pfSense

						</td>

						<td onclick="fr_toggle(<?=$i?>)" id="frd<?=$i?>">

<?php

				echo "V1";

				echo "V2";

?>

						</td>

						<td>

				$iflabels = get_configured_interface_with_descr();

				$carplist = get_configured_carp_interface_list();

					$iflabels[$cif] = $carpip." (".get_vip_descr($carpip).")";

				$aliaslist = get_configured_ip_aliases_list();

					$iflabels[$aliasip] = $aliasip." (".get_vip_descr($aliasip).")";

				$grouplist = return_gateway_groups_array();

				foreach ($grouplist as $name => $group) {

						$vipif = $group[0]['vip'];

						$vipif = $group[0]['int'];

					$iflabels[$name] = "GW Group {$name}";

				}

				$if = htmlspecialchars($iflabels[$ph1ent['interface']]);

				$if = "WAN";

				echo $if."<br />".$ph1ent['remote-gateway'];

				echo $if."<br /><strong>" . gettext("Mobile Client") . "</strong>";

?>

						</td>

						<td onclick="fr_toggle(<?=$i?>)" id="frd<?=$i?>">

					<?=$spans?>

					<?php

						echo "{$ph1ent['mode']}";

					?>

					<?=$spane?>

				</td>

					<?=$p1_ealgos[$ph1ent['encryption-algorithm']['name']]['name']?>

<?php

			if ($ph1ent['encryption-algorithm']['keylen']) {

					echo " (" . gettext("auto") . ")";

					echo " ({$ph1ent['encryption-algorithm']['keylen']} " . gettext("bits") . ")";

			}

?>

						</td>

						<td colspan="2"></td>

						<td colspan="7" class="contains-table">

<?php

				$tdph2_visible = htmlspecialchars($_POST["tdph2-{$i}-visible"]);

				$tdph2_visible = 0;

?>

							<input type="hidden" name="tdph2-<?=$i?>-visible" id="tdph2-<?=$i?>-visible" value="<?=$tdph2_visible?>" />

							<div id="shph2but-<?=$i?>" <?=($tdph2_visible == '1' ? 'style="display:none"' : '')?>>

				$phase2count=0;

				foreach ($a_phase2 as $ph2ent) {

						continue;

					$phase2count++;

				}

				$fr_prefix = "frp2{$i}";

									<tbody class="p2-entries">

<?php $j = 0; foreach ($a_phase2 as $ph2index => $ph2ent): ?>

<?php

							continue;

						$fr_c = $fr_prefix . "c" . $j;

						$fr_d = $fr_prefix . "d" . $j;

						$iconfn = "pass";

						$entryStatus = (isset($ph2ent['disabled']) || isset($ph1ent['disabled']) ? 'disabled' : 'enabled');

							$iconfn .= "_d";

?>

										<tr id="<?=$fr_prefix . $j?>" ondblclick="document.location='vpn_ipsec_phase2.php?p2index=<?=$ph2ent['uniqid']?>'" class="<?= $entryStatus ?>">

											<td>

											<td id="<?=$fr_d?>" onclick="fr_toggle('<?=$j?>', '<?=$fr_prefix?>')">

												<?=$ph2ent['mode']?>

											</td>

											<td id="<?=$fr_d?>" onclick="fr_toggle('<?=$j?>', '<?=$fr_prefix?>')">

												<?=ipsec_idinfo_to_text($ph2ent['localid']); ?>

											</td>

											<td id="<?=$fr_d?>" onclick="fr_toggle('<?=$j?>', '<?=$fr_prefix?>')">

<?php

								foreach ($ph2ent['encryption-algorithm-option'] as $k => $ph2ea) {

										echo ", ";

									echo $p2_ealgos[$ph2ea['name']]['name'];

									if ($ph2ea['keylen']) {

											echo " (" . gettext("auto") . ")";

											echo " ({$ph2ea['keylen']} " . gettext("bits") . ")";

									}

								}

?>

<?php

								if (!empty($ph2ent['hash-algorithm-option']) && is_array($ph2ent['hash-algorithm-option'])) {

									foreach ($ph2ent['hash-algorithm-option'] as $k => $ph2ha) {

											echo ", ";

										echo $p2_halgos[$ph2ha];

									}

								}

	});

	$('[id^=Xdel_]').click(function (event) {

			$('#' + event.target.id.slice(1)).click();

		}

	});

	$('[id^=Xdelp2_]').click(function (event) {

			$('#' + event.target.id.slice(1)).click();

