|
|
<field>
|
65 |
|
|
<name>Next</name>
|
66 |
|
|
<type>submit</type>
|
67 |
|
|
</field>
|
68 |
|
|
</fields>
|
69 |
2ca50c87
|
Ermal Lu?i
|
<stepsubmitphpaction>step1_submitphpaction();</stepsubmitphpaction>
|
70 |
5ce63c3e
|
jim-p
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
71 |
4cd437f2
|
Ermal Lu?i
|
</step>
|
72 |
|
|
<step>
|
73 |
|
|
<id>2</id>
|
74 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: LDAP Server Selection</title>
|
75 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
76 |
|
|
<disableheader>on</disableheader>
|
77 |
4cd437f2
|
Ermal Lu?i
|
<fields>
|
78 |
|
|
<field>
|
79 |
|
|
<type>listtopic</type>
|
80 |
9cb9c7d4
|
jim-p
|
<name>LDAP Authentication Server List</name>
|
81 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
82 |
|
|
<field>
|
83 |
5ce63c3e
|
jim-p
|
<name>authserv</name>
|
84 |
916fae48
|
jim-p
|
<displayname>LDAP servers</displayname>
|
85 |
5ce63c3e
|
jim-p
|
<type>select</type>
|
86 |
|
|
<bindstofield>ovpnserver->step2->authserv</bindstofield>
|
87 |
4cd437f2
|
Ermal Lu?i
|
<options>
|
88 |
5ce63c3e
|
jim-p
|
<option>
|
89 |
|
|
<name>dummy</name>
|
90 |
|
|
<value>dummy</value>
|
91 |
|
|
</option>
|
92 |
|
|
</options>
|
93 |
|
|
</field>
|
94 |
dba6bcbf
|
Ermal Lu?i
|
<field>
|
95 |
|
|
<type>submit</type>
|
96 |
|
|
<name>Add new LDAP server</name>
|
97 |
|
|
</field>
|
98 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
99 |
|
|
<type>submit</type>
|
100 |
|
|
<name>Next</name>
|
101 |
|
|
</field>
|
102 |
2ca50c87
|
Ermal Lu?i
|
</fields>
|
103 |
|
|
<stepbeforeformdisplay>step2_stepbeforeformdisplay();</stepbeforeformdisplay>
|
104 |
5ce63c3e
|
jim-p
|
<stepsubmitphpaction>step2_submitphpaction();</stepsubmitphpaction>
|
105 |
|
|
<javascriptafterformdisplay>enablechange();</javascriptafterformdisplay>
|
106 |
|
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
107 |
2ca50c87
|
Ermal Lu?i
|
</step>
|
108 |
|
|
<step>
|
109 |
|
|
<id>3</id>
|
110 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Add LDAP Server</title>
|
111 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
112 |
|
|
<disableheader>on</disableheader>
|
113 |
2ca50c87
|
Ermal Lu?i
|
<fields>
|
114 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
115 |
|
|
<type>listtopic</type>
|
116 |
9cb9c7d4
|
jim-p
|
<name>LDAP Authentication Server Parameters</name>
|
117 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
118 |
|
|
<field>
|
119 |
|
|
<name>name</name>
|
120 |
|
|
<displayname>Name</displayname>
|
121 |
|
|
<type>input</type>
|
122 |
|
|
<bindstofield>ovpnserver->step2->authtype</bindstofield>
|
123 |
6d80857f
|
jim-p
|
<size>30</size>
|
124 |
99a00640
|
jim-p
|
<description>Descriptive server name, for your own reference.</description>
|
125 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
126 |
|
|
<field>
|
127 |
|
|
<name>ip</name>
|
128 |
|
|
<displayname>Hostname or IP address</displayname>
|
129 |
|
|
<type>input</type>
|
130 |
|
|
<bindstofield>ovpnserver->step2->ip</bindstofield>
|
131 |
99a00640
|
jim-p
|
<description>Address of the LDAP server.</description>
|
132 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
133 |
|
|
<field>
|
134 |
|
|
<name>port</name>
|
135 |
|
|
<displayname>Port</displayname>
|
136 |
|
|
<type>input</type>
|
137 |
|
|
<size>8</size>
|
138 |
|
|
<bindstofield>ovpnserver->step2->port</bindstofield>
|
139 |
99a00640
|
jim-p
|
<description>LDAP Server port, leave blank for the default (389 for TCP, 636 for SSL).</description>
|
140 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
141 |
|
|
<field>
|
142 |
|
|
<name>transport</name>
|
143 |
|
|
<displayname>Transport</displayname>
|
144 |
|
|
<type>select</type>
|
145 |
|
|
<bindstofield>ovpnserver->step2->transport</bindstofield>
|
146 |
|
|
<options>
|
147 |
|
|
<option>
|
148 |
|
|
<name>TCP - Standard</name>
|
149 |
|
|
<value>tcp</value>
|
150 |
|
|
</option>
|
151 |
|
|
<option>
|
152 |
|
|
<name>SSL - Encrypted</name>
|
153 |
|
|
<value>ssl</value>
|
154 |
|
|
</option>
|
155 |
|
|
</options>
|
156 |
99a00640
|
jim-p
|
<description><br/>The protocol used by your LDAP server. It can either be standard TCP or SSL encrypted.</description>
|
157 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
158 |
|
|
<field>
|
159 |
|
|
<name>scope</name>
|
160 |
99a00640
|
jim-p
|
<displayname>Search Scope Level</displayname>
|
161 |
|
|
<type>select</type>
|
162 |
|
|
<options>
|
163 |
|
|
<option>
|
164 |
|
|
<name>One Level</name>
|
165 |
|
|
<value>one</value>
|
166 |
|
|
</option>
|
167 |
|
|
<option>
|
168 |
|
|
<name>Entire Subtree</name>
|
169 |
|
|
<value>subtree</value>
|
170 |
|
|
</option>
|
171 |
|
|
</options>
|
172 |
4cd437f2
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step2->scope</bindstofield>
|
173 |
|
|
</field>
|
174 |
99a00640
|
jim-p
|
<field>
|
175 |
|
|
<name>basedn</name>
|
176 |
|
|
<displayname>Search Scope Base DN</displayname>
|
177 |
|
|
<type>input</type>
|
178 |
|
|
<size>40</size>
|
179 |
|
|
<bindstofield>ovpnserver->step2->basedn</bindstofield>
|
180 |
|
|
</field>
|
181 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
182 |
|
|
<name>authscope</name>
|
183 |
|
|
<displayname>Authentication Containers</displayname>
|
184 |
|
|
<type>input</type>
|
185 |
|
|
<size>40</size>
|
186 |
|
|
<bindstofield>ovpnserver->step2->authscope</bindstofield>
|
187 |
99a00640
|
jim-p
|
<description>Semi-Colon separated. This will be prepended to the search base dn above or you can specify full container path.<br/>EXAMPLE: CN=Users;DC=example<br/>EXAMPLE: CN=Users,DC=example,DC=com;OU=OtherUsers,DC=example,DC=com </description>
|
188 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
189 |
|
|
<field>
|
190 |
|
|
<name>userdn</name>
|
191 |
99a00640
|
jim-p
|
<displayname>LDAP Bind User DN</displayname>
|
192 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
193 |
|
|
<size>20</size>
|
194 |
99a00640
|
jim-p
|
<description>If left blank, an anonymous bind will be done.</description>
|
195 |
eb20f3c5
