Update translation files

48 files changed, 48845 insertions, 12826 deletions

diff --git a/src/usr/local/share/locale/af/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/af/LC_MESSAGES/pfSense.mo
index 003656c..9125ee4 100644
--- a/src/usr/local/share/locale/af/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/af/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/af/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/af/LC_MESSAGES/pfSense.po
index 3d470f5..fb3a08e 100644
--- a/src/usr/local/share/locale/af/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/af/LC_MESSAGES/pfSense.po
@@ -3,7 +3,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1880,8 +1880,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2365,7 +2365,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2437,7 +2437,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2841,13 +2841,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5523,7 +5523,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5599,7 +5599,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5771,8 +5771,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6053,8 +6053,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6071,9 +6071,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6283,7 +6283,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7232,13 +7232,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7491,8 +7491,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7502,8 +7502,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7782,10 +7782,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7799,7 +7799,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8009,7 +8009,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8305,7 +8305,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8450,8 +8450,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8878,14 +8878,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9431,10 +9431,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10060,7 +10060,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10140,9 +10140,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10155,8 +10155,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10245,10 +10245,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10256,7 +10256,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10542,8 +10542,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12044,7 +12044,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13735,8 +13735,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13746,9 +13746,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13785,7 +13785,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15942,7 +15942,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16481,7 +16481,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16909,7 +16909,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20165,7 +20165,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20367,14 +20367,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20691,7 +20691,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20789,7 +20789,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21268,7 +21268,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23507,7 +23507,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25182,21 +25182,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25353,7 +25353,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25713,7 +25713,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25767,7 +25767,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25777,7 +25777,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25787,7 +25787,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25797,9 +25797,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25809,7 +25809,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27154,51 +27154,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27217,13 +27217,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27300,7 +27300,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27311,8 +27311,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27328,7 +27328,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27338,12 +27338,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27352,9 +27352,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27568,331 +27568,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27909,185 +27909,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28924,8 +28924,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28934,12 +28934,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28948,22 +28948,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28975,12 +28975,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29597,18 +29597,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30145,9 +30145,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30438,8 +30438,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30456,8 +30456,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30740,43 +30740,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30787,46 +30788,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30835,11 +30836,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30874,10 +30875,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31060,7 +31062,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31101,10 +31103,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31155,9 +31158,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31219,126 +31223,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31350,8 +31380,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31363,12 +31393,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31378,12 +31408,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31404,7 +31434,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31412,7 +31442,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31421,7 +31451,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31450,19 +31480,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31565,32 +31596,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31599,109 +31633,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31797,7 +31835,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31820,58 +31858,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31880,7 +31940,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31889,15 +31949,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31906,11 +31966,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31918,15 +31978,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31934,11 +31994,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31946,171 +32006,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34194,7 +34256,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34349,8 +34411,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34361,13 +34423,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34417,35 +34479,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34479,18 +34541,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34512,23 +34574,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34536,54 +34598,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/cs/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/cs/LC_MESSAGES/pfSense.mo
index 9ea6331..b24ff35 100644
--- a/src/usr/local/share/locale/cs/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/cs/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/cs/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/cs/LC_MESSAGES/pfSense.po
index f691ee4..4daf90e 100644
--- a/src/usr/local/share/locale/cs/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/cs/LC_MESSAGES/pfSense.po
@@ -4,11 +4,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-09 04:46-0500\n"
+"PO-Revision-Date: 2017-02-09 07:27-0500\n"
 "Last-Translator: Lukáš Malý <Iam@LukasMaly.NET>\n"
 "Language-Team: Czech\n"
 "Language: cs\n"
@@ -1166,18 +1166,18 @@ msgstr "Obecná systémová chyba nerozpoznaná systémem."
 #: src/etc/inc/dyndns.class:1493
 #, php-format
 msgid "DynDNS updated IP Address on %1$s (%2$s) to %3$s"
-msgstr ""
+msgstr "DynDNS aktualizována IP adresa z %1$s (%2$s) na %3$s"
 
 #: src/etc/inc/dyndns.class:1494 src/etc/inc/dyndns.class:1502
 #: src/etc/inc/services.inc:2674 src/etc/inc/services.inc:2686
 #, php-format
 msgid "phpDynDNS: updating cache file %1$s: %2$s"
-msgstr ""
+msgstr "phpDynDNS: aktualizován cache soubor %1$s: %2$s"
 
 #: src/etc/inc/dyndns.class:1501
 #, php-format
 msgid "DynDNS updated IPv6 Address on %1$s (%2$s) to %3$s"
-msgstr ""
+msgstr "DynDNS aktualizována IPv6 adresa z %1$s (%2$s) na %3$s"
 
 #: src/etc/inc/dyndns.class:1517
 msgid "ERROR!"
@@ -1185,35 +1185,35 @@ msgstr "CHYBA!"
 
 #: src/etc/inc/dyndns.class:1523
 msgid "No Dynamic DNS Service provider was selected."
-msgstr ""
+msgstr "Nebyl vybrán žádný poskytovatel Dynamické DNS služby."
 
 #: src/etc/inc/dyndns.class:1526
 msgid "No Username Provided."
-msgstr ""
+msgstr "Žádné uživatelské jméno k dispozici."
 
 #: src/etc/inc/dyndns.class:1529
 msgid "No Password Provided."
-msgstr ""
+msgstr "Žádné heslo k dispozici."
 
 #: src/etc/inc/dyndns.class:1532
 msgid "No Hostname Provided."
-msgstr ""
+msgstr "Žádné hostname k dispozici."
 
 #: src/etc/inc/dyndns.class:1535
 msgid "The Dynamic DNS Service provided is not yet supported."
-msgstr ""
+msgstr "Poskytnutá dynamická DNS služba není podporována."
 
 #: src/etc/inc/dyndns.class:1538
 msgid "No Update URL Provided."
-msgstr ""
+msgstr "Žádné aktualizované URL k dispozici."
 
 #: src/etc/inc/dyndns.class:1541
 msgid "Invalid ZoneID"
-msgstr ""
+msgstr "Neplatné ZoneID"
 
 #: src/etc/inc/dyndns.class:1544
 msgid "Invalid TTL"
-msgstr ""
+msgstr "Neplatné TTL"
 
 #: src/etc/inc/dyndns.class:1547
 #, php-format
@@ -1277,7 +1277,7 @@ msgstr ""
 
 #: src/etc/inc/dyndns.class:1632
 msgid "Initial update."
-msgstr ""
+msgstr "Počáteční aktualizace."
 
 #: src/etc/inc/dyndns.class:1669
 #, php-format
@@ -1953,8 +1953,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2438,7 +2438,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2510,7 +2510,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2914,13 +2914,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5596,7 +5596,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5672,7 +5672,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5844,8 +5844,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6126,8 +6126,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6144,9 +6144,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6356,7 +6356,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7305,13 +7305,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7564,8 +7564,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7575,8 +7575,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7855,10 +7855,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7872,7 +7872,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8082,7 +8082,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8378,7 +8378,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8523,8 +8523,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8951,14 +8951,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9504,10 +9504,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10133,7 +10133,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10213,9 +10213,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10228,8 +10228,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10318,10 +10318,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10329,7 +10329,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10615,8 +10615,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12117,7 +12117,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13808,8 +13808,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13819,9 +13819,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13858,7 +13858,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -16015,7 +16015,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16554,7 +16554,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16982,7 +16982,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20238,7 +20238,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20440,14 +20440,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20764,7 +20764,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20862,7 +20862,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21341,7 +21341,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23580,7 +23580,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25255,21 +25255,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25426,7 +25426,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25787,7 +25787,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25841,7 +25841,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25851,7 +25851,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25861,7 +25861,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25871,9 +25871,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25883,7 +25883,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27228,51 +27228,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27291,13 +27291,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27374,7 +27374,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27385,8 +27385,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27402,7 +27402,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27412,12 +27412,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27426,9 +27426,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27642,331 +27642,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27983,185 +27983,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28998,8 +28998,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -29008,12 +29008,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -29022,22 +29022,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29049,12 +29049,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29671,18 +29671,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30219,9 +30219,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30512,8 +30512,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30530,8 +30530,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30814,43 +30814,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30861,46 +30862,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30909,11 +30910,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30948,10 +30949,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31134,7 +31136,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31175,10 +31177,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31229,9 +31232,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31293,126 +31297,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31424,8 +31454,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31437,12 +31467,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31452,12 +31482,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31478,7 +31508,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31486,7 +31516,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31495,7 +31525,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31524,19 +31554,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31639,32 +31670,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31673,109 +31707,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31871,7 +31909,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31894,58 +31932,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
+msgid ""
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31954,7 +32014,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31963,15 +32023,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31980,11 +32040,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31992,15 +32052,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32008,11 +32068,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32020,171 +32080,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34268,7 +34330,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34423,8 +34485,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34435,13 +34497,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34491,35 +34553,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34553,18 +34615,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34586,23 +34648,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34610,54 +34672,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/da/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/da/LC_MESSAGES/pfSense.mo
index 300ea53..9ccaf33 100644
--- a/src/usr/local/share/locale/da/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/da/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/da/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/da/LC_MESSAGES/pfSense.po
index 4900c47..9419e32 100644
--- a/src/usr/local/share/locale/da/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/da/LC_MESSAGES/pfSense.po
@@ -4,7 +4,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1920,8 +1920,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2405,7 +2405,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr "Netværk"
 
@@ -2477,7 +2477,7 @@ msgstr "Min IP adresse"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2881,13 +2881,13 @@ msgstr "Server: NEJ"
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "I brug"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5563,7 +5563,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5639,7 +5639,7 @@ msgstr "Stoppet"
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr "Ikke aktiv"
@@ -5811,8 +5811,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6093,8 +6093,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6111,9 +6111,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6323,7 +6323,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "Slet"
@@ -7272,13 +7272,13 @@ msgstr "Bekræft"
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7531,8 +7531,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7542,8 +7542,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7822,10 +7822,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7839,7 +7839,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8049,7 +8049,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr "Klar"
@@ -8345,7 +8345,7 @@ msgstr "Host navn"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8490,8 +8490,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8918,14 +8918,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9471,10 +9471,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10100,7 +10100,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10180,9 +10180,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10195,8 +10195,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "Tilføje"
 
@@ -10285,10 +10285,10 @@ msgstr "URL Tabel (Port)"
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10296,7 +10296,7 @@ msgstr "URL Tabel (Port)"
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10582,8 +10582,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12084,7 +12084,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13775,8 +13775,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "Værdi"
 
@@ -13786,9 +13786,9 @@ msgstr "Værdi"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13825,7 +13825,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15982,7 +15982,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16521,7 +16521,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr "id"
 
@@ -16949,7 +16949,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20205,7 +20205,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20407,14 +20407,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr "NTP Server 1"
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr "NTP Server 2"
 
@@ -20731,7 +20731,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20829,7 +20829,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21308,7 +21308,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23547,7 +23547,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25222,21 +25222,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25393,7 +25393,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25753,7 +25753,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25807,7 +25807,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25817,7 +25817,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25827,7 +25827,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25837,9 +25837,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25849,7 +25849,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27194,51 +27194,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27257,13 +27257,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27340,7 +27340,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27351,8 +27351,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27368,7 +27368,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27378,12 +27378,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27392,9 +27392,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27608,331 +27608,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27949,185 +27949,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28964,8 +28964,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28974,12 +28974,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28988,22 +28988,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29015,12 +29015,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29637,18 +29637,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30185,9 +30185,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30478,8 +30478,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30496,8 +30496,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30780,43 +30780,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30827,46 +30828,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30875,11 +30876,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30914,10 +30915,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31100,7 +31102,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31141,10 +31143,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31195,9 +31198,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31259,126 +31263,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31390,8 +31420,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31403,12 +31433,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31418,12 +31448,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31444,7 +31474,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31452,7 +31482,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31461,7 +31491,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31490,19 +31520,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31605,32 +31636,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31639,109 +31673,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31837,7 +31875,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31860,58 +31898,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31920,7 +31980,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31929,15 +31989,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31946,11 +32006,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31958,15 +32018,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31974,11 +32034,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31986,171 +32046,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34234,7 +34296,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34389,8 +34451,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34401,13 +34463,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34457,35 +34519,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34519,18 +34581,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34552,23 +34614,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34576,54 +34638,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/de_DE/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/de_DE/LC_MESSAGES/pfSense.mo
index b925809..a663653 100644
--- a/src/usr/local/share/locale/de_DE/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/de_DE/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/de_DE/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/de_DE/LC_MESSAGES/pfSense.po
index 8e9cd90..707582c 100644
--- a/src/usr/local/share/locale/de_DE/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/de_DE/LC_MESSAGES/pfSense.po
@@ -14,12 +14,12 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-09 06:07-0500\n"
-"Last-Translator: Renato Botelho <garga@FreeBSD.org>\n"
+"PO-Revision-Date: 2017-02-09 05:27-0500\n"
+"Last-Translator: pauneu <Zanata@nhsml.de>\n"
 "Language-Team: German (Germany)\n"
 "Language: de-DE\n"
 "X-Generator: Zanata 3.9.6\n"
@@ -2020,8 +2020,8 @@ msgstr "Keine Spiegelserver gefunden."
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2102,6 +2102,8 @@ msgstr "Kein Gateway zum Überwachen. dpinger wird nicht gestartet."
 msgid ""
 "Removing static route for monitor %1$s and adding a new route through %2$s"
 msgstr ""
+"Statische Route für Monitor %1$s wird entfernet und eine neue Route über "
+"%2$s hinzugefügt"
 
 #: src/etc/inc/gwlb.inc:302
 #, php-format
@@ -2294,6 +2296,8 @@ msgid ""
 "Could not get a PPTP/L2TP Remote IP address from %1$s for %2$s in "
 "interfaces_ppps_configure."
 msgstr ""
+"Eine PPTP/L2TP-Remote-IP-Adresse von %1$s für %2$s in "
+"interfaces_ppps_configure konnte nicht ermittelt werden."
 