		}

	});

?>

<?php

	print_info_box($savemsg);

	print_info_box_np(gettext("The IPsec tunnel configuration has been changed") . ".<br />" . gettext("You must apply the changes in order for them to take effect."));

?>

<?php

			<tr>

				<td>

					<?php

						echo gettext("ANY USER");

						echo htmlspecialchars($secretent['ident']);

					?>

				</td>

				<td>

					<?php

						echo 'PSK';

						echo htmlspecialchars($secretent['type']);

					?>

				</td>

				<td>

				</td>

				<td>

					<?php

						echo 'PSK';

						echo htmlspecialchars($secretent['type']);

					?>

				</td>

				<td>

	$pconfig['psk']

));

	$form->addGlobal(new Form_Input(

		'id',

		false,

		function dns_domain_change() {

				document.iform.dns_domain.disabled = 0;

				document.iform.dns_domain.disabled = 1;

		}

		function dns_split_change() {

				document.iform.dns_split.disabled = 0;

				document.iform.dns_split.disabled = 1;

		}

		function dns_server_change() {

		function pfs_group_change() {

				document.iform.pfs_group.disabled = 0;

				document.iform.pfs_group.disabled = 1;

		}

		function login_banner_change() {

				document.iform.login_banner.disabled = 0;

				document.iform.login_banner.disabled = 1;

		}

		//]]>

	</script>

<?php

	print_info_box($savemsg);

	print_info_box_np(gettext("The IPsec tunnel configuration has been changed") . ".<br />" . gettext("You must apply the changes in order for them to take effect."));

		$ph1found = true;

	print_input_errors($input_errors);

$tab_array = array();

$tab_array[0] = array(gettext("Tunnels"), false, "vpn_ipsec.php");

$authServers = array();

	$authServers[$authServer['name']] = $authServer['name']; // Value == name

$section->addInput(new Form_Select(

	'user_source',

$group = new Form_Group('');

$group->addClass('toggle-pool_enable collapse');

	$group->addClass('in');

$group->add(new Form_Input(

	'pool_address',

$netBits = array();

	$netBits[$i] = $i;

$group->add(new Form_Select(

	'pool_netbits',

$group = new Form_Group('');

$group->addClass('toggle-pool_enable_v6 collapse');

	$group->addClass('in');

$group->add(new Form_Input(

	'pool_address_v6',

$netBits = array();

	$netBitsv6[$i] = $i;

$group->add(new Form_Select(

	'pool_netbits_v6',

$group = new Form_Group('');

$group->addClass('toggle-dns_domain collapse');

	$group->addClass('in');

$group->add(new Form_Input(

	'dns_domain',

$group = new Form_Group('');

$group->addClass('toggle-dns_split collapse');

	$group->addClass('in');

$group->add(new Form_Input(

	'dns_split',

	$pconfig['dns_server_enable']

))->toggles('.toggle-dns_server_enable');

	$group = new Form_Group('Server #' . $i);

	$group->addClass('toggle-dns_server_enable collapse');

		$group->addClass('in');

	$group->add(new Form_Input(

		'dns_server' . $i,

	$pconfig['wins_server_enable']

))->toggles('.toggle-wins_server_enable');

	$group = new Form_Group('Server #' . $i);

	$group->addClass('toggle-wins_server_enable collapse');

		$group->addClass('in');

	$group->add(new Form_Input(

		'wins_server' . $i,

$group = new Form_Group('Group');

$group->addClass('toggle-pfs_group collapse');

	$group->addClass('in');

$group->add(new Form_Select(

	'pfs_group',

$group = new Form_Group('');

$group->addClass('toggle-login_banner collapse');

	$group->addClass('in');

// TODO: should be a textarea

$group->add(new Form_Input(

	$pconfig['authentication_method'] = $a_phase1[$p1index]['authentication_method'];

	if (($pconfig['authentication_method'] == "pre_shared_key") ||

		$pconfig['pskey'] = $a_phase1[$p1index]['pre-shared-key'];

	} else {

		$pconfig['certref'] = $a_phase1[$p1index]['certref'];

	$carplist = get_configured_carp_interface_list();

	$aliaslist = get_configured_ip_aliases_list();

		$interfaces[$aliasip] = $aliasip." (".get_vip_descr($aliasip).")";

	$grouplist = return_gateway_groups_array();

	foreach ($grouplist as $name => $group) {

			$vipif = $group[0]['vip'];