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step2->userdn</bindstofield>
|
196 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
197 |
|
|
<field>
|
198 |
|
|
<name>passdn</name>
|
199 |
99a00640
|
jim-p
|
<displayname>LDAP Bind Password</displayname>
|
200 |
4cd437f2
|
Ermal Lu?i
|
<type>password</type>
|
201 |
|
|
<size>20</size>
|
202 |
eb20f3c5
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step2->passdn</bindstofield>
|
203 |
99a00640
|
jim-p
|
<description>If a user DN was supplied above, this password will also be used when performing a bind operation.</description>
|
204 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
205 |
|
|
<field>
|
206 |
|
|
<name>nameattr</name>
|
207 |
18f8f9a3
|
jim-p
|
<displayname>User Naming Attribute</displayname>
|
208 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
209 |
|
|
<bindstofield>ovpnserver->step2->nameattr</bindstofield>
|
210 |
a4973f08
|
jim-p
|
<description>Typically "cn" (OpenLDAP, Novell eDirectory), "samAccountName" (Microsoft AD)</description>
|
211 |
5ce63c3e
|
jim-p
|
</field>
|
212 |
eb20f3c5
|
Ermal Lu?i
|
<field>
|
213 |
5ce63c3e
|
jim-p
|
<name>groupattr</name>
|
214 |
18f8f9a3
|
jim-p
|
<displayname>Group Naming Attribute</displayname>
|
215 |
5ce63c3e
|
jim-p
|
<type>input</type>
|
216 |
|
|
<bindstofield>ovpnserver->step2->groupattr</bindstofield>
|
217 |
99a00640
|
jim-p
|
<description>Typically "cn" (OpenLDAP, Microsoft AD, and Novell eDirectory)</description>
|
218 |
|
|
</field>
|
219 |
|
|
<field>
|
220 |
|
|
<name>memberattr</name>
|
221 |
18f8f9a3
|
jim-p
|
<displayname>Member Naming Attribute</displayname>
|
222 |
99a00640
|
jim-p
|
<type>input</type>
|
223 |
|
|
<bindstofield>ovpnserver->step2->memberattr</bindstofield>
|
224 |
|
|
<description>Typically "member" (OpenLDAP), "memberOf" (Microsoft AD), "uniqueMember" (Novell eDirectory)</description>
|
225 |
5ce63c3e
|
jim-p
|
</field>
|
226 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
227 |
|
|
<type>submit</type>
|
228 |
|
|
<name>Add new Server</name>
|
229 |
|
|
</field>
|
230 |
|
|
</fields>
|
231 |
|
|
<stepsubmitphpaction>step3_submitphpaction();</stepsubmitphpaction>
|
232 |
|
|
<javascriptafterformdisplay>enablechange();</javascriptafterformdisplay>
|
233 |
|
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
234 |
|
|
</step>
|
235 |
|
|
<step>
|
236 |
5ce63c3e
|
jim-p
|
<id>4</id>
|
237 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: RADIUS Server Selection</title>
|
238 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
239 |
|
|
<disableheader>on</disableheader>
|
240 |
5ce63c3e
|
jim-p
|
<fields>
|
241 |
|
|
<field>
|
242 |
|
|
<type>listtopic</type>
|
243 |
9cb9c7d4
|
jim-p
|
<name>RADIUS Authentication Server List</name>
|
244 |
5ce63c3e
|
jim-p
|
</field>
|
245 |
|
|
<field>
|
246 |
|
|
<name>authserv</name>
|
247 |
916fae48
|
jim-p
|
<displayname>RADIUS servers</displayname>
|
248 |
5ce63c3e
|
jim-p
|
<type>select</type>
|
249 |
|
|
<bindstofield>ovpnserver->step2->authserv</bindstofield>
|
250 |
|
|
<options>
|
251 |
|
|
<option>
|
252 |
|
|
<name>dummy</name>
|
253 |
|
|
<value>dummy</value>
|
254 |
|
|
</option>
|
255 |
|
|
</options>
|
256 |
|
|
</field>
|
257 |
|
|
<field>
|
258 |
|
|
<type>submit</type>
|
259 |
|
|
<name>Add new RADIUS server</name>
|
260 |
|
|
</field>
|
261 |
|
|
<field>
|
262 |
|
|
<type>submit</type>
|
263 |
|
|
<name>Next</name>
|
264 |
|
|
</field>
|
265 |
2ca50c87
|
Ermal Lu?i
|
</fields>
|
266 |
5ce63c3e
|
jim-p
|
<stepbeforeformdisplay>step4_stepbeforeformdisplay();</stepbeforeformdisplay>
|
267 |
|
|
<stepsubmitphpaction>step4_submitphpaction();</stepsubmitphpaction>
|
268 |
|
|
<javascriptafterformdisplay>enablechange();</javascriptafterformdisplay>
|
269 |
|
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
270 |
2ca50c87
|
Ermal Lu?i
|
</step>
|
271 |
|
|
<step>
|
272 |
|
|
<id>5</id>
|
273 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Add RADIUS Server</title>
|
274 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
275 |
|
|
<disableheader>on</disableheader>
|
276 |
2ca50c87
|
Ermal Lu?i
|
<fields>
|
277 |
5ce63c3e
|
jim-p
|
<field>
|
278 |
|
|
<type>listtopic</type>
|
279 |
9cb9c7d4
|
jim-p
|
<name>RADIUS Authentication Server Parameters</name>
|
280 |
5ce63c3e
|
jim-p
|
</field>
|
281 |
|
|
<field>
|
282 |
|
|
<name>name</name>
|
283 |
|
|
<displayname>Name</displayname>
|
284 |
|
|
<type>input</type>
|
285 |
4cd437f2
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step2->authtype</bindstofield>
|
286 |
6d80857f
|
jim-p
|
<size>20</size>
|
287 |
916fae48
|
jim-p
|
<description>Descriptive name for the RADIUS server, for your reference.</description>
|
288 |
5ce63c3e
|
jim-p
|
</field>
|
289 |
|
|
<field>
|
290 |
|
|
<name>ip</name>
|
291 |
|
|
<displayname>Hostname or IP address</displayname>
|
292 |
|
|
<type>input</type>
|
293 |
4cd437f2
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step2->ip</bindstofield>
|
294 |
916fae48
|
jim-p
|
<description>Address of the RADIUS server.</description>
|
295 |
5ce63c3e
|
jim-p
|
</field>
|
296 |
|
|
<field>
|
297 |
|
|
<name>port</name>
|
298 |
|
|
<displayname>Authentication Port</displayname>
|
299 |
|
|
<type>input</type>
|
300 |
|
|
<size>8</size>
|
301 |
4cd437f2
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step2->port</bindstofield>
|
302 |
916fae48
|
jim-p
|
<description>Port used by the RADIUS server for accepting Authentication requests, typically 1812.</description>
|
303 |
5ce63c3e
|
jim-p
|
</field>
|
304 |
|
|
<field>
|
305 |
|
|
<name>secret</name>
|
306 |
|
|
<displayname>Shared Secret</displayname>
|
307 |
|
|
<type>password</type>
|
308 |
|
|
<size>20</size>
|
309 |
4cd437f2
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step2->password</bindstofield>
|
310 |
916fae48
|
jim-p
|
<description></description>
|
311 |
5ce63c3e
|
jim-p
|
</field>
|
312 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
313 |
|
|
<name>Add new Server</name>
|
314 |
|
|
<type>submit</type>
|
315 |
|
|
</field>
|
316 |
|
|
</fields>
|
317 |
2ca50c87