 #: src/etc/inc/interfaces.inc:1682
 #, php-format
@@ -2455,6 +2459,8 @@ msgstr ""
 #, php-format
 msgid "Error: cannot open %s in DHCP6_Config_File_Override() for reading."
 msgstr ""
+"Fehler: %s in DHCP6_Config_File_Override() konnte nicht zum Lesen geöffnet "
+"werden."
 
 #: src/etc/inc/interfaces.inc:4369
 #, php-format
@@ -2462,11 +2468,13 @@ msgid ""
 "Error: cannot open dhclient_%s.conf in interface_dhcp_configure() for "
 "writing."
 msgstr ""
+"Fehler: dhclient_%s.conf in interface_dhcp_configure() konnte nicht zum "
+"Lesen geöffnet werden."
 
 #: src/etc/inc/interfaces.inc:4382
 #, php-format
 msgid "Invalid interface \"%s\" in interface_dhcp_configure()"
-msgstr ""
+msgstr "Ungültige Schnittstelle \"%s\" in interface_dhcp_configure()"
 
 #: src/etc/inc/interfaces.inc:4438
 #, php-format
@@ -2477,6 +2485,8 @@ msgstr ""
 #, php-format
 msgid "Error: cannot open %s in DHCP_Config_File_Override() for reading."
 msgstr ""
+"Fehler: %s in DHCP_Config_File_Override() konnte nicht zum Lesen geöffnet "
+"werden."
 
 #: src/etc/inc/interfaces.inc:5571 src/etc/inc/service-utils.inc:358
 #: src/usr/local/www/diag_backup.php:476
@@ -2532,7 +2542,7 @@ msgstr "Kernel Schnittstelle"
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 #, fuzzy
 msgid "Networking"
 msgstr "Netzwerk"
@@ -2605,7 +2615,7 @@ msgstr "Meine IP-Adresse"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2664,11 +2674,11 @@ msgstr ""
 
 #: src/etc/inc/ipsec.inc:167
 msgid "Mutual RSA + Xauth"
-msgstr ""
+msgstr "Einvernehmliches RSA + Xauth"
 
 #: src/etc/inc/ipsec.inc:168
 msgid "Mutual PSK + Xauth"
-msgstr ""
+msgstr "Einvernehmliches PSK + Xauth"
 
 #: src/etc/inc/ipsec.inc:169
 msgid "EAP-TLS"
@@ -2684,11 +2694,11 @@ msgstr "EAP-MSChapv2"
 
 #: src/etc/inc/ipsec.inc:172
 msgid "Mutual RSA"
-msgstr ""
+msgstr "Einvernehmliches RSA"
 
 #: src/etc/inc/ipsec.inc:173
 msgid "Mutual PSK"
-msgstr ""
+msgstr "Einvernehmliches PSK"
 
 #: src/etc/inc/ipsec.inc:184
 msgid "Tunnel IPv4"
@@ -2818,17 +2828,17 @@ msgstr ""
 #: src/etc/inc/meta.inc:145
 #, php-format
 msgid "warning: tag %1$s has no data in '%2$s'%3$s"
-msgstr ""
+msgstr "Warnung: Tag %1$s enthält keine Daten in '%2$s'%3$s"
 
 #: src/etc/inc/meta.inc:168
 #, php-format
 msgid "warning: tag %1$s has malformed data in '%2$s'%3$s"
-msgstr ""
+msgstr "Warnung: Tag %1$s enthält falschformatierte Daten in '%2$s'%3$s"
 
 #: src/etc/inc/meta.inc:190
 #, php-format
 msgid "warning: tag %1$s has invalid data in '%2$s'%3$s"
-msgstr ""
+msgstr "Warnung: Tag %1$s enthält ungültige Daten in '%2$s'%3$s"
 
 #: src/etc/inc/notices.inc:74
 #, php-format
@@ -3015,13 +3025,13 @@ msgstr "Server: Nein"
 msgid "CA: %s"
 msgstr "CA: %s"
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "in Benutzung"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr "Zurückgezogen"
 
@@ -3122,6 +3132,9 @@ msgid ""
 "Choose an alternative css file (if installed) to change the appearance of "
 "the webConfigurator. css files are located in /usr/local/www/css/%s"
 msgstr ""
+"Wählen Sie eine alternative CSS-Datei (falls installiert), um das Aussehen "
+"des Web-Konfigurators zu verändern. CSS-Dateien befinden sich unter /usr/"
+"local/www/css/%s"
 
 #: src/etc/inc/pfsense-utils.inc:211
 msgid "Scrolls with page"
@@ -3192,10 +3205,14 @@ msgid "Show the Settings panel in Status Monitoring."
 msgstr ""
 
 #: src/etc/inc/pfsense-utils.inc:299
+#, fuzzy
 msgid ""
 "These options allow certain panels to be automatically hidden on page load. "
 "A control is provided in the title bar to un-hide the panel."
 msgstr ""
+"Diese Optionen erlauben es, bestimmte Felder beim Seitenladen automatisch zu "
+"verstecken. Eine Kontrollmöglichkeit, um das Feld wieder sichtbar zu machen, "
+"ist in der Titelleiste verfügbar."
 
 #: src/etc/inc/pfsense-utils.inc:317
 msgid "Left Column Labels"
@@ -3343,9 +3360,9 @@ msgid "Could not process empty file from alias: %s"
 msgstr "Leere Datei aus Alias %s konnte nicht verarbeitet werden."
 
 #: src/etc/inc/pfsense-utils.inc:2117
-#, php-format
+#, fuzzy, php-format
 msgid "Could not process aliases from alias: %s"
-msgstr ""
+msgstr "Konnte die Aliase von folgendem Alias nicht verarbeiten: %s"
 
 #: src/etc/inc/pfsense-utils.inc:2174
 #, php-format
@@ -3361,7 +3378,7 @@ msgstr ""
 #: src/etc/inc/pfsense-utils.inc:2213
 #, php-format
 msgid "Could not open %s/aliases for writing!"
-msgstr ""
+msgstr "%s/aliases konnte nicht zum Schreiben geöffnet werden!"
 
 #: src/etc/inc/pfsense-utils.inc:2219
 #, php-format
@@ -3578,6 +3595,8 @@ msgstr ""
 #, php-format
 msgid "The %1$s package is not installed.%2$sInstallation aborted."
 msgstr ""
+"Das Paket %1$s ist nicht installiert. Die Installation von %2$s wurde "
+"abgebrochen."
 
 #: src/etc/inc/pkg-utils.inc:724 src/etc/inc/pkg-utils.inc:756
 #: src/etc/inc/pkg-utils.inc:822
@@ -3613,15 +3632,15 @@ msgstr "Benutzerdefinierte Optionen..."
 
 #: src/etc/inc/pkg-utils.inc:766
 msgid "Executing custom_php_global_functions()..."
-msgstr ""
+msgstr "custom_php_global_functions() wird ausgeführt..."
 
 #: src/etc/inc/pkg-utils.inc:771
 msgid "Executing custom_php_install_command()..."
-msgstr ""
+msgstr "custom_php_install_command() wird ausgeführt..."
 
 #: src/etc/inc/pkg-utils.inc:776
 msgid "Executing custom_php_resync_config_command()..."
-msgstr ""
+msgstr "custom_php_resync_config_command() wird ausgeführt..."
 
 #: src/etc/inc/pkg-utils.inc:783 src/etc/inc/pkg-utils.inc:865
 msgid "Menu items... "
@@ -3710,9 +3729,12 @@ msgid "Package reinstall"
 msgstr "Paket erneut installieren"
 
 #: src/etc/inc/pkg-utils.inc:1006
+#, fuzzy
 msgid ""
 "Package reinstall process was ABORTED due to lack of internet connectivity"
 msgstr ""
+"Die Neuinstallation des Paketes wurde ABGEBROCHEN, da keine Internet-"
+"Verbindung vorhanden ist."
 
 #: src/etc/inc/pkg-utils.inc:1045
 #, php-format
@@ -3809,12 +3831,17 @@ msgstr ""
 "Benutzer - System: Kopiere Dateien ins eigene Verzeichnis (chrooted scp)"
 
 #: src/etc/inc/priv/user.priv.inc:61
+#, fuzzy
 msgid ""
 "Indicates whether this user is allowed to copy files to the home directory "
 "via SCP/SFTP.Note: User - System - Copy files (scp) conflicts with this "
 "privilege.Warning: Manual chroot setup required, see /usr/local/etc/rc.d/"
 "scponlyc."
 msgstr ""
+"Zeigt an, ob dieser Benutzer berechtigt ist, über SCP/SFTP Dateien ins Home-"
+"Verzeichnis zu kopieren.Hinweis: User - System - Copy files (scp) steht im "
+"Konflikt zu dieser Berechtigung.Warnung: Manuelle Einrichtung von chroot "
+"erforderlich, siehe /usr/local/etc/rc.d/scponlyc."
 
 #: src/etc/inc/priv/user.priv.inc:66
 msgid "User - System: SSH tunneling"
@@ -5802,7 +5829,7 @@ msgstr "NTP-Uhr Synchronisation"
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr "Captive Portal"
 
@@ -5878,7 +5905,7 @@ msgstr "Gestoppt"
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr "Deaktiviert"
@@ -6050,8 +6077,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr "Starte UPnP Dienst..."
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6344,8 +6371,8 @@ msgstr "Wählen Sie Optionen für diese Queue"
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6362,9 +6389,9 @@ msgstr "Wählen Sie Optionen für diese Queue"
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6574,7 +6601,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "Löschen"
@@ -7563,13 +7590,13 @@ msgstr "Bestätigen"
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7822,8 +7849,8 @@ msgstr "Verbindungstyp"
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7833,8 +7860,8 @@ msgstr "Verbindungstyp"
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr "Aktionen"
@@ -8128,10 +8155,10 @@ msgstr "Systemprotokoll"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -8145,7 +8172,7 @@ msgstr "Systemprotokoll"
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8360,7 +8387,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8658,7 +8685,7 @@ msgstr "Host Name"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8803,8 +8830,8 @@ msgstr "Filter Ausdruck"
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "Filter"
 
@@ -9238,14 +9265,14 @@ msgid "Packet Capture"
 msgstr "Paketmitschnitt"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr "OpenVPN Server"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr "OpenVPN Client"
 
@@ -9821,10 +9848,10 @@ msgstr "Verwende eine Regular Expression um die Tabellen zu filtern."
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10456,7 +10483,7 @@ msgstr "Die Liste der Aliase wurde verändert."
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10536,9 +10563,9 @@ msgstr "Alias löschen"
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10551,8 +10578,8 @@ msgstr "Alias löschen"
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "Hinzufügen"
 
@@ -10643,10 +10670,10 @@ msgstr "URL Tabelle (Port)"
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10654,7 +10681,7 @@ msgstr "URL Tabelle (Port)"
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10972,8 +10999,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12240,7 +12267,7 @@ msgid ""
 "Incorrect format for source-hash key, \"0x\" must be followed by exactly 32 "
 "hexadecimal characters."
 msgstr ""
-"Falsches Format für den Quell-Hash Schlüssel, \"0x\" müssen exakt 32 "
+"Falsches Format für den Quell-Hash-Schlüssel, \"0x\" müssen exakt 32 "
 "hexadezimale Zeichen folgen."
 