			$vipif = $group[0]['int'];

		$interfaces[$name] = "GW Group {$name}";

	}

	$list = array();

			continue;

		$list[$method_type] = htmlspecialchars($method_params['name']);

	}

	$list = array();

		$list[$id_type] = htmlspecialchars($id_params['desc']);

	return($list);

}

	$list = array();

		$list[$id_type] = htmlspecialchars($id_params['desc']);

	return($list);

}

	$list = array();

			$list[$cert['refid']] = $cert['descr'];

	}

	return($list);

	$list = array();

	}

	return($list);

	$list = array();

			$list[$algo] = htmlspecialchars($algodata['name']);

	}

	return($list);

	$pconfig['peerid_data']

));

	$group->setHelp('This is known as the "group" setting on some VPN client implementations');

$section->add($group);

/* determine if we should init the key length */

$keyset = '';

		$keyset = $pconfig['ealgo']['keylen'];

?>

<script type="text/javascript">

//<![CDATA[

	function myidsel_change() {

		hideGroupInput('myid_data', ($('#myid_type').val() == 'myaddress'));

?>

		}

			$('#ealgo_keylen').val(bits);

	}

	function dpdchkbox_change() {

		hideInput('dpd_delay', hide);

		hideInput('dpd_maxfail', hide);

			$('#dpd_delay').val('10')

			$('#dpd_maxfail').val('5')

	}

	// ---------- Monitor elements for change and call the appropriate display functions ----------

				$entered = array();

				$entered['type'] = $pconfig['localid_type'];

					$entered['address'] = $pconfig['localid_address'];

					$entered['netbits'] = $pconfig['localid_netbits'];

				$entered_localid_data = ipsec_idinfo_to_cidr($entered, false, $pconfig['mode']);

				if ($localid_data == $entered_localid_data) {

	return $ealgos;

}

	$pconfig['ealgos'] = array();

	foreach ($ealgos as $algo_data) {

	return $ealgos;

}

	$type = $pconfig[$prefix."id_type"];

	$address = $pconfig[$prefix."id_address"];

	}

}

	switch ($idinfo['type']) {

		case "address":

	}

}

	print_input_errors($input_errors);

$tab_array = array();

$tab_array[0] = array(gettext("Tunnels"), !$editing_mobile, "vpn_ipsec.php");

$group->addClass('opt_localid');

$subnetarray = get_configured_interface_with_descr();

	$subnetarray[$ifname] = $ifdescr . ' subnet';

$group->add(new Form_Select(

	'localid_type',

$group->addClass('opt_natid');

$subnetarray = get_configured_interface_with_descr();

	$subnetarray[$ifname] = $ifdescr . ' subnet';

// Tack none, address & network on the beginning

$subnetarray = array('none' => gettext('None'), 'address' => 'Address', 'network' => 'Network') + $subnetarray;

		'ealgos[]',

		null,

		$algodata['name'],

		$algo

	))->addClass('multi');

		$list = array();

		$key_hi = $algodata['keysel']['hi'];

		$key_lo = $algodata['keysel']['lo'];

	}

		$group->setHelp('Use 3DES for best compatibility or if you have a hardware crypto accelerator card. Blowfish is usually the fastest in software encryption.');

	$i++;

	$section->add($group);

<script type="text/javascript">

//<![CDATA[

	// ---------- On changing "Mode" ----------------------------------------------------------------------------------

	function change_mode() {

		if (typeof(bits) === "undefined") {

			if (value === "tunnel") {

				bits = 24;

				bits = 64;

			}

		}

		if (typeof(bits) === "undefined") {

			if (value === "tunnel") {

				bits = 24;

				bits = 64;

			}

		}

			if (typeof(bits) === "undefined") {

				if (value === "tunnel") {

					bits = 24;

					bits = 64;

				}

			}

</script>

<?php

	print_info_box($savemsg);

	print_input_errors($input_errors);

$tab_array = array();

$tab_array[0] = array(gettext("Tunnels"), false, "vpn_ipsec.php");

$section = new Form_Section('Start IPsec in debug mode based on sections selected');

	$section->addInput(new Form_Select(

		$cat,

		$desc,

$group = new Form_Group('Maximum MSS');

$group->addClass('toggle-maxmss collapse');

	$group->addClass('in');