|
Ermal Lu?i
|
<stepsubmitphpaction>step5_submitphpaction();</stepsubmitphpaction>
|
318 |
4cd437f2
|
Ermal Lu?i
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
319 |
|
|
</step>
|
320 |
|
|
<step>
|
321 |
2ca50c87
|
Ermal Lu?i
|
<id>6</id>
|
322 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Certificate Authority Selection</title>
|
323 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
324 |
|
|
<disableheader>on</disableheader>
|
325 |
4cd437f2
|
Ermal Lu?i
|
<fields>
|
326 |
7a2ec71b
|
Ermal Lu?i
|
<field>
|
327 |
9cb9c7d4
|
jim-p
|
<name>Choose a Certificate Authority (CA)</name>
|
328 |
7a2ec71b
|
Ermal Lu?i
|
<type>listtopic</type>
|
329 |
|
|
</field>
|
330 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
331 |
|
|
<type>certca_selection</type>
|
332 |
|
|
<name>certca</name>
|
333 |
|
|
<displayname>Certificate Authority</displayname>
|
334 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->authcertca</bindstofield>
|
335 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
336 |
dba6bcbf
|
Ermal Lu?i
|
<field>
|
337 |
5ce63c3e
|
jim-p
|
<type>submit</type>
|
338 |
|
|
<name>Add new CA</name>
|
339 |
|
|
</field>
|
340 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
341 |
|
|
<name>Next</name>
|
342 |
|
|
<type>submit</type>
|
343 |
|
|
</field>
|
344 |
2ca50c87
|
Ermal Lu?i
|
</fields>
|
345 |
5ce63c3e
|
jim-p
|
<stepbeforeformdisplay>step6_stepbeforeformdisplay();</stepbeforeformdisplay>
|
346 |
|
|
<stepsubmitphpaction>step6_submitphpaction();</stepsubmitphpaction>
|
347 |
|
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
348 |
2ca50c87
|
Ermal Lu?i
|
</step>
|
349 |
|
|
<step>
|
350 |
|
|
<id>7</id>
|
351 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Add Certificate Authority</title>
|
352 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
353 |
|
|
<disableheader>on</disableheader>
|
354 |
5ce63c3e
|
jim-p
|
<fields>
|
355 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
356 |
9cb9c7d4
|
jim-p
|
<name>Create a New Certificate Authority (CA) Certificate</name>
|
357 |
4cd437f2
|
Ermal Lu?i
|
<type>listtopic</type>
|
358 |
|
|
</field>
|
359 |
|
|
<field>
|
360 |
8f87a4a2
|
jim-p
|
<name>descr</name>
|
361 |
4cd437f2
|
Ermal Lu?i
|
<displayname>Descriptive name</displayname>
|
362 |
5ce63c3e
|
jim-p
|
<description>A name for your reference, to identify this certificate. This is the same as common-name field for other Certificates.</description>
|
363 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
364 |
6d80857f
|
jim-p
|
<size>20</size>
|
365 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->certca</bindstofield>
|
366 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
367 |
|
|
<field>
|
368 |
|
|
<name>keylength</name>
|
369 |
|
|
<displayname>Key length</displayname>
|
370 |
5ce63c3e
|
jim-p
|
<description><br/>Size of the key which will be generated. The larger the key, the more security is offers, but larger keys are generally slower to use.</description>
|
371 |
4cd437f2
|
Ermal Lu?i
|
<type>select</type>
|
372 |
47aa4fc4
|
Ermal
|
<value>2048</value>
|
373 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->keylength</bindstofield>
|
374 |
4cd437f2
|
Ermal Lu?i
|
<options>
|
375 |
5ce63c3e
|
jim-p
|
<option>
|
376 |
|
|
<name>512 bit</name>
|
377 |
|
|
<value>512</value>
|
378 |
|
|
</option>
|
379 |
|
|
<option>
|
380 |
|
|
<name>1024 bit</name>
|
381 |
|
|
<value>1024</value>
|
382 |
|
|
</option>
|
383 |
|
|
<option>
|
384 |
|
|
<name>2048 bit</name>
|
385 |
|
|
<value>2048</value>
|
386 |
|
|
</option>
|
387 |
|
|
<option>
|
388 |
|
|
<name>4096 bit</name>
|
389 |
|
|
<value>4096</value>
|
390 |
|
|
</option>
|
391 |
|
|
</options>
|
392 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
393 |
|
|
<field>
|
394 |
|
|
<name>lifetime</name>
|
395 |
|
|
<displayname>Lifetime</displayname>
|
396 |
|
|
<type>input</type>
|
397 |
|
|
<size>10</size>
|
398 |
47aa4fc4
|
Ermal
|
<value>3650</value>
|
399 |
5ce63c3e
|
jim-p
|
<description>Lifetime in days. This is commonly set to 3650 (Approximately 10 years.)</description>
|
400 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->lifetime</bindstofield>
|
401 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
402 |
|
|
<field>
|
403 |
|
|
<name>country</name>
|
404 |
|
|
<displayname>Country Code</displayname>
|
405 |
5ce63c3e
|
jim-p
|
<description>Two-letter ISO country code (e.g. US, AU, CA) </description>
|
406 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
407 |
|
|
<size>5</size>
|
408 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->country</bindstofield>
|
409 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
410 |
|
|
<field>
|
411 |
|
|
<name>state</name>
|
412 |
|
|
<displayname>State or Province</displayname>
|
413 |
5ce63c3e
|
jim-p
|
<description>Full State of Province name, not abbreviated (e.g. Kentucky, Indiana, Ontario).</description>
|
414 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
415 |
|
|
<size>30</size>
|
416 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->state</bindstofield>
|
417 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
418 |
|
|
<field>
|
419 |
|
|
<name>city</name>
|
420 |
|
|
<displayname>City</displayname>
|
421 |
5ce63c3e
|
jim-p
|
<description>City or other Locality name (e.g. Louisville, Indianapolis, Toronto).</description>
|
422 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
423 |
|
|
<size>30</size>
|
424 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->city</bindstofield>
|
425 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
426 |
|
|
<field>
|
427 |
|
|
<name>organization</name>
|
428 |
|
|
<displayname>Organization</displayname>
|
429 |
5ce63c3e
|
jim-p
|
<description>Organization name, often the Company or Group name.</description>
|
430 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
431 |
|
|
<size>30</size>
|
432 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->organization</bindstofield>
|
433 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
434 |
|
|
<field>