 #: src/usr/local/www/firewall_nat_out_edit.php:415
@@ -12360,7 +12387,7 @@ msgstr "Zufällig mit klebriger Adresse"
 
 #: src/usr/local/www/firewall_nat_out_edit.php:606
 msgid "Source hash"
-msgstr "Quell Hash"
+msgstr "Quell-Hash"
 
 #: src/usr/local/www/firewall_nat_out_edit.php:607
 msgid "Bit mask"
@@ -12416,7 +12443,7 @@ msgstr "%s"
 
 #: src/usr/local/www/firewall_nat_out_edit.php:621
 msgid "Source Hash Key"
-msgstr "Quell Hash Schlüssel"
+msgstr "Quell-Hash-Schlüssel"
 
 #: src/usr/local/www/firewall_nat_out_edit.php:624
 msgid ""
@@ -12540,7 +12567,7 @@ msgstr "Anti-Lockout Regel"
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -14398,8 +14425,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "Wert"
 
@@ -14409,9 +14436,9 @@ msgstr "Wert"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr "Erweiterte Einstellungen"
@@ -14448,7 +14475,7 @@ msgstr "Zertifikatsverwaltung"
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr "Benutzerverwaltung"
@@ -16654,7 +16681,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -17197,7 +17224,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr "ID"
 
@@ -17632,7 +17659,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr "Kompression"
 
@@ -20971,7 +20998,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr "WINS-Server"
 
@@ -21173,14 +21200,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr "NTP-Server 1"
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr "NTP-Server 2"
 
@@ -21502,7 +21529,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -21600,7 +21627,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -22082,7 +22109,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr "Benutzerdefinierte Optionen"
 
@@ -24345,7 +24372,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -26027,21 +26054,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr "Server 1"
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr "Server 2"
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr "Server 3"
 
@@ -26200,7 +26227,7 @@ msgstr "Client-Verbindungen"
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -26565,7 +26592,7 @@ msgstr "Wähle die Sprache für den Web-Konfigurator"
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr "Web-Konfigurator"
 
@@ -26620,7 +26647,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr "Administrativer Zugang"
 
@@ -26630,7 +26657,7 @@ msgstr "Administrativer Zugang"
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr "Firewall & NAT"
 
@@ -26640,7 +26667,7 @@ msgstr "Firewall & NAT"
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr "Verschiedenes"
@@ -26650,9 +26677,9 @@ msgstr "Verschiedenes"
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr "System Feinabstimmung"
 
@@ -26662,7 +26689,7 @@ msgstr "System Feinabstimmung"
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr "Benachrichtigungen"
 
@@ -28144,51 +28171,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr "Hinweis:"
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr "Neu"
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr "*Wert"
 
@@ -28207,13 +28234,13 @@ msgstr "Authentifizierungsserver %s gelöscht."
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -28291,7 +28318,7 @@ msgstr "%s Timeout Wert muss numerisch und positiv sein."
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr "Authenzifizierungsserver"
@@ -28302,8 +28329,8 @@ msgstr "Authenzifizierungsserver"
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -28319,7 +28346,7 @@ msgstr "Benutzer"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr "Gruppen"
@@ -28329,12 +28356,12 @@ msgid "Server Name"
 msgstr "Server Name"
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr "Server bearbeiten"
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr "Server löschen"
 
@@ -28343,9 +28370,9 @@ msgid "Server Settings"
 msgstr "Server Einstellungen"
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -28561,336 +28588,336 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr "Dieses Zertifikat scheint nicht gültig zu sein."
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr "Verschlüsselte private Schlüssel werden noch nicht unterstützt."
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr "Schlüssellänge"
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr "Bitte wählen Sie eine gültige Schlüssellänge aus."
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr "Bitte wählen Sie einen gültigen Digest-Algorithmus aus."
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr "Zertifikatsmanager"
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr "CAs"
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr "Zertifikate"
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 #, fuzzy
 msgid "Certificate Revocation"
 msgstr "Zertifikatsrücknahme"
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr "Zertifizierungsstelle"
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 #, fuzzy
 msgid "Internal"
 msgstr "Intern"
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr "Aussteller"
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 #, fuzzy
 msgid "Distinguished Name"
 msgstr "Repräsentativer Name"
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr "Exportschlüssel"
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr "*Methode"
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr "Privater Zertifikatsschlüssel (optional)"
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr "Seriennummer für das nächste Zertifikat"
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr "*Schlüssellänge (in Bits)"
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr "*Digest Algorithmus"
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr "*Gültigkeitsdauer (in Tagen)"
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr "*Länderschlüssel"
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 #, fuzzy
 msgid "*State or Province"
 msgstr "*Bundesland"
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr "*Stadt"
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr "*Organisation"
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 #, fuzzy
 msgid "Organizational Unit"
 msgstr "Abteilung"
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr "*Emailadresse"
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -28907,185 +28934,185 @@ msgstr "Erzeuge ein internes Zertifikat "
 msgid "Create a Certificate Signing Request"
 msgstr "Erzeuge eine Zertifikats Signing Anfrage (CSR)"
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr "Wähle ein bestehendes Zertifikat aus"
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr "Zertifikat %s erfolgreich gelöscht."
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr "Zertifikatstyp"
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr "Neues Zertifikat hinzufügen"
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr "Zertifikat importieren"
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr "*Schlüssellänge"
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr "*Zertifikatstyp"
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr "FQDN oder Hostname"
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr "URI"
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr "Email Adresse"
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr "Wähle ein bestehendes Zertifikat"
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr "*bestehendes Zertifikat"
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr "Nutzerzertifikat"
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr "Exportiere Zertifikat"
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr "Exportiere Schlüssel"
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr "Exportiere P12"
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr "Update CSR"
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr "Exportiere Anfrage"
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr "Lösche Zertifikat"
 
@@ -29995,8 +30022,8 @@ msgstr "Verschiebe zu Nicht-Mitglieder"
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr "Halte Strg (PC) / Control (Mac) um mehrere Einträge auszuwählen."
 
@@ -30005,12 +30032,12 @@ msgid "Assigned Privileges"
 msgstr "Zugewiesene Rechte"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr "Rechte hinzufügen"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr "ausgewählte Rechte"
 
@@ -30019,22 +30046,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -30046,12 +30073,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -30672,18 +30699,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr "Benutzerrechte"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -31222,9 +31249,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -31518,8 +31545,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -31536,8 +31563,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr "Phase 1 Vorschlag (Algorithmus)"
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr "*Verschlüsselungsalgorithmus"
 
@@ -31822,43 +31849,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr "IP-Kompression"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -31869,46 +31897,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr "Aktiviere Cisco-Erweiterungen"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -31917,11 +31945,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -31956,10 +31984,11 @@ msgid "*Server address"
 msgstr "*Serveradresse"
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -32159,7 +32188,7 @@ msgstr "Einer oder mehrere der gewählten NCP-Algorithmen sind nicht gültig."
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr "Geteilter Schlüssel"
 
@@ -32204,15 +32233,12 @@ msgstr "*Adapter-Art"
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
-"Der \"tun\"-Modus transportiert IPv4 and IPv6 (OSI Layer 3), bietet die "
-"grösste Kompatibilität zwischen allen Plattformen und ist am weitesten "
-"verbreitet.<br/>Der \"tap\"-Modus ist in der Lage, 802.3 (OSI Layer 2.) zu "
-"transportieren."
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
 msgid ""
@@ -32268,9 +32294,10 @@ msgid "Proxy host or address"
 msgstr "Proxy Hastname- oder adresse "
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -32339,62 +32366,55 @@ msgstr "*TLS Schlüssel"
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
-"Fügen Sie den TLS-Schlüssel hier ein.<br/>Dieser Schlüssel wird dazu "
-"benutzt, die Kontrollkanalpakete beim Aufbau des Tunnels mit einer HMAC-"
-"Signatur zu signieren."
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr "*TLS-Schlüssel Verwendungsart"
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
-"Im Authentifizierungsmodus wird der TLS-Schlüssel nur für die HMAC-"
-"Authentifizierung des Kontrollkanals benutzt, um so die Gegenstellen vor "
-"unzuässigen Verbindungen zu schützen.<br/>Im Verschlüsselungs- und "
-"Authentifizierungsmodus wird darüberhinaus auch die "
-"Kontrollkanalkommunikation verschlüsselt, um zu besserem Datenschutz und "
-"einer Verschleierung des Traffic-Kontrollkanals zu verhelfen."
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr "WIderrufsliste von Gegenstellen Zertifikaten"
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr "Automatisch generiert"
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr "*Gemeinsamer Schlüssel"
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr "Fügen Sie hier den gemeinsamen Schlüssel ein"
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr "Client Zertificate"
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
@@ -32402,38 +32422,46 @@ msgstr ""
 "Der für Datenkanalpakete genutzte Verschlüsselungsalgorithmus, falls keine "
 "Verschlüsselungsparameter-Aushandlung (NCP) verfügbar ist."
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr "NCP aktivieren"
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
-"Wählen Sie diese Option, um OpenVPN Clients und Servern zu erlauben, eine "
-"Auswahl an kompatiblen kryptografischen Verschlüsselungsalgorithmen aus den "
-"in der untenstehenden NCP-Algorithmusliste ausgwählten auszuhandeln."
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr "NCP-Algorithmus"
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
-"Verfügbare NCP-Verschlüsselungsalgorithmen<br />Zum Hinzufügen oder "
-"Entfernen eines Algorithmus klicken"
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
@@ -32441,51 +32469,53 @@ msgstr ""
 "Erlaubte NCP-Verschlüsselungsalgorithmen. Klicken Sie auf einen "
 "Algorithmusnamen, um ihn von der Liste zu entfernen."
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
-"Die Reihenfolge der NCP-Verschlüsselungsalgorithmen wird von OpenVPN "
-"berücksichtigt.<div class=\"infoblock\">"
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr "*Auth Hashwert Algorithmus"
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
-"Der Algorithmus, welcher zur Authentifizierung von Daten- und "
-"Kontrollkanalpaketen benutzt wird, sofern ein TLS-Schlüssel vorhanden ist."
-"<br />Wenn ein AEAD-Verschlüsselungsalgorithmus wie AES-GCM benutzt wird, "
-"wird dieser Hashwert nur für den Kontroll- und nicht für den Datenkanal "
-"herangezogen.<br />Falls nicht auf jedem einzelnen Client abweichend "
-"konfiguriert, lassen Sie diesen Wert auf SHA1. SHA1 ist der Standard bei "
-"OpenVPN."
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr "Hardware-Kryptografie"
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr "Tunneleinstellungen"
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr "IPv4 Tunnel-Netzwerk"
 
@@ -32497,8 +32527,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr "IPv6 Tunnel-Netzwerk"
 
@@ -32510,12 +32540,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr "Entfernte(s) IPv4 Netzwerk(e)"
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -32525,12 +32555,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr "Entfernte(s) IPv6 Netzwerk(e)"
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -32554,7 +32584,7 @@ msgstr ""
 "Bytes/s und 100 MBytes/s sein (umgerechnet in Bytes/s)."
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 #, fuzzy
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
@@ -32566,7 +32596,7 @@ msgstr ""
 "merkt, dass diese nicht effizient ist."
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr "Netzstruktur"
 
@@ -32575,7 +32605,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr "Typ des Services"
 