$group->add(new Form_Input(

	'maxmss',

			$subnet_end = ip2ulong($_POST['remoteip']) + $_POST['n_l2tp_units'] - 1;

			if ((ip2ulong($_POST['localip']) >= $subnet_start) &&

				$input_errors[] = gettext("The specified server address lies in the remote subnet.");

			}

			if ($_POST['localip'] == get_interface_ip("lan")) {

$shortcut_section = "l2tps";

include("head.inc");

	print_input_errors($input_errors);

	print_info_box($savemsg);

$tab_array = array();

$tab_array[] = array(gettext("Configuration"), true, "vpn_l2tp.php");

<script type="text/javascript">

//<![CDATA[

	function setL2TP () {

		hide = ! $('#mode').prop('checked');

include("head.inc");

	print_info_box($savemsg, success);

	print_info_box(gettext("Warning: RADIUS is enabled. The local user database will not be used."));

	print_info_box_np(gettext("The l2tp user list has been modified") . ".<br />" . gettext("You must apply the changes in order for them to take effect") . ".<br /><b>" . gettext("Warning: this will terminate all current l2tp sessions!") . "</b>");

?>

<div class="table-responsive">

	<table class="table table-striped table-hover">

					<?=htmlspecialchars($secretent['name'])?>

				</td>

				<td>

					<?=htmlspecialchars($secretent['ip'])?>&nbsp;

				</td>

				<td>

?>

<?php

	print_input_errors($input_errors);

?>

<form class="form-horizontal" action="vpn_l2tp_users_edit.php" method="post" name="iform" id="iform">

	if (!$tls_mode && !$pconfig['autokey_enable']) {

		if (!strstr($pconfig['shared_key'], "-----BEGIN OpenVPN Static key V1-----") ||

			$input_errors[] = gettext("The field 'Shared Key' does not appear to be valid");

		}

	}

	if ($tls_mode && $pconfig['tlsauth_enable'] && !$pconfig['autotls_enable']) {

		if (!strstr($pconfig['tls'], "-----BEGIN OpenVPN Static key V1-----") ||

			$input_errors[] = gettext("The field 'TLS Authentication Key' does not appear to be valid");

		}

	}

include("head.inc");

	$savemsg = "";

	print_input_errors($input_errors);

	print_info_box($savemsg, 'success');

$tab_array = array();

$tab_array[] = array(gettext("Server"), false, "vpn_openvpn_server.php");

add_package_tabs("OpenVPN", $tab_array);

display_top_tabs($tab_array);

	$form = new Form();

	$section = new Form_Section('General Information');

	if (count($a_ca)) {

		$list = array();

			$list[$ca['refid']] = $ca['descr'];

		$section->addInput(new Form_Select(

			'caref',

			<tbody>

<?php

	$i = 0;

		$server = "{$client['server_addr']}:{$client['server_port']}";

?>

				<tr <?=isset($server['disable']) ? 'class="disabled"':''?>>

// Note:

// The following *_change() functions were converted from Javascript/DOM to JQuery but otherwise

?>

<script type="text/javascript">

//<![CDATA[

	function mode_change() {

			case "p2p_tls":

				hideCheckbox('tlsauth_enable', false);

				hideInput('caref', false);

include("head.inc");

	print_input_errors($input_errors);

	print_info_box($savemsg, 'success');

$tab_array = array();

$tab_array[] = array(gettext("Server"), false, "vpn_openvpn_server.php");

add_package_tabs("OpenVPN", $tab_array);

display_top_tabs($tab_array);

	$form = new Form();

	$section = new Form_Section('General Information');

<script type="text/javascript">

//<![CDATA[

	// Hide/show that section, but have to also respect the wins_server_enable checkbox

	function setNetbios() {

			hideInput('netbios_ntype', false);

			hideInput('netbios_scope', false);

			hideCheckbox('wins_server_enable', false);

			<tbody>

<?php

	$i = 0;

		$disabled = isset($csc['disable']) ? "Yes":"No";

?>

				<tr>

		$pconfig['dns_server4'] = $a_server[$id]['dns_server4'];

		if ($pconfig['dns_server1'] ||

			$pconfig['dns_server_enable'] = true;

		}

		$pconfig['ntp_server2'] = $a_server[$id]['ntp_server2'];

		if ($pconfig['ntp_server1'] ||

			$pconfig['ntp_server_enable'] = true;

		}

		$pconfig['wins_server2'] = $a_server[$id]['wins_server2'];

		if ($pconfig['wins_server1'] ||

			$pconfig['wins_server_enable'] = true;