|
435 |
|
|
<name>email</name>
|
436 |
|
|
<displayname>E-mail</displayname>
|
437 |
5ce63c3e
|
jim-p
|
<description>E-mail address for the Certificate contact. Often the e-mail of the person generating the certificate (i.e. You.)</description>
|
438 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
439 |
|
|
<size>30</size>
|
440 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step6->email</bindstofield>
|
441 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
442 |
|
|
<field>
|
443 |
|
|
<name>Add new CA</name>
|
444 |
|
|
<type>submit</type>
|
445 |
|
|
</field>
|
446 |
|
|
</fields>
|
447 |
2ca50c87
|
Ermal Lu?i
|
<stepsubmitphpaction>step7_submitphpaction();</stepsubmitphpaction>
|
448 |
4cd437f2
|
Ermal Lu?i
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
449 |
|
|
<javascriptafterformdisplay>enablechange();</javascriptafterformdisplay>
|
450 |
|
|
</step>
|
451 |
|
|
<step>
|
452 |
2ca50c87
|
Ermal Lu?i
|
<id>8</id>
|
453 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Server Certificate Selection</title>
|
454 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
455 |
|
|
<disableheader>on</disableheader>
|
456 |
4cd437f2
|
Ermal Lu?i
|
<fields>
|
457 |
7a2ec71b
|
Ermal Lu?i
|
<field>
|
458 |
5ce63c3e
|
jim-p
|
<name>Choose a Server Certificate</name>
|
459 |
|
|
<type>listtopic</type>
|
460 |
|
|
</field>
|
461 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
462 |
|
|
<type>cert_selection</type>
|
463 |
1e3c34b0
|
Ermal Lu?i
|
<name>certname</name>
|
464 |
4cd437f2
|
Ermal Lu?i
|
<displayname>Certificate</displayname>
|
465 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->authcertname</bindstofield>
|
466 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
467 |
dba6bcbf
|
Ermal Lu?i
|
<field>
|
468 |
5ce63c3e
|
jim-p
|
<type>submit</type>
|
469 |
|
|
<name>Add new Certificate</name>
|
470 |
|
|
</field>
|
471 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
472 |
|
|
<name>Next</name>
|
473 |
|
|
<type>submit</type>
|
474 |
|
|
</field>
|
475 |
2ca50c87
|
Ermal Lu?i
|
</fields>
|
476 |
|
|
<stepbeforeformdisplay>step8_stepbeforeformdisplay();</stepbeforeformdisplay>
|
477 |
|
|
<stepsubmitphpaction>step8_submitphpaction();</stepsubmitphpaction>
|
478 |
5ce63c3e
|
jim-p
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
479 |
2ca50c87
|
Ermal Lu?i
|
</step>
|
480 |
|
|
<step>
|
481 |
5ce63c3e
|
jim-p
|
<id>9</id>
|
482 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Add a Server Certificate</title>
|
483 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
484 |
|
|
<disableheader>on</disableheader>
|
485 |
5ce63c3e
|
jim-p
|
<fields>
|
486 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
487 |
9cb9c7d4
|
jim-p
|
<name>Create a New Server Certificate</name>
|
488 |
4cd437f2
|
Ermal Lu?i
|
<type>listtopic</type>
|
489 |
|
|
</field>
|
490 |
|
|
<field>
|
491 |
8f87a4a2
|
jim-p
|
<name>descr</name>
|
492 |
4cd437f2
|
Ermal Lu?i
|
<displayname>Descriptive name</displayname>
|
493 |
5ce63c3e
|
jim-p
|
<description>A name for your reference, to identify this certificate. This is also known as the certificate's "Common Name."</description>
|
494 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
495 |
6d80857f
|
jim-p
|
<size>20</size>
|
496 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->certname</bindstofield>
|
497 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
498 |
|
|
<field>
|
499 |
|
|
<name>keylength</name>
|
500 |
|
|
<displayname>Key length</displayname>
|
501 |
5ce63c3e
|
jim-p
|
<description><br/>Size of the key which will be generated. The larger the key, the more security is offers, but larger keys are generally slower to use.</description>
|
502 |
4cd437f2
|
Ermal Lu?i
|
<type>select</type>
|
503 |
47aa4fc4
|
Ermal
|
<value>2048</value>
|
504 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->keylength</bindstofield>
|
505 |
4cd437f2
|
Ermal Lu?i
|
<options>
|
506 |
5ce63c3e
|
jim-p
|
<option>
|
507 |
|
|
<name>512 bits</name>
|
508 |
|
|
<value>512</value>
|
509 |
|
|
</option>
|
510 |
|
|
<option>
|
511 |
|
|
<name>1024 bits</name>
|
512 |
|
|
<value>1024</value>
|
513 |
|
|
</option>
|
514 |
|
|
<option>
|
515 |
|
|
<name>2048 bits</name>
|
516 |
|
|
<value>2048</value>
|
517 |
|
|
</option>
|
518 |
|
|
<option>
|
519 |
|
|
<name>4096 bits</name>
|
520 |
|
|
<value>4096</value>
|
521 |
|
|
</option>
|
522 |
|
|
</options>
|
523 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
524 |
|
|
<field>
|
525 |
|
|
<name>lifetime</name>
|
526 |
|
|
<displayname>Lifetime</displayname>
|
527 |
5ce63c3e
|
jim-p
|
<description>Lifetime in days. This is commonly set to 3650 (Approximately 10 years.)</description>
|
528 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
529 |
|
|
<size>10</size>
|
530 |
47aa4fc4
|
Ermal
|
<value>3650</value>
|
531 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->lifetime</bindstofield>
|
532 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
533 |
|
|
<field>
|
534 |
|
|
<name>country</name>
|
535 |
|
|
<displayname>Country Code</displayname>
|
536 |
5ce63c3e
|
jim-p
|
<description>Two-letter ISO country code (e.g. US, AU, CA) </description>
|
537 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
538 |
|
|
<size>5</size>
|
539 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->country</bindstofield>
|
540 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
541 |
|
|
<field>
|
542 |
|
|
<name>state</name>
|
543 |
|
|
<displayname>State or Province</displayname>
|
544 |
5ce63c3e
|
jim-p
|
<description>Full State of Province name, not abbreviated (e.g. Kentucky, Indiana, Ontario).</description>
|
545 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
546 |
|
|
<size>30</size>
|
547 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->state</bindstofield>
|
548 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
549 |
|
|
<field>
|
550 |
|
|
<name>city</name>
|
551 |
|
|
<displayname>City</displayname>
|
552 |
5ce63c3e
|
jim-p
|