@@ -32604,28 +32634,21 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr "Ausführlichkeitsstufe"
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
-msgstr ""
-"Jede Stufe beinhaltet die gesamte Information der darunterliegenden Stufe. "
-"Um nicht von Ausgaben überflutet zu werden, empfielt sich Stufe 3 wird für "
-"eine gute Zusammenfassung der Ereignisse.<br /><br />\"Nicht gesetzt\": Nur "
-"schwerwiegende Fehler<br />Standard bis 4: Normaler Benutzungsbereich<br />5:"
-" Gibt für jedes gelesene oder geschriebene Paket \"R\" (gelesen) und \"W\" "
-"(geschrieben) auf der Konsole aus. Grossbuchstaben stehen für TCP/UDP "
-"Pakete, Kleinbuchstaben für TUN/TAP Pakete.<br />6-11: Debug-"
-"Informationsbereich"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
+msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
 msgid "OpenVPN Clients"
@@ -32730,32 +32753,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr "Lokale IPv4-Netzwerk/e"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -32764,111 +32790,115 @@ msgid "IPv6 Local Network/s"
 msgstr "Lokale IPv6-Netzwerk/e"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr "Entfernte(s) IPv4 Netzwerk(e)"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr "Entfernte(s) IPv6 Netzwerk(e)"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr "Clienteinstellungen"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr "Server Definitionen"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr "DNS-Domäne"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr "Server 4"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr "NetBIOS Optionen"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 #, fuzzy
 msgid "CSC Overrides"
 msgstr "CSC Anpassungen"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 #, fuzzy
 msgid "Edit CSC Override"
 msgstr "Bearbeite CSC Anpassungen"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 #, fuzzy
 msgid "Delete CSC Override"
 msgstr "Lösche CSC Anpassungen"
@@ -32986,7 +33016,7 @@ msgstr ""
 "Der Port, den OpenVPN zum Entgegennehmen von Client Verbindungen benutzt."
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -33013,53 +33043,63 @@ msgstr "*Serverzertifikat"
 msgid "*DH Parameter Length"
 msgstr "Diffie Hellmann Parameter Länge"
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
 msgstr ""
-"Diffie-Hellman (DH) Parameterset, welches für den Schlüsselaustausch benutzt "
-"wird.<div class=\"infoblock\">"
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
+msgid ""
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr "ECDH Kurve"
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
-"Die für den Schlüsselaustausch zu nutzende elliptische Kurve.<br/>Bei "
-"Benutzung eines ECDSA-Zertifikates wird standardmässig die Kurve des "
-"Serverzertifikates benutzt. Ansonsten wird secp384r1 als Ersatz benutzt."
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
-"Der Algorithmus, welcher zur Authentifizierung von Daten- und "
-"Kontrollkanalpaketen benutzt wird, sofern ein TLS-Schlüssel vorhanden ist."
-"<br />Wenn ein AEAD-Verschlüsselungsalgorithmus wie AES-GCM benutzt wird, "
-"wird dieser Hashwert nur für den Kontroll- und nicht für den Datenkanal "
-"herangezogen.<br />Falls nicht auf jedem einzelnen Client abweichend "
-"konfiguriert, lassen Sie diesen Wert auf SHA1. SHA1 ist der Standard bei "
-"OpenVPN."
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr "nicht überprüfen"
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr "*Zertifikatstiefe"
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
@@ -33069,11 +33109,11 @@ msgstr ""
 "unterhalb dieser Tiefe akzeptiert. Nützlich, um Zertifikate abzuweisen, die "
 "von Intermediate CAs mit der gleichen CA wie der Server erstellt wurden."
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr "strikte Benutzer-CN Überinstimmung"
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
@@ -33081,7 +33121,7 @@ msgstr ""
 "Bei der Benutzerauthentifizierung erzwingen, dass der Common Name des Client-"
 "Zertifikates gleich dem bei der Anmeldung verwendeten Benutzernamen ist."
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -33094,7 +33134,7 @@ msgstr ""
 "wird automatisch auf dem virtuellen Interface des Servers konfiguriert. Die "
 "verbleibenden Adressen kann an Clients verteilt werden (Siehe Adress-Pool)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -33107,17 +33147,17 @@ msgstr ""
 "automatisch auf dem virtuellen Interface des Servers konfiguriert. Die "
 "verbleibenden Adressen kann an Clients verteilt werden (Siehe Adress-Pool)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 #, fuzzy
 msgid "Bridge DHCP"
 msgstr "DHCP überbrücken"
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 #, fuzzy
 msgid "Bridge Interface"
 msgstr "Brückeninterface"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -33126,11 +33166,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -33138,15 +33178,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr "Lokal anliegende IPv4 Netzwerke"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 #, fuzzy
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
@@ -33157,11 +33197,11 @@ msgstr ""
 "Diese IPv4 Netzwerke sind über die entfernte Gegenstelle erreichbar. "
 "Eingetragen werden diese als CIDR-Bereiche mit Komma getrennt. "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr "Lokal anliegende IPv6 Netzwerke"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 #, fuzzy
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
@@ -33172,87 +33212,83 @@ msgstr ""
 "Diese IPv6 Netzwerke sind über die entfernte Gegenstelle erreichbar. "
 "Eingetragen werden diese als CIDR-Bereiche mit Komma getrennt. "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr "Gleichzeitige Verbindungen"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 "Anzahl an maximalen gleichzeitigen Client-Verbindungen zu diesem Server."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr "Kompressionsmethode vorgeben"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr "Clientkommunikation untereinander"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr "Mehrfache Verbindung"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 "(Dies wird normalerweise nicht empfohlen, außer in speziellen Szenarien.)"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr "Dynamische IP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 #, fuzzy
 msgid "Address Pool"
 msgstr "Adressbereich"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
-"Legt die Art fest, in der die IP-Adresse des virtuellen Adapters an Clients "
-"im TUN-Modus mit IPv4 vergeben wird.<br />Einige Clients, wie z.B. OpenVPN "
-"Connect (iOS/Android),  benötigen die Einstellung \"Subnetz\" auch für IPv6. "
-"Ältere OpenVPN-Versionen (vor 2.0.9) oder Clients wie Yealink Telefone "
-"benötigen u.U. \"Net30\"."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr "Erweiterte Client Einstellungen"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr "Aktiviere DNS Server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr "DNS-Server 1"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr "DNS Server 2"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr "DNS Server 3"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr "DNS Server 4"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr "Blockiere andere DNS Server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
@@ -33262,24 +33298,24 @@ msgstr ""
 "Clients sind von dieser Art DNS-Misskonfiguration betroffen. Andere Clients "
 "ignorieren diese Option."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr "Erzwinge DNS-Cache Update"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 #, fuzzy
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr "Dies veranlasst Windows gepushte DNS-Server zu erkennen."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr "Aktiviere NTP Server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr "Aktiviere NetBIOS"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 #, fuzzy
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
@@ -33288,7 +33324,7 @@ msgstr ""
 "Wenn diese Option nicht aktiviert ist, dann werden alle NetBIOS-over-TCP/IP "
 "(eingeschlossen WINS) Optionen deaktiviert."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
@@ -33299,11 +33335,11 @@ msgstr ""
 "Namensauflösung gegen Server) und h-node (Namensauflösung gegen Server, dann "
 "Boadcast)"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr "Scope ID"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
@@ -33313,27 +33349,27 @@ msgstr ""
 "TCP/IP bereit. Die NetBIOS Scope ID begrenzte Traffic von Clients im "
 "gleichen Netzwerk auf die Geräte mit der selben NetBIOS Scope ID."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr "Aktiviere WINS-Server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr "WINS-Server 1"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr "WINS-Server 2"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr "Benutzerdefinierten Port aktivieren"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr "Verwaltungsport"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
@@ -33341,28 +33377,27 @@ msgstr ""
 "Der Standardport ist 166. geben Sie einen anderen Port an, wenn der Client "
 "mehrere OpenVPN-Verbindungen zur Auswahl hat."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
-"Tragen Sie hier zusätzliche OpenVPN Konfigurationen ein, separiert durch "
-"Semikolons.<br /> Beispiel: push \"route 10.0.0.0 255.255.255.0\""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr "OpenVPN Server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr "Protokoll / Port"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr "Tunnel Netzwerk"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr "Kryptographie"
 
@@ -35524,7 +35559,7 @@ msgstr "Gateway als inaktiv betrachten"
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr "<span class=\"help-block\">"
 
@@ -35685,8 +35720,8 @@ msgstr ""
 "Erlaube Clients das Xauth Passwort zu speichern (nur Cisco VPN Clients)."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr "Stelle Clients eine Standard-Domain zur Verfügung"
 
@@ -35697,13 +35732,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr "DNS Server Liste dem Client bereitstellen"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr "WINS Server Liste dem Client bereitstellen"
 
@@ -35757,38 +35792,38 @@ msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 "Deaktiviere diesen Phase 2 Eintrag ohne ihn aus der Liste zu entfernen."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr "Aktiviere IPCompression"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr "Aktiviere strikte Interfaceauswahl"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 #, fuzzy
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 "Akzeptiere unverschlüsselte ID und HASH Payloads in einem IKEv1 Hauptknoten"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr "Aktiviere Unity Plugin"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr "Aktiviere die stirkte Prüfung der Widerrufsliste."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 #, fuzzy
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr "Initiiere eine IKEv2 Re-Authentifikation mit einem make-before-break."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 #, fuzzy
 msgid "Enable bypass for LAN interface IP"
 msgstr "Erlaube LAN Interface IP Umgehung"
@@ -35824,18 +35859,18 @@ msgstr "TLS-Schlüssel nutzen"
 msgid "Automatically generate a TLS Key."
 msgstr "Automatische Generierung eines TLS-Schlüssels"
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "Generiere automatisch einen gemeinsam benutzten Schlüssel"
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr " Verschlüsselungsparameter-Aushandlung (NCP) aktivieren"
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 #, fuzzy
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
@@ -35860,23 +35895,23 @@ msgstr "Überschreiben deaktivieren"
 msgid "Block this client connection based on its common name."
 msgstr "Client-Verbindung aufgrund von eines CN verbieten"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr "gesamten Traffic des Clients durch den Tunnel leiten"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "NTP Server-Liste bereitstellen"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "Aktiviere NetBIOS über TCP/IP"
 
@@ -35884,47 +35919,47 @@ msgstr "Aktiviere NetBIOS über TCP/IP"
 msgid "Disable this server"
 msgstr "Deaktiviere diesen Server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr "Erzwinge Übereinstimmung"
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "DHCP für Geräte zulassen"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 "Teile dem sich verbindenden Clienten die zu verwendende Kompressionsmethode "
 "mit."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr "Kommunikation zwischen Clients dieses Servers zulassen"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr "Mehrere Verbindungen mit gleichem CN zulassen"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr "Wiederherstellung der Verbindung bei IP-Wechsel des Clients zulassen"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 "Stelle dem Client eine virtuele Adapter-Adresse zur Verfügung (Siehe Tunnel-"
 "Netzwerk)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr "Dem Client eine DNS-Server-Liste bereitstellen (IPv4 oder IPv6)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 #, fuzzy
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
@@ -35933,7 +35968,7 @@ msgstr ""
 "Verbiete Windows 10 Clients eigene DNS Server anstelle der VPN DNS Server zu "
 "verwenden."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
@@ -35941,6 +35976,6 @@ msgstr ""
 "Führe \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "und \"ipconfig /registerdns\" beim Verbinden aus."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "Nutze einen anderen Wartungsport für die Clients"
diff --git a/src/usr/local/share/locale/el/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/el/LC_MESSAGES/pfSense.mo
index 835e96c..91e6407 100644
--- a/src/usr/local/share/locale/el/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/el/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/el/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/el/LC_MESSAGES/pfSense.po
index 9092aaf..7b9cc08 100644
--- a/src/usr/local/share/locale/el/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/el/LC_MESSAGES/pfSense.po
@@ -4,12 +4,12 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-06 06:36-0500\n"
-"Last-Translator: Renato Botelho <garga@FreeBSD.org>\n"
+"PO-Revision-Date: 2017-02-09 07:59-0500\n"
+"Last-Translator: Orodreth <orodreth@protonmail.com>\n"
 "Language-Team: Greek\n"
 "Language: el\n"
 "X-Generator: Zanata 3.9.6\n"
@@ -24,18 +24,18 @@ msgstr ""
 
 #: src/etc/inc/auth.inc:114 src/etc/inc/captiveportal.inc:267
 msgid "Redirecting..."
-msgstr ""
+msgstr "Γίνεται ανακατεύθυνση..."
 