		}

	if (!$tls_mode && !$pconfig['autokey_enable']) {

		if (!strstr($pconfig['shared_key'], "-----BEGIN OpenVPN Static key V1-----") ||

			$input_errors[] = gettext("The field 'Shared Key' does not appear to be valid");

		}

	}

	if ($tls_mode && $pconfig['tlsauth_enable'] && !$pconfig['autotls_enable']) {

		if (!strstr($pconfig['tls'], "-----BEGIN OpenVPN Static key V1-----") ||

			$input_errors[] = gettext("The field 'TLS Authentication Key' does not appear to be valid");

		}

	}

			$input_errors[] = gettext("Using a tunnel network and server bridge settings together is not allowed.");

		}

		if (($pconfig['serverbridge_dhcp_start'] && !$pconfig['serverbridge_dhcp_end']) ||

			$input_errors[] = gettext("Server Bridge DHCP Start and End must both be empty, or defined.");

		}

		if (($pconfig['serverbridge_dhcp_start'] && !is_ipaddrv4($pconfig['serverbridge_dhcp_start']))) {

include("head.inc");

	$savemsg = "";

	print_input_errors($input_errors);

	print_info_box_np($savemsg, 'success');

$tab_array = array();

$tab_array[] = array(gettext("Server"), true, "vpn_openvpn_server.php");

$form = new Form();

	$section = new Form_Section('General Information');

		$authmodes[0] = key($auth_servers);

	}

		$options[$auth_server_key] = $auth_server['name'];

	$section->addInput(new Form_Select(

		'authmode',

	if (count($a_ca)) {

		$list = array();

			$list[$ca['refid']] = $ca['descr'];

		$section->addInput(new Form_Select(

			'caref',

		'dh_length',

		'DH Parameter length (bits)',

		$pconfig['dh_length'],

		))->setHelp(count($a_cert) ? '':sprintf('No Certificates defined. You may create one here: %s', '<a href="system_camanager.php">System &gt; Cert Manager</a>'));

	if (!$pconfig['shared_key']) {

			<tbody>

<?php

	$i = 0;

?>

				<tr <?=isset($server['disable']) ? 'class="disabled"':''?>>

					<td>

<script type="text/javascript">

//<![CDATA[

	function mode_change() {

		value = $('#mode').val();

		hideInput('crlref', false);

		hideLabel('Peer Certificate Revocation list', false);

			case "p2p_tls":

			case "server_tls":

			case "server_user":

				break;

		}

			case "p2p_shared_key":

				hideClass('advanced', true);

				hideInput('remote_network', false);

	// Hide 'autotls_enable' AND 'tls' if mode == p2p_shared_key

	// Otherwise hide 'tls' based on state of 'autotls_enable'

	function autotls_change() {

			hideInput('tls', true);

			hideInput('autotls_enable', true);

		} else {

	function autokey_change() {

		var hide  = $('#autokey_enable').prop('checked')

			hideCheckbox('autokey_enable', true);

			hideInput('shared_key', true);

		} else {

		mvalue = $('#mode').val();

			case "p2p_shared_key":

				sharedkey = true;

				p2p = true;

		value = $('#dev_mode').val();

			case "tun":

				hideCheckbox('no_tun_ipv6', false);

				hideInput('tunnel_network', false);

					hideInput('serverbridge_dhcp_end', false);

					hideInput('topology', true);

						disableInput('serverbridge_interface', false);

						disableInput('serverbridge_dhcp_start', false);

						disableInput('serverbridge_dhcp_end', false);

$section = new Form_Section(fixup_string($title));

	$section->addInput(new Form_StaticText(

		null,

		fixup_string($description)

		}

			print('Step: ' . $pkg['step'][$stepid]['id'] . ', Field: ' . $field['type'] . ', Name: ' . $name . '<br />');

		}

				$etitle = (fixup_string($field['displayname'])) ? $field['displayname'] : $field['name'];

					$multiple = true;

					$multiple = false;

				if ($field['add_to_interfaces_selection'] != "") {

					if ($field['add_to_interfaces_selection'] == $value) {

						}

					}

						array_push($selected, $value);

					$canecho = 0;

					if ($field['interface_filter'] != "") {

				foreach ($config['ca'] as $ca) {

					$caname = htmlspecialchars($ca['descr']);

						$selected = $value;

					$canecho = 0;

					if ($field['certca_filter'] != "") {

<script type="text/javascript">

//<![CDATA[

	enablechange();

	disablechange();

	showchange();