pfSense

<?php

/*

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

##|*IDENT=page-vpn-vpnl2tp

##|*DESCR=Allow access to the 'VPN: L2TP' page.

##|-PRIV

if (!is_array($config['l2tp']['radius'])) {

	$config['l2tp']['radius'] = array();

}

$l2tpcfg = &$config['l2tp'];

$pconfig['remoteip'] = $l2tpcfg['remoteip'];

$pconfig['localip'] = $l2tpcfg['localip'];

$pconfig['interface'] = $l2tpcfg['interface'];

$pconfig['l2tp_dns2'] = $l2tpcfg['dns2'];

$pconfig['radacct_enable'] = isset($l2tpcfg['radius']['accounting']);

$pconfig['radiusserver'] = $l2tpcfg['radius']['server'];

$pconfig['radiussecret'] = $l2tpcfg['radius']['secret'];

$pconfig['paporchap'] = $l2tpcfg['paporchap'];

	unset($input_errors);

	$pconfig = $_POST;

	/* input validation */

	if ($_POST['mode'] == "server") {

		$reqdfields = explode(" ", "localip remoteip");

		if ($_POST['radiusenable']) {

			$reqdfields = array_merge($reqdfields, explode(" ", "radiusserver radiussecret"));

			$reqdfieldsn = array_merge($reqdfieldsn,

		if (($_POST['localip'] && !is_ipaddr($_POST['localip']))) {

			$input_errors[] = gettext("A valid server address must be specified.");

		}

			$input_errors[] = gettext("'Server address' parameter should NOT be set to any IP address currently in use on this firewall.");

		}

		}

		if (($_POST['radiusserver'] && !is_ipaddr($_POST['radiusserver']))) {

			$input_errors[] = gettext("A valid RADIUS server address must be specified.");

		}

			$input_errors[] = gettext("Secret and confirmation must match");

		}

		if ($_POST['radiussecret'] != $_POST['radiussecret_confirm']) {

			$input_errors[] = gettext("Number of L2TP users must be between 1 and 255");

		}

			}

			}

		}

		if (!empty($_POST['l2tp_dns1']) && !is_ipaddrv4(trim($_POST['l2tp_dns1']))) {

			$input_errors[] = gettext("The field 'Primary L2TP DNS Server' must contain a valid IPv4 address.");

		}

		if (!empty($_POST['l2tp_dns2']) && !is_ipaddrv4(trim($_POST['l2tp_dns2']))) {

			$input_errors[] = gettext("The field 'Secondary L2TP DNS Server' must contain a valid IPv4 address.");

		}

		if (!empty($_POST['l2tp_dns2']) && empty($_POST['l2tp_dns1'])) {

			$input_errors[] = gettext("The Secondary L2TP DNS Server cannot be set when the Primary L2TP DNS Server is empty.");

		}

	if (!$input_errors) {

		$l2tpcfg['remoteip'] = $_POST['remoteip'];

		$l2tpcfg['localip'] = $_POST['localip'];

		$l2tpcfg['interface'] = $_POST['interface'];

		$l2tpcfg['n_l2tp_units'] = $_POST['n_l2tp_units'];

		$l2tpcfg['radius']['server'] = $_POST['radiusserver'];

			$l2tpcfg['radius']['secret'] = $_POST['radiussecret'];

		}

		if ($_POST['secret'] != DMYPWD) {

			$l2tpcfg['secret'] = $_POST['secret'];

		}

		if ($_POST['l2tp_dns1'] == "") {

			$l2tpcfg['dns1'] = $_POST['l2tp_dns1'];

		}

			if (isset($l2tpcfg['dns2'])) {

				unset($l2tpcfg['dns2']);

			$l2tpcfg['dns2'] = $_POST['l2tp_dns2'];

		}

}

	print_apply_result_box($retval);

$tab_array = array();

$tab_array[] = array(gettext("Users"), false, "vpn_l2tp_users.php");

$section = new Form_Section("Enable L2TP");

$section->addInput(new Form_Checkbox(

	'mode',

	'Enable',

	'server'

));

$form->add($section);

$iflist = array();

	$iflist[$iface] = $ifacename;

}

$section->addClass('toggle-l2tp-enable');

$section->addInput(new Form_Select(

	'interface',

	$iflist

));

$section->addInput(new Form_Input(

	'localip',

	$pconfig['localip']

			'Typically this is set to an unused IP just outside of the client range.%1$s%1$s' .

			'NOTE: This should NOT be set to any IP address currently in use on this firewall.', '<br />');

$section->addInput(new Form_IpAddress(

	'remoteip',

))->addMask(l2tp_subnet, $pconfig['l2tp_subnet'])

  ->setHelp('Specify the starting address for the client IP address subnet.');

	'Secret',

	'password',

	$pconfig['secret']

))->setHelp('Specify optional secret shared between peers. Required on some devices/setups.');

$section->addInput(new Form_Select(

	'paporchap',

	array(

		'chap' => 'CHAP',

		'chap-msv2' => 'MS-CHAPv2',

		'pap' => 'PAP'

		)

))->setHelp('Specifies the protocol to use for authentication.');

$section->addInput(new Form_Input(

	'l2tp_dns1',

	$pconfig['l2tp_dns1']

));

$section->addInput(new Form_Input(

	'l2tp_dns2',

	$pconfig['l2tp_dns2']

));

$form->add($section);

$section = new Form_Section("RADIUS");

$section->addClass('toggle-l2tp-enable');

$section->addInput(new Form_Checkbox(

	'radiusenable',

	'Enable',

	'Use a RADIUS server for authentication',

	$pconfig['radiusenable']

))->setHelp('When set, all users will be authenticated using the RADIUS server specified below. The local user database will not be used.');

$section->addInput(new Form_Checkbox(

	'radacct_enable',

	'Accounting',

	'Enable RADIUS accounting',

	$pconfig['radacct_enable']

))->setHelp('Sends accounting packets to the RADIUS server.');

$section->addInput(new Form_IpAddress(

	'radiusserver',

))->setHelp('Enter the IP address of the RADIUS server.');

	$pconfig['radiussecret']

))->setHelp('Enter the shared secret that will be used to authenticate to the RADIUS server.');

$section->addInput(new Form_Checkbox(

	'radiusissueips',

	'RADIUS issued IPs',

	'Issue IP Addresses via RADIUS server.',

	$pconfig['radiusissueips']

));

$form->add($section);

print($form);

<?php

</div>

	function setL2TP () {

		hide = ! $('#mode').prop('checked');

		hideClass('toggle-l2tp-enable', hide);

	}

	function setRADIUS () {

		hide = ! $('#radiusenable').prop('checked');

		hideCheckbox('radacct_enable', hide);

		hideInput('radiusserver', hide);

		hideInput('radiussecret', hide);

		hideCheckbox('radiusissueips', hide);

	}

	// on-click

	$('#mode').click(function () {

		setL2TP();

	});

	$('#radiusenable').click(function () {

		setRADIUS();

	});

	// on-page-load

	setRADIUS();

	setL2TP();

});