 #: src/etc/inc/auth.inc:120
 msgid "Redirecting to the dashboard..."
-msgstr ""
+msgstr "Γίνεται ανακατεύθυνση στον πίνακα εργαλείων"
 
 #: src/etc/inc/auth.inc:397 src/etc/inc/auth.inc:421 src/etc/inc/auth.inc:498
 #: src/etc/inc/auth.inc:539 src/etc/inc/auth.inc:608 src/etc/inc/auth.inc:766
 #: src/etc/inc/auth.inc:779
 #, php-format
 msgid "Running: %s"
-msgstr ""
+msgstr "Εκτελείται:%s"
 
 #: src/etc/inc/auth.inc:820 src/etc/inc/auth.inc:901 src/etc/inc/auth.inc:989
 #: src/etc/inc/auth.inc:1301
@@ -147,7 +147,7 @@ msgstr ""
 #: src/etc/inc/auth.inc:1465
 #, php-format
 msgid "RADIUS start: %s"
-msgstr ""
+msgstr "Εκκίνηση RADIUS:%s"
 
 #: src/etc/inc/auth.inc:1477
 #, php-format
@@ -203,7 +203,7 @@ msgstr ""
 
 #: src/etc/inc/authgui.inc:122
 msgid "Error: not allowed"
-msgstr ""
+msgstr "Σφάλμα: δεν επιτρέπεται"
 
 #: src/etc/inc/authgui.inc:149
 msgid "unknown reason"
@@ -271,7 +271,7 @@ msgstr "Όνομα Χρήστη"
 
 #: src/etc/inc/authgui.inc:270
 msgid "Enter your username"
-msgstr ""
+msgstr "Εισαγάγετε το όνομα χρήστη σας"
 
 #: src/etc/inc/authgui.inc:275 src/usr/local/www/diag_backup.php:568
 #: src/usr/local/www/diag_backup.php:615 src/usr/local/www/interfaces.php:2539
@@ -300,7 +300,7 @@ msgstr "Κωδικός πρόσβασης"
 
 #: src/etc/inc/authgui.inc:277
 msgid "Enter your password"
-msgstr ""
+msgstr "Εισαγάγετε τον κωδικό πρόσβασής σας"
 
 #: src/etc/inc/captiveportal.inc:36
 #, php-format
@@ -318,7 +318,7 @@ msgstr "Ονομα χρήστη:"
 
 #: src/etc/inc/captiveportal.inc:39
 msgid "Password:"
-msgstr "Κωδικός χρήστη:"
+msgstr "Κωδικός πρόσβασης:"
 
 #: src/etc/inc/captiveportal.inc:91
 msgid "Enter Voucher Code:"
@@ -326,11 +326,11 @@ msgstr ""
 
 #: src/etc/inc/captiveportal.inc:101 src/usr/local/www/crash_reporter.php:93
 msgid "Continue"
-msgstr ""
+msgstr "Συνέχεια"
 
 #: src/etc/inc/captiveportal.inc:268
 msgid "Redirecting to"
-msgstr ""
+msgstr "Γίνεται ανακατεύθυνση σε"
 
 #: src/etc/inc/captiveportal.inc:269 src/usr/local/www/head.inc:226
 #: src/usr/local/www/head.inc:512
@@ -432,7 +432,7 @@ msgstr ""
 
 #: src/etc/inc/config.console.inc:226 src/etc/inc/config.console.inc:419
 msgid "Do you want to proceed [y|n]?"
-msgstr ""
+msgstr "Θέλετε να προχωρήσετε [N|O];"
 
 #: src/etc/inc/config.console.inc:243
 msgid "You have chosen to remove the LAN interface."
@@ -456,7 +456,7 @@ msgstr ""
 #: src/etc/inc/config.console.inc:367
 #, php-format
 msgid "done.%s"
-msgstr ""
+msgstr "ολοκληρώθηκε.%s"
 
 #: src/etc/inc/config.console.inc:375
 msgid "One moment while the settings are reloading..."
@@ -810,7 +810,7 @@ msgstr "Εσφαλμένο  όνομα χρήστη."
 
 #: src/etc/inc/dyndns.class:982
 msgid "Invalid Password."
-msgstr "Εσφαλμένος κωδικός χρήστη."
+msgstr "Εσφαλμένος κωδικός πρόσβασης."
 
 #: src/etc/inc/dyndns.class:985
 msgid "Too many updates sent."
@@ -926,7 +926,7 @@ msgstr ""
 
 #: src/etc/inc/dyndns.class:1138
 msgid "Not a valid username or password!"
-msgstr "Μή έγκυρο όνομα  ή κωδικός χρήστη!"
+msgstr "Μή έγκυρο όνομα χρήστη  ή κωδικός πρόσβασης!"
 
 #: src/etc/inc/dyndns.class:1140
 msgid "Hostname specified does not exist."
@@ -968,7 +968,7 @@ msgstr ""
 #: src/etc/inc/dyndns.class:1169 src/etc/inc/dyndns.class:1183
 #: src/etc/inc/dyndns.class:1201
 msgid "Server side error."
-msgstr ""
+msgstr "Σφάλμα πλευράς διακομιστή."
 
 #: src/etc/inc/dyndns.class:1185
 msgid "Badly Formed Request (check the settings)."
@@ -981,7 +981,7 @@ msgstr ""
 #: src/etc/inc/dyndns.class:1205 src/etc/inc/dyndns.class:1225
 #: src/etc/inc/dyndns.class:1252
 msgid "Invalid username or password."
-msgstr "Μή έγκυρο όνομα  ή κωδικός χρήστη."
+msgstr "Μή έγκυρο όνομα χρήστη  ή κωδικός πρόσβασης."
 
 #: src/etc/inc/dyndns.class:1210 src/etc/inc/dyndns.class:1230
 #: src/etc/inc/dyndns.class:1257 src/etc/inc/dyndns.class:1269
@@ -1065,11 +1065,11 @@ msgstr ""
 
 #: src/etc/inc/dyndns.class:1419 src/etc/inc/dyndns.class:1477
 msgid "Invalid username or password"
-msgstr "Μή έγκυρο όνομα  ή κωδικός χρήστη."
+msgstr "Μή έγκυρο όνομα χρήστη  ή κωδικός πρόσβασης"
 
 #: src/etc/inc/dyndns.class:1422
 msgid "Account suspended"
-msgstr ""
+msgstr "Ο λογαριασμός είναι σε αναστολή"
 
 #: src/etc/inc/dyndns.class:1425
 msgid "Account revoked"
@@ -1121,7 +1121,7 @@ msgstr "Δεν δόθηκε όνομα χρήστη."
 
 #: src/etc/inc/dyndns.class:1529
 msgid "No Password Provided."
-msgstr "Δεν δόθηκε κωδικός χρήστη."
+msgstr "Δεν δόθηκε κωδικός πρόσβασης."
 
 #: src/etc/inc/dyndns.class:1532
 msgid "No Hostname Provided."
@@ -1345,11 +1345,11 @@ msgstr ""
 
 #: src/etc/inc/filter.inc:50
 msgid "Echo reply"
-msgstr ""
+msgstr "Απάντηση αντήχησης"
 
 #: src/etc/inc/filter.inc:51
 msgid "Echo request"
-msgstr ""
+msgstr "Αίτηση αντήχησης"
 
 #: src/etc/inc/filter.inc:52
 msgid "FQDN reply"
@@ -1373,11 +1373,11 @@ msgstr ""
 
 #: src/etc/inc/filter.inc:57
 msgid "Information reply"
-msgstr ""
+msgstr "Απάντηση πληροφοριών"
 
 #: src/etc/inc/filter.inc:58
 msgid "Information request"
-msgstr ""
+msgstr "Αίτηση πληροφοριών"
 
 #: src/etc/inc/filter.inc:59
 msgid "IPv6 I-am-here"
@@ -1481,7 +1481,7 @@ msgstr ""
 
 #: src/etc/inc/filter.inc:84
 msgid "Timestamp"
-msgstr ""
+msgstr "Χρονική σήμανση"
 
 #: src/etc/inc/filter.inc:85
 msgid "Time exceeded"
@@ -1500,7 +1500,7 @@ msgstr ""
 
 #: src/etc/inc/filter.inc:88
 msgid "Destination unreachable"
-msgstr ""
+msgstr "Χωρίς δυνατότητα πρόσβασης στον προορισμό"
 
 #: src/etc/inc/filter.inc:89
 msgid "Who are you reply"
@@ -1512,7 +1512,7 @@ msgstr ""
 
 #: src/etc/inc/filter.inc:221
 msgid "Initializing"
-msgstr ""
+msgstr "Προετοιμασία"
 
 #: src/etc/inc/filter.inc:233
 msgid "Configuring firewall"
@@ -1659,7 +1659,7 @@ msgstr ""
 
 #: src/etc/inc/filter.inc:1564
 msgid "static route"
-msgstr ""
+msgstr "Στατικό δρομολόγιο"
 
 #: src/etc/inc/filter.inc:1576
 msgid "DHCP alias address"
@@ -1881,8 +1881,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2341,7 +2341,7 @@ msgstr ""
 
 #: src/etc/inc/ipsec.inc:28 src/etc/inc/ipsec.inc:58
 msgid "IKE SA"
-msgstr ""
+msgstr "IKE SA"
 
 #: src/etc/inc/ipsec.inc:29 src/etc/inc/ipsec.inc:59
 msgid "IKE Child SA"
@@ -2366,9 +2366,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
-msgstr ""
+msgstr "Δικτύωση"
 
 #: src/etc/inc/ipsec.inc:34 src/etc/inc/ipsec.inc:64
 msgid "ASN encoding"
@@ -2408,7 +2408,7 @@ msgstr "Αθόρυβο"
 
 #: src/etc/inc/ipsec.inc:47
 msgid "Audit"
-msgstr ""
+msgstr "Έλεγχος"
 
 #: src/etc/inc/ipsec.inc:48
 msgid "Control"
@@ -2438,7 +2438,7 @@ msgstr "Η IP διεύθυνση μου"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2509,11 +2509,11 @@ msgstr ""
 
 #: src/etc/inc/ipsec.inc:170
 msgid "EAP-RADIUS"
-msgstr ""
+msgstr "EAP-RADIUS"
 
 #: src/etc/inc/ipsec.inc:171
 msgid "EAP-MSChapv2"
-msgstr ""
+msgstr "EAP-MSChapv2"
 
 #: src/etc/inc/ipsec.inc:172
 msgid "Mutual RSA"
@@ -2525,11 +2525,11 @@ msgstr ""
 
 #: src/etc/inc/ipsec.inc:184
 msgid "Tunnel IPv4"
-msgstr ""
+msgstr "Tunnel IPv4"
 
 #: src/etc/inc/ipsec.inc:185
 msgid "Tunnel IPv6"
-msgstr ""
+msgstr "Tunnel IPv6"
 
 #: src/etc/inc/ipsec.inc:186 src/usr/local/www/system_authservers.php:236
 msgid "Transport"
@@ -2537,7 +2537,7 @@ msgstr ""
 
 #: src/etc/inc/ipsec.inc:197
 msgid "off"
-msgstr ""
+msgstr "ανενεργό"
 
 #: src/etc/inc/ipsec.inc:198
 msgid "1 (768 bit)"
@@ -2710,7 +2710,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_mobile.php:462
 #: src/usr/local/www/vpn_openvpn_client.php:571
 msgid "none"
-msgstr ""
+msgstr "κανένα"
 
 #: src/etc/inc/openvpn.inc:54 src/usr/local/www/diag_pftop.php:94
 #: src/usr/local/www/firewall_rules_edit.php:1638
@@ -2811,7 +2811,7 @@ msgstr ""
 
 #: src/etc/inc/openvpn.inc:145
 msgid "TLS Authentication"
-msgstr ""
+msgstr "Έλεγχος ταυτότητας TLS"
 
 #: src/etc/inc/openvpn.inc:146
 msgid "TLS Encryption and Authentication"
@@ -2842,19 +2842,19 @@ msgstr "Εξυπηρετητής: Οχι"
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "Σε Χρήση"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
 #: src/etc/inc/openvpn.inc:413
 msgid "None (No Encryption)"
-msgstr ""
+msgstr "Κανένα (Χωρίς Κρυπτογράφηση)"
 
 #: src/etc/inc/openvpn.inc:420
 msgid "Use Default"
@@ -2862,7 +2862,7 @@ msgstr "Χρήση Προεπιλογών"
 
 #: src/etc/inc/openvpn.inc:446
 msgid "None (No Authentication)"
-msgstr ""
+msgstr "Κανένα (Χωρίς Ελεγχο Ταυτότητας)"
 
 #: src/etc/inc/openvpn.inc:451
 msgid "No Hardware Crypto Acceleration"
@@ -3102,7 +3102,7 @@ msgstr "πάνω"
 
 #: src/etc/inc/pfsense-utils.inc:1601
 msgid "blocking"
-msgstr ""
+msgstr "αποκλεισμός"
 
 #: src/etc/inc/pfsense-utils.inc:1601
 msgid "check for ethernet loops"
@@ -3110,11 +3110,11 @@ msgstr ""
 
 #: src/etc/inc/pfsense-utils.inc:1604
 msgid "learning"
-msgstr ""
+msgstr "εκμάθηση"
 
 #: src/etc/inc/pfsense-utils.inc:1607
 msgid "forwarding"
-msgstr ""
+msgstr "προώθηση"
 
 #: src/etc/inc/pfsense-utils.inc:1741
 #, php-format
@@ -5524,7 +5524,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5600,7 +5600,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5772,8 +5772,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6054,8 +6054,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6072,9 +6072,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6284,7 +6284,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "Διαγραφή"
@@ -7233,13 +7233,13 @@ msgstr "Επιβεβαίωση"
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7492,8 +7492,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7503,8 +7503,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr "Ενέργειες"
@@ -7783,10 +7783,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7800,7 +7800,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8010,7 +8010,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr "Εκκαθάριση"
@@ -8306,7 +8306,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8451,8 +8451,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "Φίλτρο"
 