<description>City or other Locality name (e.g. Louisville, Indianapolis, Toronto).</description>
|
553 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
554 |
|
|
<size>30</size>
|
555 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->city</bindstofield>
|
556 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
557 |
|
|
<field>
|
558 |
|
|
<name>organization</name>
|
559 |
|
|
<displayname>Organization</displayname>
|
560 |
5ce63c3e
|
jim-p
|
<description>Organization name, often the Company or Group name.</description>
|
561 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
562 |
|
|
<size>30</size>
|
563 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->organization</bindstofield>
|
564 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
565 |
|
|
<field>
|
566 |
|
|
<name>email</name>
|
567 |
|
|
<displayname>E-mail</displayname>
|
568 |
5ce63c3e
|
jim-p
|
<description>E-mail address for the Certificate contact. Often the e-mail of the person generating the certificate (i.e. You.)</description>
|
569 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
570 |
|
|
<size>30</size>
|
571 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step9->email</bindstofield>
|
572 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
573 |
|
|
<field>
|
574 |
|
|
<name>Create new Certificate</name>
|
575 |
|
|
<type>submit</type>
|
576 |
|
|
</field>
|
577 |
|
|
</fields>
|
578 |
a314bebc
|
Ermal
|
<stepbeforeformdisplay>step9_stepbeforeformdisplay();</stepbeforeformdisplay>
|
579 |
2ca50c87
|
Ermal Lu?i
|
<stepsubmitphpaction>step9_submitphpaction();</stepsubmitphpaction>
|
580 |
4cd437f2
|
Ermal Lu?i
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
581 |
|
|
</step>
|
582 |
|
|
<step>
|
583 |
2ca50c87
|
Ermal Lu?i
|
<id>10</id>
|
584 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Server Setup</title>
|
585 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
586 |
|
|
<disableheader>on</disableheader>
|
587 |
4cd437f2
|
Ermal Lu?i
|
<fields>
|
588 |
|
|
<field>
|
589 |
|
|
<type>listtopic</type>
|
590 |
9cb9c7d4
|
jim-p
|
<name>General OpenVPN Server Information</name>
|
591 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
592 |
|
|
<field>
|
593 |
|
|
<name>interface</name>
|
594 |
|
|
<type>interfaces_selection</type>
|
595 |
5ce63c3e
|
jim-p
|
<description>The interface where OpenVPN will listen for incoming connections (typically WAN.)</description>
|
596 |
4cd437f2
|
Ermal Lu?i
|
<displayname>Interface</displayname>
|
597 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->interface</bindstofield>
|
598 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
599 |
|
|
<field>
|
600 |
|
|
<name>Protocol</name>
|
601 |
|
|
<type>select</type>
|
602 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->protocol</bindstofield>
|
603 |
4cd437f2
|
Ermal Lu?i
|
<options>
|
604 |
5ce63c3e
|
jim-p
|
<option>
|
605 |
|
|
<name>UDP</name>
|
606 |
c0f650c4
|
jim-p
|
<value>UDP</value>
|
607 |
5ce63c3e
|
jim-p
|
</option>
|
608 |
|
|
<option>
|
609 |
|
|
<name>TCP</name>
|
610 |
c0f650c4
|
jim-p
|
<value>TCP</value>
|
611 |
5ce63c3e
|
jim-p
|
</option>
|
612 |
|
|
</options>
|
613 |
|
|
<description><br/>Protocol to use for OpenVPN connections. If you are unsure, leave this set to UDP.</description>
|
614 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
615 |
|
|
<field>
|
616 |
|
|
<name>localport</name>
|
617 |
b6fe3414
|
jim-p
|
<displayname>Local Port</displayname>
|
618 |
5ce63c3e
|
jim-p
|
<description>Local port upon which OpenVPN will listen for connections. The default port is 1194. Leave this blank unless you need to use a different port.</description>
|
619 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
620 |
|
|
<size>10</size>
|
621 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->localport</bindstofield>
|
622 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
623 |
|
|
<field>
|
624 |
|
|
<name>description</name>
|
625 |
|
|
<displayname>Description</displayname>
|
626 |
5ce63c3e
|
jim-p
|
<description>A name for this OpenVPN instance, for your reference. It can be set however you like, but is often used to distinguish the purpose of the service (e.g. "Remote Technical Staff").</description>
|
627 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
628 |
|
|
<size>30</size>
|
629 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->descr</bindstofield>
|
630 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
631 |
|
|
<field>
|
632 |
|
|
<type>listtopic</type>
|
633 |
|
|
<name>Cryptographic Settings</name>
|
634 |
|
|
</field>
|
635 |
|
|
<field>
|
636 |
|
|
<name>TLS Authentication</name>
|
637 |
|
|
<type>checkbox</type>
|
638 |
eb20f3c5
|
Ermal Lu?i
|
<value>on</value>
|
639 |
4cd437f2
|
Ermal Lu?i
|
<description>Enable authentication of TLS packets.</description>
|
640 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->tlsauth</bindstofield>
|
641 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
642 |
|
|
<field>
|
643 |
5ce63c3e
|
jim-p
|
<displayname>Generate TLS Key</displayname>
|
644 |
4cd437f2
|
Ermal Lu?i
|
<name>generatetlskey</name>
|
645 |
1ae55320
|
Ermal
|
<disablefields>tlssharedkey</disablefields>
|
646 |
eb20f3c5
|
Ermal Lu?i
|
<value>on</value>
|
647 |
4cd437f2
|
Ermal Lu?i
|
<type>checkbox</type>
|
648 |
|
|
<description>Automatically generate a shared TLS authentication key.</description>
|
649 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->gentlskey</bindstofield>
|
650 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
651 |
|
|
<field>
|
652 |
5ce63c3e
|
jim-p
|
<displayname>TLS Shared Key</displayname>
|
653 |
4cd437f2
|
Ermal Lu?i
|
<name>tlssharedkey</name>
|
654 |
5ce63c3e
|
jim-p
|
<description>Paste in a shared TLS key if one has already been generated.</description>
|
655 |
4cd437f2
|
Ermal Lu?i
|
<type>textarea</type>
|
656 |
|
|
<cols>30</cols>
|
657 |
|
|
<rows>5</rows>
|
658 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->tlskey</bindstofield>
|
659 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
660 |
|
|
<field>
|
661 |
|
|