@@ -8879,14 +8879,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9432,10 +9432,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10061,7 +10061,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10141,9 +10141,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10156,8 +10156,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "Προσθήκη"
 
@@ -10246,10 +10246,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10257,7 +10257,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10543,8 +10543,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12045,7 +12045,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13736,8 +13736,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "Τιμή"
 
@@ -13747,9 +13747,9 @@ msgstr "Τιμή"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13786,7 +13786,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15943,7 +15943,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16482,7 +16482,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16910,7 +16910,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20166,7 +20166,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20368,14 +20368,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20692,7 +20692,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20790,7 +20790,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21269,7 +21269,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23508,7 +23508,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25183,21 +25183,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25354,7 +25354,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25714,7 +25714,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25768,7 +25768,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25778,7 +25778,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25788,7 +25788,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25798,9 +25798,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25810,7 +25810,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27155,51 +27155,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr "Νέο"
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27218,13 +27218,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27301,7 +27301,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27312,8 +27312,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27329,7 +27329,7 @@ msgstr "Χρήστες"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr "Ομάδες"
@@ -27339,12 +27339,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27353,9 +27353,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27569,331 +27569,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr "Εσωτερικό"
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr "Εκδότης"
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27910,185 +27910,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr "διεύθυνση ηλεκτρονικού ταχυδρομείου"
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28925,8 +28925,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28935,12 +28935,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28949,22 +28949,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr "Σκιά"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28976,12 +28976,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29598,18 +29598,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30146,9 +30146,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30439,8 +30439,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30457,8 +30457,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30741,43 +30741,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30788,46 +30789,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30836,11 +30837,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30875,10 +30876,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31061,7 +31063,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31102,10 +31104,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31156,9 +31159,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31220,126 +31224,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31351,8 +31381,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31364,12 +31394,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31379,12 +31409,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31405,7 +31435,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31413,7 +31443,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31422,7 +31452,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31451,19 +31481,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31566,32 +31597,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31600,109 +31634,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31798,7 +31836,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31821,58 +31859,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
+msgid ""
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31881,7 +31941,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31890,15 +31950,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31907,11 +31967,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31919,15 +31979,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31935,11 +31995,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31947,171 +32007,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34195,7 +34257,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34350,8 +34412,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34362,13 +34424,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34418,35 +34480,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34480,18 +34542,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34513,23 +34575,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34537,54 +34599,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/en_US/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/en_US/LC_MESSAGES/pfSense.mo
index 028dc0c..93dcf55 100644
--- a/src/usr/local/share/locale/en_US/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/en_US/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/en_US/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/en_US/LC_MESSAGES/pfSense.po
index 4abf225..cae93d9 100644
--- a/src/usr/local/share/locale/en_US/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/en_US/LC_MESSAGES/pfSense.po
@@ -3,7 +3,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1885,8 +1885,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2370,7 +2370,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2442,7 +2442,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2846,13 +2846,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5528,7 +5528,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5604,7 +5604,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5776,8 +5776,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6058,8 +6058,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6076,9 +6076,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6288,7 +6288,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7237,13 +7237,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7496,8 +7496,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7507,8 +7507,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7787,10 +7787,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7804,7 +7804,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8014,7 +8014,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8310,7 +8310,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8455,8 +8455,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8883,14 +8883,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9436,10 +9436,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10065,7 +10065,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10145,9 +10145,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10160,8 +10160,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10250,10 +10250,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10261,7 +10261,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10547,8 +10547,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12049,7 +12049,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13740,8 +13740,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13751,9 +13751,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13790,7 +13790,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15947,7 +15947,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16486,7 +16486,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16914,7 +16914,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20170,7 +20170,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20372,14 +20372,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20696,7 +20696,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20794,7 +20794,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21273,7 +21273,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23512,7 +23512,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25187,21 +25187,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25358,7 +25358,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25718,7 +25718,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25772,7 +25772,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25782,7 +25782,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25792,7 +25792,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25802,9 +25802,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25814,7 +25814,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27159,51 +27159,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27222,13 +27222,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27305,7 +27305,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27316,8 +27316,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27333,7 +27333,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27343,12 +27343,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27357,9 +27357,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27573,331 +27573,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27914,185 +27914,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28929,8 +28929,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28939,12 +28939,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28953,22 +28953,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28980,12 +28980,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29602,18 +29602,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30150,9 +30150,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30443,8 +30443,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30461,8 +30461,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30745,43 +30745,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30792,46 +30793,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30840,11 +30841,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30879,10 +30880,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31065,7 +31067,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31106,10 +31108,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31160,9 +31163,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31224,126 +31228,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31355,8 +31385,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31368,12 +31398,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31383,12 +31413,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31409,7 +31439,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31417,7 +31447,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31426,7 +31456,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31455,19 +31485,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31570,32 +31601,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31604,109 +31638,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31802,7 +31840,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31825,58 +31863,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31885,7 +31945,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31894,15 +31954,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31911,11 +31971,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31923,15 +31983,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31939,11 +31999,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31951,171 +32011,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34199,7 +34261,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34354,8 +34416,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34366,13 +34428,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34422,35 +34484,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34484,18 +34546,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34517,23 +34579,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34541,54 +34603,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/es/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/es/LC_MESSAGES/pfSense.mo
index a390e34..ff78da5 100644
--- a/src/usr/local/share/locale/es/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/es/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/es/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/es/LC_MESSAGES/pfSense.po
index 732e899..681791c 100644
--- a/src/usr/local/share/locale/es/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/es/LC_MESSAGES/pfSense.po
@@ -5,7 +5,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -2000,8 +2000,8 @@ msgstr "No hay mirros."
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2515,7 +2515,7 @@ msgstr "Interfaz del núcleo"
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr "la creación de una red de contactos profesionales"
 
@@ -2587,7 +2587,7 @@ msgstr "Mi dirección IP"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -3003,13 +3003,13 @@ msgstr "Servidor: NO"
 msgid "CA: %s"
 msgstr "CA: %s"
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "En uso"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr "Revocado/ Anulado ???"
 
@@ -5841,7 +5841,7 @@ msgstr "NTP sincronización de reloj"
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr "portal cautivo"
 
@@ -5917,7 +5917,7 @@ msgstr "Detenido"
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr "Deshabilitado"
@@ -6105,8 +6105,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr "A partir servicio UPnP ... "
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr "El campo ' %s ' contiene caracteres no válidos."
@@ -6398,8 +6398,8 @@ msgstr "Seleccione las opciones para esta cola"
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6416,9 +6416,9 @@ msgstr "Seleccione las opciones para esta cola"
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6639,7 +6639,7 @@ msgstr "Delay debe ser un entero."
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "Eliminar"
@@ -7685,13 +7685,13 @@ msgstr "Confirmar"
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7949,8 +7949,8 @@ msgstr "Tipo de eslabón"
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7960,8 +7960,8 @@ msgstr "Tipo de eslabón"
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr "Acciones"
@@ -8256,10 +8256,10 @@ msgstr "syslog"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -8273,7 +8273,7 @@ msgstr "syslog"
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8492,7 +8492,7 @@ msgstr "entrada de mandatos claros"
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr "Clea"
@@ -8808,7 +8808,7 @@ msgstr "Nombre del gestor"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8955,8 +8955,8 @@ msgstr "expresión de filtro"
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "Filtros de búsqueda"
 
@@ -9407,14 +9407,14 @@ msgid "Packet Capture"
 msgstr "Captura de paquetes"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr "OpenVPN servidor"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr "Cliente OpenVPN"
 
@@ -10003,10 +10003,10 @@ msgstr "Utilizar una expresión regular para filtrar las tablas."
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10668,7 +10668,7 @@ msgstr "La lista de alias se ha cambiado."
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10748,9 +10748,9 @@ msgstr "eliminar alias"
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10763,8 +10763,8 @@ msgstr "eliminar alias"
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "Añadir"
 
@@ -10858,10 +10858,10 @@ msgstr "Tabla URL (Puerto)"
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10869,7 +10869,7 @@ msgstr "Tabla URL (Puerto)"
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -11197,8 +11197,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12823,7 +12823,7 @@ msgstr "Regla anti-bloqueo"
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -14680,8 +14680,8 @@ msgstr "solamente la lista de primeros 10k artículos"
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "Valor"
 
@@ -14691,9 +14691,9 @@ msgstr "Valor"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr "Avanzado"
@@ -14730,7 +14730,7 @@ msgstr "Cert. Gerente"
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr "Gestión de Usuarios"
@@ -17044,7 +17044,7 @@ msgstr "Interfaces que participan en el puente."
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr "Configuracion avanzada"
@@ -17659,7 +17659,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr "Id"
 
@@ -18162,7 +18162,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr "Compresión"
 
@@ -21823,7 +21823,7 @@ msgstr ""
 "fuera del intervalo anterior, pueden ser especificados aquí."
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr "Los servidores WINS"
 
@@ -22067,14 +22067,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr "Servidor NTP 1"
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr "Servidor NTP 2"
 
@@ -22431,7 +22431,7 @@ msgstr "Servidores WINS"
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr "Servidores DNS"
 
@@ -22549,7 +22549,7 @@ msgstr "servidores NTP"
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr "Los servidores NTP"
 
@@ -23123,7 +23123,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr "Opciones personalizadas"
 
@@ -25669,7 +25669,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -27440,21 +27440,21 @@ msgid "Remote log servers"
 msgstr "servidores de registro remotos"
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr "10539=Servidor"
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr "10539=Servidor"
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr "10539=Servidor"
 
@@ -27617,7 +27617,7 @@ msgstr "Client connections"
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr "Nombre común"
 
@@ -28023,7 +28023,7 @@ msgstr "Elija un idioma para el webConfigurator"
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr "webConfigurator"
 
@@ -28082,7 +28082,7 @@ msgstr "Un momento ... volver a dirigir a %s en 20 segundos."
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr "El acceso de administrador"
 
@@ -28092,7 +28092,7 @@ msgstr "El acceso de administrador"
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr "Cortafuegos y NAT"
 
@@ -28102,7 +28102,7 @@ msgstr "Cortafuegos y NAT"
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr " Misceláneos"
@@ -28112,9 +28112,9 @@ msgstr " Misceláneos"
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr "sistema optimizables"
 
@@ -28124,7 +28124,7 @@ msgstr "sistema optimizables"
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr "Notificaciones"
 
@@ -29712,53 +29712,53 @@ msgstr ""
 "Una prueba de notificación será enviado incluso si el servicio está marcado "
 "como discapacitados."
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr "Un nombre y un valor debe ser especificado."
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr "El valor sólo puede contener caracteres alfanuméricos, -, _,%, y /."
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr "Los valores ajustables de firewall han cambiado."
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr "NOTA:  "
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 "Las opciones de esta página son para uso exclusivo de los usuarios avanzados."
 ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr "Nombre sintonizable"
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr "Nuevo"
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr "Editar sintonizable"
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr "Borrar / Restablecer sintonizable"
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr "Editar sintonizable"
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr "* sintonizable"
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr "valor."
 
@@ -29777,13 +29777,13 @@ msgstr "La autenticación del servidor %s borrados."
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -29860,7 +29860,7 @@ msgstr "%s valor de tiempo de espera debe ser numérico y positivo."
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr "Servidores de autenticación"
@@ -29871,8 +29871,8 @@ msgstr "Servidores de autenticación"
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -29888,7 +29888,7 @@ msgstr "Usuarios"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr "Grupos"
@@ -29898,12 +29898,12 @@ msgid "Server Name"
 msgstr "Nombre del servidor (Server Name)"
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr "Editar servidor"
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr "eliminar servidor"
 
@@ -29912,9 +29912,9 @@ msgid "Server Settings"
 msgstr "Configuración del servidor"
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -30149,253 +30149,253 @@ msgstr "Crear una autoridad de certificación interna"
 msgid "Create an intermediate Certificate Authority"
 msgstr "Crear una autoridad de certificación intermedia"
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 "Autoridad de certificación %s y sus CRLs (si los hay) han eliminado "
 "correctamente."
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr "los datos del certificado"
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr "Este certificado no parece ser válido."
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr "claves privadas cifradas sin embargo, no son compatibles."
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 "La clave privada enviada no coincide con los datos de los certificados "
 "presentados."
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr "longitud de la clave"
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr "Duración"
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr "nombre completo Código de País"
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr "Estado de nombre completo o Provincia"
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr "Distinguido Nombre de la ciudad"
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr "Organización nombre distinguido"
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr "nombre completo Dirección de correo electrónico"
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr "Nombre distintivo Nombre común"
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr "La firma de autoridad de certificación"
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr "El campo \"Nombre descriptivo 'contiene caracteres no válidos."
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 "El campo 'Distinguido nombre Dirección de correo electrónico' contiene "
 "caracteres no válidos."
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 "'Nombre completo Nombre común' el campo contiene caracteres no válidos."
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr "Por favor, seleccione una clave de longitud válida."
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr "Por favor, seleccione una válida Digest Algorithm."
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr "el administrador de certificados"
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr "CAs"
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr "Certificados"
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr "de revocación de certificados"
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr "Autoridades de Certificación"
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr "Interno"
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr "Emisor"
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr "Nombre distinguido"
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr "autofirmado"
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr "EXTERNO "
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr "Válida desde"
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr "Válido hasta"
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr "túnel IPsec"
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr "Servidor LDAP"
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr "Editar CA"
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr "Exportación CA"
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr "exportación clave"
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr "Eliminar CA y sus CRL"
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr "Crear / Editar CA"
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr "Elaboración"
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr "Autoridad de certificación existentes"
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr "* datos del certificado"
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr "Pegar un certificado en formato X.509 PEM aquí."
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr "Certificado de clave privada (opcional)"
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
@@ -30405,11 +30405,11 @@ msgstr ""
 "en la mayoría de los casos, pero se requiere cuando se genera una lista de "
 "revocación de certificados (CRL)."
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr "De serie para el siguiente certificado"
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
@@ -30417,26 +30417,26 @@ msgstr ""
 "Introduzca un número decimal que se utilizará como el número de serie para "
 "el siguiente certificado que se creó utilizando esta CA."
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr "Autoridad de certificación interna"
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr "* Firma Autoridad de certificación"
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr "* Longitud de la clave (bits)"
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr "* Digest Algorithm"
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
@@ -30444,50 +30444,50 @@ msgstr ""
 "NOTA: Se recomienda el uso de un algoritmo SHA1 más fuerte que cuando sea "
 "posible."
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr "* Vida útil (días)"
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr "Código del país"
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr "Provincia o Estado"
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr "Ciudad "
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr "- Organización"
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr "Unidad organizacional"
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr "*Dirección de correo electrónico"
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr "Nombre común"
@@ -30504,93 +30504,93 @@ msgstr "Crear un certificado interno"
 msgid "Create a Certificate Signing Request"
 msgstr "Crear una solicitud de firma de certificado"
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr "Elegir un certificado existente"
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr "Certificado %s eliminado correctamente."
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr "Llave de datos"
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr "Autoridad certificada"
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr "tipo de certificado"
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr "Certificado existente Choice"
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr "Certificado final de datos"
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 "El módulo del certificado no coincide con el módulo de solicitud de firma."
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr "Añadir un nuevo certificado"
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr "Certificado de importación"
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr "* Los datos de clave privada"
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr "Pegar una clave privada en formato X.509 PEM aquí."
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr "Certificado interna"
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr "No hay autoridades de certificación internas se han definido. "
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 "Una CA interna debe definirse con el fin de crear un certificado interno. "
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr "*Autoridad certificada"
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr "* Longitud de la clave"
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr "*Tipo de certificado"
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
@@ -30598,50 +30598,50 @@ msgstr ""
 "Tipo de certificado para generar. Se utiliza para la imposición de "
 "restricciones en el uso del certificado generado."
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr "Nombres alternativos"
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr "FQDN o nombre de host"
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr "URI"
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr "dirección de correo electrónico"
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr "Solicitud de firma externa"
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 "NOTA: Se recomienda el uso de un algoritmo SHA1 más fuerte que cuando sea "
 "posible"
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr "Elegir un certificado existente"
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr "* Certificados existente"
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr "Solicitud de firma completa para "
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr "La firma de datos de la solicitud"
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
@@ -30649,48 +30649,48 @@ msgstr ""
 "Copiar los datos de firma de certificados de aquí y lo remitirá a una "
 "autoridad de certificación para firmar."
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr "* Datos del certificado final"
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr "Pegar el certificado recibido de la autoridad de certificación aquí."
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr "Solo llave privada"
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr "externa - pendiente de la firma"
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr "usuario Cert"
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr "Certificado de Exportación"
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr "Exportar clave"
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr "P12 de exportación"
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr "actualización de la RSE"
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr "Solicitud de exportación"
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr "eliminar certificado"
 
@@ -31629,8 +31629,8 @@ msgstr "Mover a \\ \"no miembros"
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 "Mantenga pulsada la tecla / Comando (Mac) CTRL (PC) para seleccionar varios "
@@ -31641,12 +31641,12 @@ msgid "Assigned Privileges"
 msgstr "Los privilegios asignados"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr "Añadir privilegios"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr "privilegios seleccionados"
 
@@ -31655,22 +31655,22 @@ msgid "Add Privileges for "
 msgstr "Añadir privilegios de "
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr "* Asignación de privilegios"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr "Sombra"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr "Mostrar sólo las opciones que contienen este término"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr "información de privilegios"
 
@@ -31686,12 +31686,12 @@ msgstr ""
 "modificar usuarios, cambiar contraseñas o similares:"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr "Por favor tenga cuidado al otorgar estos privilegios."
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr "Seleccionar un privilegio de la lista anterior para una descripción"
 
@@ -32338,11 +32338,11 @@ msgstr "Introduzca las claves SSH autorizados para este usuario"
 msgid "IPsec Pre-Shared Key"
 msgstr "IPsec Pre-Shared Key"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr "privilegios de usuario"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
@@ -32353,7 +32353,7 @@ msgstr ""
 "archivos de sistema de edición, modificar usuarios, cambiar contraseñas o "
 "similares:"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -32937,9 +32937,9 @@ msgstr ""
 "introducción manual."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr "DNS de dominio predeterminado"
 
@@ -33278,8 +33278,8 @@ msgstr ""
 "certificados."
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -33298,8 +33298,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr "Phase 1 Proposal (algoritmos)"
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr "*Algoritmo de cifrado"
 
@@ -33611,42 +33611,33 @@ msgid "Configure Unique IDs as"
 msgstr "Configurar los ID únicos como"
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
-"Si un ID determinado participante debe mantenerse único, con cualquier nueva "
-"IKE_SA utilizando un ID considerará que sustituye todos los anteriores "
-"utilizando ese ID. ID de participantes normalmente son únicos, por lo que "
-"una nueva IKE_SA utilizando el mismo ID se destina casi invariablemente para "
-"reemplazar una vieja. La diferencia entre <b> no </ b> y <b> no </ b> es que "
-"los viejos IKE_SAs serán reemplazados cuando se recibe una INITIAL_CONTACT "
-"notificar si la opción es que no, pero ignorará estos notifica si <b> no </ "
-"b> está configurado. El demonio también acepta el valor <b> mantener </ b> "
-"para rechazar las nuevas configuraciones IKE_SA y mantener el duplicado "
-"establecido anteriormente. El valor predeterminado es Sí."
-
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr "compresión IP"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr "IPComp compresión de contenido se propone en la conexión."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr "vinculante interfaz estricta"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
@@ -33656,11 +33647,11 @@ msgstr ""
 "interfaces específicas. Esta opción se conoce para romper IPsec con "
 "interfaces IP dinámicas. Esto no es recomendable en este momento."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr "cargas útiles sin cifrar en modo principal IKEv1"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -33679,16 +33670,16 @@ msgstr ""
 "implicaciones exactas y no se requiere la compatibilidad de dichos "
 "dispositivos (por ejemplo, algunas cajas de SonicWall)."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr "Habilitar máximo MSS"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr "máximo MSS"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
@@ -33697,11 +33688,11 @@ msgstr ""
 "los problemas con PMTUD en los enlaces VPN IPsec. Si se deja en blanco, el "
 "valor predeterminado es de 1400 bytes. "
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr "Habilitar extensiones de Cisco"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
@@ -33709,11 +33700,11 @@ msgstr ""
 "Habilitar la Unidad Plugin que proporciona soporte de Cisco Extension como "
 "Split-Incluir, Split-Excluir y Dividir en DNS."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr "Estricta comprobación de CRL"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
@@ -33721,11 +33712,11 @@ msgstr ""
 "Active esta opción para requerir la disponibilidad de una CRL fresco para la "
 "autenticación del mismo sobre la base de firmas RSA para tener éxito."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr "Sin paso por cero"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -33740,11 +33731,11 @@ msgstr ""
 "durante la reautenticación, pero requiere el apoyo a la superposición de las "
 "SV por los pares."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr "Auto-excluir la dirección LAN"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr "Excluir el tráfico de la subred LAN a la dirección IP LAN de IPsec."
 
@@ -33783,17 +33774,13 @@ msgid "*Server address"
 msgstr "*Dirección del servidor"
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
-"Introduzca la dirección IP del servidor L2TP debe dar a los clientes para su "
-"uso como su \\ \"puerta de entrada \". <br /> Normalmente, esto se establece "
-"en un IP no utilizada en las afueras de la gama cliente <br /> <br /> NOTA:. "
-"Esto no debería ser ajustado en cualquier dirección IP actualmente en uso en "
-"este cortafuegos."
 
 #: src/usr/local/www/vpn_l2tp.php:227
 msgid "*Remote address range"
@@ -33994,7 +33981,7 @@ msgstr "Uno o más de los algoritmos de NCP seleccionado no es válido."
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr "Llave compartida"
 
@@ -34038,14 +34025,12 @@ msgstr "* Modo de Dispositivo"
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
-"\\ \"Tun \" modo lleva IPv4 e IPv6 (capa 3 del modelo OSI) y es el modo más "
-"común y compatible con todas las plataformas. <br/> \\ Modo de \"tap \" es "
-"capaz de llevar a 802.3 (OSI de nivel 2.)"
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
 msgid ""
@@ -34103,13 +34088,11 @@ msgid "Proxy host or address"
 msgstr "host o la dirección de proxy"
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
-"La dirección de un proxy HTTP este cliente puede utilizar para conectarse a "
-"un servidor remoto. <br/> TCP debe ser utilizado para el protocolo de "
-"cliente y servidor."
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
 msgid "Proxy port"
@@ -34176,61 +34159,55 @@ msgstr "* Clave TLS"
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
-"Pegue la clave TLS aquí. <br/> Esta clave se utiliza para firmar paquetes de "
-"canal de control con una firma HMAC para la autenticación cuando se "
-"establezca el túnel. "
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr "* Modo de uso de claves TLS"
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
-"En el modo de autenticación de la clave TLS se utiliza sólo como la "
-"autenticación HMAC para el canal de control, la protección de los pares de "
-"conexiones no autorizadas. Cifrado <br/> y el modo de autenticación también "
-"cifra la comunicación del canal de control, que proporciona mayor privacidad "
-"y el control del tráfico de ofuscación canal."
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr "Peer lista de revocación de certificados"
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr "generación automática"
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr "*Llave compartida"
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr "Pegue la clave compartida aquí"
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr "Certificado de cliente"
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
@@ -34238,39 +34215,46 @@ msgstr ""
 "El algoritmo de cifrado utilizado para paquetes de canal de datos cuando el "
 "apoyo Negociable criptográfico de parámetros (PNC) no está disponible."
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr "Habilitar PNC"
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
-"Active esta opción para permitir a los clientes y servidores OpenVPN para "
-"negociar un conjunto compatible de Algoritmos de cifrado criptográficos "
-"aceptables de los seleccionados en la lista PNC Algoritmos continuación. "
-"<Div class = \\ \"infoblock \">"
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr "Algoritmos de NCP"
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
-"Disponible PNC cifrado Algoritmos <br /> Haga clic para añadir o eliminar un "
-"algoritmo de la lista"
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
@@ -34278,50 +34262,53 @@ msgstr ""
 "Algoritmos de cifrado permitidos NCP. Haga clic en un nombre de algoritmo "
 "para quitarlo de la lista"
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
-"El orden de los NCP Algoritmos de encriptación seleccionados es respetado "
-"por OpenVPN. <Div class = \\ \"infoblock \">"
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr "* Autenticación algoritmo de resumen"
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
-"El algoritmo utilizado para autenticar paquetes de canal de datos, y "
-"controlar paquetes de canal si una clave TLS está presente. <br /> Cuando se "
-"utiliza un modo de AEAD algoritmo de cifrado, como AES-GCM, este digesto se "
-"utiliza para el canal de control solamente, no el canal de datos. <br /> "
-"Deje este conjunto de SHA1 a menos que el servidor utiliza un valor "
-"diferente. SHA1 es el valor predeterminado para OpenVPN. "
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr "Crypto hardware"
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr "Configuración de túnel"
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr "Red túnel IPv4"
 