<displayname>DH Parameters Length</displayname>
|
662 |
|
|
<name>dhparameters</name>
|
663 |
|
|
<type>select</type>
|
664 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->dhkey</bindstofield>
|
665 |
4cd437f2
|
Ermal Lu?i
|
<options>
|
666 |
5ce63c3e
|
jim-p
|
<option>
|
667 |
|
|
<name>1024 bit</name>
|
668 |
|
|
<value>1024</value>
|
669 |
|
|
</option>
|
670 |
|
|
<option>
|
671 |
|
|
<name>2048 bit</name>
|
672 |
|
|
<value>2048</value>
|
673 |
|
|
</option>
|
674 |
|
|
<option>
|
675 |
|
|
<name>4096 bit</name>
|
676 |
|
|
<value>4096</value>
|
677 |
|
|
</option>
|
678 |
|
|
</options>
|
679 |
|
|
<description><br/>Length of Diffie-Hellman (DH) key exchange parameters, used for establishing a secure communications channel. As with other such settings, the larger values are more secure, but may be slower in operation.</description>
|
680 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
681 |
eb20f3c5
|
Ermal Lu?i
|
<field>
|
682 |
|
|
<name>crypto</name>
|
683 |
|
|
<type>select</type>
|
684 |
b6fe3414
|
jim-p
|
<displayname>Encryption Algorithm</displayname>
|
685 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->crypto</bindstofield>
|
686 |
eb20f3c5
|
Ermal Lu?i
|
<options>
|
687 |
5ce63c3e
|
jim-p
|
<option>
|
688 |
|
|
<name>dummy</name>
|
689 |
|
|
<value>dummy</value>
|
690 |
|
|
</option>
|
691 |
eb20f3c5
|
Ermal Lu?i
|
</options>
|
692 |
5ce63c3e
|
jim-p
|
<description><br/>The method used to encrypt traffic between endpoints. This setting must match on the client and server side, but is otherwise set however you like. Certain algorithms will perform better on different hardware, depending on the availability of supported VPN accelerator chips.</description>
|
693 |
eb20f3c5
|
Ermal Lu?i
|
</field>
|
694 |
85bdf997
|
jim-p
|
<field>
|
695 |
|
|
<name>digest</name>
|
696 |
|
|
<type>select</type>
|
697 |
|
|
<displayname>Auth Digest Algorithm</displayname>
|
698 |
|
|
<bindstofield>ovpnserver->step10->digest</bindstofield>
|
699 |
|
|
<options>
|
700 |
|
|
<option>
|
701 |
|
|
<name>dummy</name>
|
702 |
|
|
<value>dummy</value>
|
703 |
|
|
</option>
|
704 |
|
|
</options>
|
705 |
|
|
<value>SHA1</value>
|
706 |
|
|
<description><br/>The method used to authenticate traffic between endpoints. This setting must match on the client and server side, but is otherwise set however you like.</description>
|
707 |
|
|
</field>
|
708 |
582c58ae
|
jim-p
|
<field>
|
709 |
|
|
<name>engine</name>
|
710 |
|
|
<type>select</type>
|
711 |
|
|
<displayname>Hardware Crypto</displayname>
|
712 |
|
|
<bindstofield>ovpnserver->step10->engine</bindstofield>
|
713 |
|
|
<options>
|
714 |
|
|
<option>
|
715 |
|
|
<name>dummy</name>
|
716 |
|
|
<value>dummy</value>
|
717 |
|
|
</option>
|
718 |
|
|
</options>
|
719 |
|
|
<description><br/>The hardware cryptographic accelerator to use for this VPN connection, if any.</description>
|
720 |
|
|
</field>
|
721 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
722 |
|
|
<type>listtopic</type>
|
723 |
|
|
<name>Tunnel Settings</name>
|
724 |
|
|
</field>
|
725 |
|
|
<field>
|
726 |
b6fe3414
|
jim-p
|
<displayname>Tunnel Network</displayname>
|
727 |
eb20f3c5
|
Ermal Lu?i
|
<name>tunnelnet</name>
|
728 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
729 |
|
|
<size>20</size>
|
730 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->tunnelnet</bindstofield>
|
731 |
5ce63c3e
|
jim-p
|
<description>This is the virtual network used for private communications between this server and client hosts expressed using CIDR notation (eg. 10.0.8.0/24). The first network address will be assigned to the server virtual interface. The remaining network addresses can optionally be assigned to connecting clients. (see Address Pool)</description>
|
732 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
733 |
|
|
<field>
|
734 |
|
|
<displayname>Redirect Gateway</displayname>
|
735 |
|
|
<name>redirectgw</name>
|
736 |
|
|
<type>checkbox</type>
|
737 |
|
|
<description>Force all client generated traffic through the tunnel.</description>
|
738 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->rdrgw</bindstofield>
|
739 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
740 |
|
|
<field>
|
741 |
b6fe3414
|
jim-p
|
<displayname>Local Network</displayname>
|
742 |
eb20f3c5
|
Ermal Lu?i
|
<name>localnet</name>
|
743 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
744 |
|
|
<size>20</size>
|
745 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->localnet</bindstofield>
|
746 |
5ce63c3e
|
jim-p
|
<description>This is the network that will be accessible from the remote endpoint, expressed as a CIDR range. You may leave this blank if you don't want to add a route to the local network through this tunnel on the remote machine. This is generally set to your LAN network.</description>
|
747 |
|
|
</field>
|
748 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
749 |
|
|
<displayname>Concurrent Connections</displayname>
|
750 |
|
|
<name>concurrentcon</name>
|
751 |
|
|
<description>Specify the maximum number of clients allowed to concurrently connect to this server.</description>
|
752 |
|
|
<type>input</type>
|
753 |
|
|
<size>10</size>
|
754 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->concurrentcon</bindstofield>
|
755 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
756 |
|
|
<field>
|
757 |
5ce63c3e
|
jim-p
|
<displayname>Compression</displayname>
|
758 |
|
|
<name>compression</name>
|
759 |
edba1982
|
jim-p
|
<description><br/>Compress tunnel packets using the LZO algorithm. Adaptive compression will dynamically disable compression for a period of time if OpenVPN detects that the data in the packets is not being compressed efficiently.</description>
|
760 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->compression</bindstofield>
|
761 |
edba1982
|
jim-p
|
<type>select</type>
|
762 |
|
|
<options>
|
763 |
|
|
<option>
|
764 |
|
|
<name>dummy</name>
|
765 |
|
|
<value>dummy</value>
|
766 |
|
|
</option>
|
767 |
|
|
</options>
|
768 |
5ce63c3e
|
jim-p
|
</field>
|
769 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
770 |
5ce63c3e
|
jim-p
|
<displayname>Type-of-Service</displayname>
|
771 |
|
|
<name>tos</name>
|
772 |
|
|
<type>checkbox</type>
|
773 |
|
|
<description>Set the TOS IP header value of tunnel packets to match the encapsulated packet value.</description>
|
774 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->tos</bindstofield>
|
775 |
5ce63c3e
|
jim-p
|
</field>
|
776 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
777 |
b6fe3414
|
jim-p
|
<displayname>Inter-Client Communication</displayname>
|
778 |
5ce63c3e
|
jim-p
|
<name>interclient</name>
|
779 |
|
|
<type>checkbox</type>
|
780 |
|
|
<description>Allow communication between clients connected to this server.</description>
|
781 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->interclient</bindstofield>
|
782 |
5ce63c3e
|
jim-p
|
</field>
|
783 |
bca35cff
|
jim-p
|
<field>
|
784 |
|
|
<displayname>Duplicate Connections</displayname>
|
785 |
|
|
<name>duplicate_cn</name>
|
786 |
|
|
<type>checkbox</type>
|
787 |
|
|
<description>Allow multiple concurrent connections from clients using the same Common Name.<br/>NOTE: This is not generally recommended, but may be needed for some scenarios.</description>
|
788 |
|
|
<bindstofield>ovpnserver->step10->duplicate_cn</bindstofield>
|
789 |
|
|
</field>
|
790 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
791 |
|
|
<type>listtopic</type>
|
792 |
|
|
<name>Client Settings</name>
|
793 |
|
|
</field>
|
794 |
df6df70f
|
jim-p
|
<field>
|
795 |
|
|
<displayname>Dynamic IP</displayname>
|
796 |
|
|
<name>dynip</name>
|
797 |
|
|
<type>checkbox</type>
|
798 |
|
|
<value>on</value>
|
799 |
|
|
<description>Allow connected clients to retain their connections if their IP address changes.</description>
|
800 |
|
|
<bindstofield>ovpnserver->step10->dynip</bindstofield>
|
801 |
|
|
</field>
|
802 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
803 |
5ce63c3e
|
jim-p
|
<displayname>Address Pool</displayname>
|
804 |
|
|
<name>addrpool</name>
|
805 |
|
|
<type>checkbox</type>
|
806 |
30d98ad3
|
Ermal
|
<value>on</value>
|
807 |
5ce63c3e
|
jim-p
|
<description>Provide a virtual adapter IP address to clients (see Tunnel Network).</description>
|
808 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->addrpool</bindstofield>
|
809 |
5ce63c3e
|
jim-p
|
</field>
|
810 |
|
|
<field>
|
811 |
|
|
<displayname>DNS Default Domain</displayname>
|
812 |
|
|
<name>defaultdomain</name>
|
813 |
|
|
<type>input</type>
|
814 |
|
|
<description>Provide a default domain name to clients.</description>
|
815 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->defaultdomain</bindstofield>
|
816 |
5ce63c3e
|
jim-p
|
</field>
|
817 |
|
|
<field>
|
818 |
|
|
<displayname>DNS Server 1</displayname>
|
819 |
|
|
<name>dnsserver1</name>
|
820 |
|
|
<type>input</type>
|
821 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->dns1</bindstofield>
|
822 |
5ce63c3e
|
jim-p
|
<description>DNS server to provide for connecting client systems.</description>
|
823 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
824 |
|
|
<field>
|
825 |
5ce63c3e
|
jim-p
|
<displayname>DNS Server 2</displayname>
|
826 |
4cd437f2
|
Ermal Lu?i
|
<name>dnserver2</name>
|
827 |
|
|
<type>input</type>
|
828 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->dns2</bindstofield>
|
829 |
5ce63c3e
|
jim-p
|
<description>DNS server to provide for connecting client systems.</description>
|
830 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
831 |
|
|
<field>
|
832 |
5ce63c3e
|
jim-p
|
<displayname>DNS Server 3</displayname>
|
833 |
4cd437f2
|
Ermal Lu?i
|
<name>dnserver3</name>
|
834 |
|
|
<type>input</type>
|
835 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->dns3</bindstofield>
|
836 |
5ce63c3e
|
jim-p
|
<description>DNS server to provide for connecting client systems.</description>
|
837 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
838 |
|
|
<field>
|
839 |
5ce63c3e
|
jim-p
|
<displayname>DNS Server 4</displayname>
|
840 |
4cd437f2
|
Ermal Lu?i
|
<name>dnserver4</name>
|
841 |
|
|
<type>input</type>
|
842 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->dns4</bindstofield>
|
843 |
5ce63c3e
|
jim-p
|
<description>DNS server to provide for connecting client systems.</description>
|
844 |
|
|
</field>
|
845 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
846 |
5ce63c3e
|
jim-p
|
<displayname>NTP Server</displayname>
|
847 |
|
|
<name>ntpserver1</name>
|
848 |
|
|
<type>input</type>
|
849 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->ntp1</bindstofield>
|
850 |
5ce63c3e
|
jim-p
|
<description>Network Time Protocol server to provide for connecting client systems.</description>
|
851 |
|
|
</field>
|
852 |
|
|
<field>
|
853 |
|
|
<displayname>NTP Server 2</displayname>
|
854 |
|
|
<name>ntpserver2</name>
|
855 |
4cd437f2
|
Ermal Lu?i
|
<type>input</type>
|
856 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->ntp2</bindstofield>
|
857 |
5ce63c3e
|
jim-p
|
<description>Network Time Protocol server to provide for connecting client systems.</description>
|
858 |
|
|
</field>
|
859 |
eb20f3c5
|
Ermal Lu?i
|
<field>
|
860 |
|
|
<name>nbtenable</name>
|
861 |
|
|
<type>checkbox</type>
|
862 |
5ce63c3e
|
jim-p
|
<displayname>NetBIOS Options</displayname>
|
863 |
528992be
|
jim-p
|
<bindstofield>ovpnserver->step10->nbtenable</bindstofield>
|
864 |
5ce63c3e
|
jim-p
|
<description>Enable NetBIOS over TCP/IP. <br/>If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) will be disabled. </description>
|
865 |
|
|
</field>
|
866 |
|
|
<field>
|
867 |
|
|
<displayname>NetBIOS Node Type</displayname>
|
868 |
|
|
<name>nbttype</name>
|
869 |
|
|
<type>select</type>
|
870 |
|
|
<bindstofield>ovpnserver->step10->nbttype</bindstofield>
|
871 |
|
|
<options>
|
872 |
|
|
<option>
|
873 |
|
|
<name>dummy</name>
|
874 |
|
|
<value>dummy</value>
|
875 |
|
|
</option>
|
876 |
|
|
</options>
|
877 |
|
|
<description><br/>Possible options: b-node (broadcasts), p-node (point-to-point name queries to a WINS server), m-node (broadcast then query name server), and h-node (query name server, then broadcast).</description>
|
878 |
|
|
</field>
|
879 |
|
|
<field>
|
880 |
|
|
<displayname>NetBIOS Scope ID</displayname>
|
881 |
|
|
<name>nbtscope</name>
|
882 |
|
|
<type>input</type>
|
883 |
|
|
<bindstofield>ovpnserver->step10->nbtscope</bindstofield>
|
884 |
|
|
<description>A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to only those nodes with the same NetBIOS scope ID.</description>
|
885 |
|
|
</field>
|
886 |
|
|
<field>
|
887 |
|
|
<displayname>WINS Server 1</displayname>
|
888 |
|
|
<name>winsserver1</name>
|
889 |
|
|
<type>input</type>
|
890 |
|
|
<bindstofield>ovpnserver->step10->wins1</bindstofield>
|
891 |
|
|
<description>A Windows Internet Name Service (WINS) server to provide for connecting clients, which allows them to browse Windows shares. This is typically an Active Directory Domain Controller, designated WINS server, or Samba server.</description>
|
892 |
|
|
</field>
|
893 |
|
|
<field>
|
894 |
|
|
<displayname>WINS Server 2</displayname>
|
895 |
|
|
<name>winsserver2</name>
|
896 |
|
|
<type>input</type>
|
897 |
|
|
<bindstofield>ovpnserver->step10->wins2</bindstofield>
|
898 |
|
|
<description>A Windows Internet Name Service (WINS) server to provide for connecting clients, which allows them to browse Windows shares. This is typically an Active Directory Domain Controller, designated WINS server, or Samba server.</description>
|
899 |
|
|
</field>
|
900 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
901 |
|
|
<name>Advanced</name>
|
902 |
|
|
<type>textarea</type>
|
903 |
|
|
<cols>30</cols>
|
904 |
|
|
<rows>5</rows>
|
905 |
|
|
<description>Enter any additional options you would like to add to the OpenVPN server configuration here, separated by a semicolon. EXAMPLE: push "route 10.0.0.0 255.255.255.0"</description>
|
906 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step10->advanced</bindstofield>
|
907 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
908 |
|
|
<field>
|
909 |
|
|
<name>Next</name>
|
910 |
|
|
<type>submit</type>
|
911 |
|
|
</field>
|
912 |
|
|
</fields>
|
913 |
2ca50c87
|
Ermal Lu?i
|
<stepbeforeformdisplay>step10_stepbeforeformdisplay();</stepbeforeformdisplay>
|
914 |
|
|
<stepsubmitphpaction>step10_submitphpaction();</stepsubmitphpaction>
|
915 |
4cd437f2
|
Ermal Lu?i
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
916 |
|
|
</step>
|
917 |
|
|
<step>
|
918 |
2ca50c87
|
Ermal Lu?i
|
<id>11</id>
|
919 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Firewall Rule Configuration</title>
|
920 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
921 |
|
|
<disableheader>on</disableheader>
|
922 |
4cd437f2
|
Ermal Lu?i
|
<fields>
|
923 |
f9fa5d10
|
Ermal
|
<field>
|
924 |
|
|
<type>listtopic</type>
|
925 |
5ce63c3e
|
jim-p
|
<name>Firewall Rule Configuration</name>
|
926 |
f9fa5d10
|
Ermal
|
</field>
|
927 |
|
|
<field>
|
928 |
|
|
<type>text</type>
|
929 |
b1aa904f
|
Chris Buechler
|
<description>Firewall Rules control what network traffic is permitted. You must add rules to allow traffic to the OpenVPN server's IP and port, as well as allowing traffic from connected clients through the tunnel. These rules can be automatically added here, or configured manually after completing the wizard.</description>
|
930 |
f9fa5d10
|
Ermal
|
</field>
|
931 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
932 |
|
|
<type>listtopic</type>
|
933 |
|
|
<name>Traffic from clients to server</name>
|
934 |
|
|
</field>
|
935 |
|
|
<field>
|
936 |
|
|
<name>ovpnrule</name>
|
937 |
|
|
<displayname>Firewall Rule</displayname>
|
938 |
5ce63c3e
|
jim-p
|
<description>Add a rule to permit traffic from clients on the Internet to the OpenVPN server process.</description>
|
939 |
4cd437f2
|
Ermal Lu?i
|
<type>checkbox</type>
|
940 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step11->ovpnrule</bindstofield>
|
941 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
942 |
|
|
<field>
|
943 |
|
|
<type>listtopic</type>
|
944 |
|
|
<name>Traffic from clients through VPN</name>
|
945 |
|
|
</field>
|
946 |
|
|
<field>
|
947 |
|
|
<name>ovpnallow</name>
|
948 |
|
|
<displayname>OpenVPN rule</displayname>
|
949 |
5ce63c3e
|
jim-p
|
<description>Add a rule to allow all traffic from connected clients to pass across the VPN tunnel.</description>
|
950 |
4cd437f2
|
Ermal Lu?i
|
<type>checkbox</type>
|
951 |
2ca50c87
|
Ermal Lu?i
|
<bindstofield>ovpnserver->step11->ovpnallow</bindstofield>
|
952 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
953 |
|
|
<field>
|
954 |
|
|
<name>Next</name>
|
955 |
|
|
<type>submit</type>
|
956 |
|
|
</field>
|
957 |
|
|
</fields>
|
958 |
|
|
</step>
|
959 |
|
|
<step>
|
960 |
2ca50c87
|
Ermal Lu?i
|
<id>12</id>
|
961 |
9cb9c7d4
|
jim-p
|
<title>OpenVPN Wizard: Finished!</title>
|
962 |
7a2ec71b
|
Ermal Lu?i
|
<description>OpenVPN Remote Access Server Setup Wizard</description>
|
963 |
|
|
<disableheader>on</disableheader>
|
964 |
4cd437f2
|
Ermal Lu?i
|
<fields>
|
965 |
f9fa5d10
|
Ermal
|
<field>
|
966 |
|
|
<type>listtopic</type>
|
967 |
|
|
<name>Configuration Complete!</name>
|
968 |
|
|
</field>
|
969 |
|
|
<field>
|
970 |
|
|
<type>text</type>
|
971 |
|
|
<description>Your configuration is now complete.</description>
|
972 |
|
|
</field>
|
973 |
4cd437f2
|
Ermal Lu?i
|
<field>
|
974 |
|
|
<type>text</type>
|
975 |
f9fa5d10
|
Ermal
|
<description>To be able to export client configurations, browse to System->Packages and install the OpenVPN Client Export package.</description>
|
976 |
4cd437f2
|
Ermal Lu?i
|
</field>
|
977 |
|
|
<field>
|
978 |
|
|
<type>submit</type>
|
979 |
|
|
<name>Finish</name>
|
980 |
|
|
</field>
|
981 |
|
|
</fields>
|
982 |
2ca50c87
|
Ermal Lu?i
|
<stepsubmitphpaction>step12_submitphpaction();</stepsubmitphpaction>
|
983 |
4cd437f2
|
Ermal Lu?i
|
<includefile>/usr/local/www/wizards/openvpn_wizard.inc</includefile>
|
984 |
|
|
</step>
|
985 |
0e01b3c6
|
jim-p
|
</pfsensewizard>
|