@@ -34336,8 +34323,8 @@ msgstr ""
 "24). La segunda dirección de red se asigna a la interfaz virtual cliente."
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr "Red túnel IPv6"
 
@@ -34352,12 +34339,12 @@ msgstr ""
 "64). La segunda dirección de red se asigna a la interfaz virtual cliente."
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr "Red de control remoto IPv4 (s)"
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -34372,12 +34359,12 @@ msgstr ""
 "remota / s aquí. Puede dejarse en blanco para no VPN de sitio a sitio."
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr "Red de control remoto IPv6 (s)"
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -34407,7 +34394,7 @@ msgstr ""
 "Mbytes / seg (ingresó como bytes por segundo)."
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -34419,7 +34406,7 @@ msgstr ""
 "manera eficiente."
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr "Topología"
 
@@ -34430,7 +34417,7 @@ msgstr ""
 "adaptador virtual."
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr "Tipo de servicio "
 
@@ -34463,27 +34450,21 @@ msgstr ""
 "cliente OpenVPN aquí, separados por punto y coma."
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr "nivel de Información"
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
-msgstr ""
-"Cada nivel muestra toda la información respecto a los niveles anteriores. "
-"Nivel 3 es recomendable para un buen resumen de lo que está pasando sin ser "
-"abrumado por la salida <br /> <br /> Ninguno:. Solamente los errores fatales "
-"<br /> predeterminado a 4: normal <br /> rango de uso 5: Salida R y W "
-"caracteres a la consola para cada paquete de lectura y escritura. Mayúscula "
-"se utiliza para paquetes TCP / UDP y minúsculas se utiliza para los paquetes "
-"TUN / TAP <br /> 6-11:. Depuración gama info"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
+msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
 msgid "OpenVPN Clients"
@@ -34599,137 +34580,109 @@ msgstr ""
 "lugar."
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
-"La red IPv4 virtual que se usa para las comunicaciones privadas entre el "
-"cliente y el servidor expresa utilizando CIDR (por ejemplo 10.0.8.5/24). <br "
-"/> Con la topología de subred, introduzca la dirección IP del cliente y la "
-"máscara de subred debe coincidir con la red de túneles IPv4 en el servidor. "
-"<br /> Con NET30 topología, la primera dirección de red del / 30 se supone "
-"que es la dirección del servidor y la segunda dirección de red se le "
-"asignará al cliente."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
-"La red IPv6 virtual que se usa para las comunicaciones privadas entre el "
-"cliente y el servidor expresa utilizando el prefijo (por ejemplo, 2001: DB9: "
-"1: 1 :: 100/64). <br /> Introduzca la dirección IPv6 del cliente y el "
-"prefijo. El prefijo debe coincidir con el prefijo de red IPv6 Túnel en el "
-"servidor. "
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr "IPv4 Red Local / s"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
-"Estas son las redes del lado del servidor IPv4 que serán accesibles desde "
-"este cliente en particular. Expresado como una lista separada por comas de "
-"una o más redes CIDR. <br /> NOTA: Las redes no necesitan especificarse aquí "
-"si ya se han definido en la configuración del servidor principal."
 
 #: src/usr/local/www/vpn_openvpn_csc.php:395
 msgid "IPv6 Local Network/s"
 msgstr "IPv6 Red Local / s"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
-"Estas son las redes de servidor IPv6 que serán accesibles desde este cliente "
-"en particular. . Expresado como una lista separada por comas de una o más "
-"redes / prefijo IP <br /> NOTA: Las redes no necesitan especificarse aquí si "
-"ya se han definido en la configuración del servidor principal."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr "IPv4 red remota / s"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
-"Estas son las redes IPv4 del lado del cliente que serán enviados a este "
-"cliente usando específicamente iroute, por lo que un sitio a sitio VPN puede "
-"ser establecida. Expresado como una lista separada por comas de uno o más "
-"rangos CIDR. Puede dejarse en blanco si no hay redes del lado del cliente "
-"para ser enrutados <br /> NOTA:. Recuerda añadir estas subredes a la lista "
-"de redes remotas IPv4 en la configuración del servidor OpenVPN "
-"correspondientes."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr "IPv6 red remota / s"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
-"Estas son las redes de cliente IPv6 que serán enviados a este cliente usando "
-"específicamente iroute, por lo que un sitio a sitio VPN puede ser "
-"establecida. Expresado como una lista separada por comas de una o más redes /"
-" prefijo IP. Puede dejarse en blanco si no hay redes del lado del cliente "
-"para ser enrutados <br /> NOTA:. Recuerda añadir estas subredes a la lista "
-"de redes remotas IPv6 en la configuración del servidor OpenVPN "
-"correspondientes."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr "redirigir puerta de enlace"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr "Configuración del cliente"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr "Definiciones de servidor"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr "dominio DNS"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr "10539=Servidor"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr "Opciones de NetBIOS"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
@@ -34737,12 +34690,12 @@ msgstr ""
 "Si esta opción no está activada, se desactivarán todas las opciones de "
 "NetBIOS sobre TCP / IP (incluyendo WINS). "
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr "Tipo de punto"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
@@ -34753,7 +34706,7 @@ msgstr ""
 "se le pregunta el nombre del servidor), y h-nodo (servidor de nombres de "
 "consulta, a continuación, de difusión) . "
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
@@ -34763,25 +34716,23 @@ msgstr ""
 "sobre TCP / IP. El identificador de ámbito NetBIOS aísla tráfico NetBIOS en "
 "una sola red sólo a los nodos con el mismo alcance NetBIOS ID. "
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
-"Introduzca las opciones adicionales para agregar a este aumento de "
-"presupuesto específica del cliente, separados por un punto y coma. <br /> "
-"Ejemplo: empujar \\ \"ruta 10.0.0.0 255.255.255.0 \"; "
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr "CSC anulaciones"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr "Anulación de edición CSC"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr "Eliminar CSC Anulación"
 
@@ -34889,7 +34840,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr "El puerto utilizado por OpenVPN para recibir conexiones de cliente."
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -34914,53 +34865,63 @@ msgstr "* Certificado de servidor"
 msgid "*DH Parameter Length"
 msgstr "* DH parámetro de longitud"
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
 msgstr ""
-"conjunto de parámetros Diffie-Hellman (DH) que se utiliza para el "
-"intercambio de claves. <div class = \\ \"infoblock \">"
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr "Curva ECDH"
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
-"La curva elíptica que se utilizará para el intercambio de claves. <br/> La "
-"curva del certificado de servidor se utiliza de forma predeterminada cuando "
-"el servidor utiliza un certificado ECDSA. De lo contrario, secp384r1 se "
-"utiliza como una alternativa."
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
-"El algoritmo utilizado para autenticar paquetes de canal de datos, y "
-"controlar paquetes de canal si una clave TLS está presente. <br /> Cuando se "
-"utiliza un modo de AEAD algoritmo de cifrado, como AES-GCM, este digesto se "
-"utiliza para el canal de control solamente, no el canal de datos. <br /> "
-"Deje este conjunto de SHA1 menos que todos los clientes se configuran para "
-"que coincida. SHA1 es el valor predeterminado para OpenVPN. "
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr "No marque"
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr "* Certificado de Profundidad"
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
@@ -34970,11 +34931,11 @@ msgstr ""
 "certificados por debajo de esta profundidad. Útil para negar certificados "
 "hechos con CA intermedias generadas a partir de la misma CA que el servidor."
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr "Estricta usuario CN-Matching"
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
@@ -34983,7 +34944,7 @@ msgstr ""
 "nombre común del certificado de cliente y el nombre de usuario dado al "
 "iniciar la sesión."
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -34997,7 +34958,7 @@ msgstr ""
 "virtual del servidor. Las direcciones de red restantes opcionalmente se "
 "pueden asignar a clientes que se conectan (véase el grupo de direcciones)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -35011,15 +34972,15 @@ msgstr ""
 "virtual del servidor. Las direcciones de red restantes opcionalmente se "
 "pueden asignar a clientes que se conectan (véase el grupo de direcciones)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr "DHCP puente"
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr "Puente Interfaz"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -35034,11 +34995,11 @@ msgstr ""
 "que la configuración del servidor DHCP puente a continuación para ser "
 "ignorados."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr "Servidor DHCP Puente de inicio"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -35050,15 +35011,15 @@ msgstr ""
 "este caso TAP. Si estos valores se dejan en blanco, DHCP será pasada a "
 "través de la LAN, y se ignorará la interfaz de configuración anterior."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr "Servidor DHCP Puente Fin"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr "IPv4 red (s) local"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -35070,11 +35031,11 @@ msgstr ""
 "blanco si no añadir una ruta a la red local a través de este túnel en la "
 "máquina remota. Esto se establece generalmente a la red LAN."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr "IPv6 a la red (s) local"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -35086,11 +35047,11 @@ msgstr ""
 "blanco si no añadir una ruta a la red local a través de este túnel en la "
 "máquina remota. Esto se establece generalmente a la red LAN."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr "Conexiones concurrentes"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
@@ -35098,76 +35059,71 @@ msgstr ""
 "Especificar el número máximo de clientes que pueden conectarse "
 "simultáneamente a este servidor."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr "compresión de empuje"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr "La comunicación entre cliente"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr "Conexión duplicado"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 "(Esto no es recomendable, pero puede ser necesario para algunos escenarios.)"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr "IP dinámica"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr "Conjunto de direcciones"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
-"Especifica el método utilizado para suministrar una dirección IP adaptador "
-"virtual a los clientes cuando utilizan el modo TUN en IPv4. <br /> Algunos "
-"clientes pueden requerir este se fija en \\ \"subred \" incluso para IPv6, "
-"como OpenVPN Connect (iOS / Android) . Las versiones anteriores de OpenVPN "
-"(antes 2.0.9) o de los clientes, tales como teléfonos Yealink pueden "
-"requerir \\ \"NET30 \"."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr "Configuración de cliente avanzado"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr "habilitar Servidor DNS"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr "Servidor DNS 1"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr "Servidor DNS 2"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr "Servidor DNS 3"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr "Servidor DNS 4"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr "Fuera de bloqueo de DNS"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
@@ -35177,25 +35133,25 @@ msgstr ""
 "propensa a fugas de DNS de esta manera, otros clientes ignoran la opción ya "
 "que no se ven afectados."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr "actualización de la caché DNS vigor"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 "Esto se conoce para lanzar Windows en el reconocimiento de los servidores "
 "DNS empujadas."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr "habilitar el servidor NTP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr "NetBIOS permiten"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
@@ -35203,7 +35159,7 @@ msgstr ""
 "Si esta opción no está activada, se desactivarán todas las opciones de "
 "NetBIOS sobre TCP / IP (incluyendo WINS)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
@@ -35214,11 +35170,11 @@ msgstr ""
 "se le pregunta el nombre del servidor), y h-nodo (servidor de nombres de "
 "consulta, a continuación, de difusión)"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr "ámbito ID"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
@@ -35228,27 +35184,27 @@ msgstr ""
 "sobre TCP / IP. El identificador de ámbito NetBIOS aísla tráfico NetBIOS en "
 "una sola red sólo a los nodos con el mismo alcance NetBIOS ID"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr "WINS habilitar el servidor"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr "Servidor WINS 1"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr "Servidor WINS 2"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr "Habilitar puerto personalizado "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr "puerto de administración"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
@@ -35257,29 +35213,27 @@ msgstr ""
 "máquinas clientes necesitan para seleccionar entre múltiples enlaces OpenVPN."
 ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
-"Introduzca las opciones adicionales para añadir a la configuración del "
-"servidor OpenVPN aquí, separados por punto y coma <br /> Ejemplo:. Empuje \\ "
-"\"ruta 10.0.0.0 255.255.255.0 \""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr "Servidores de OpenVPN"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr "Protocolo / Puerto"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr "Red túnel"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr "Crypto"
 
@@ -37551,7 +37505,7 @@ msgstr "Marcar como puerta de enlace de Down"
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr "<span class=\"help-block\">"
 
@@ -37720,8 +37674,8 @@ msgstr ""
 "solamente)."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr "Proporcionar un nombre de dominio por defecto a los clientes"
 
@@ -37734,13 +37688,13 @@ msgstr ""
 "Introduzca una lista separada por espacios."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr "Proporcionar una lista de servidores DNS a los clientes"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr "Proporcionar un servidor WINS lista de clientes"
 
@@ -37800,40 +37754,40 @@ msgstr "Habilitar DPD"
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr "Desactive esta entrada en la fase 2 sin sacarlo de la lista. "
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr "Habilitar IPCompression"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 #, fuzzy
 msgid "Enable strict interface binding"
 msgstr "Habilitar estricta unión interfaz"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr "Aceptar cargas útiles ID y HASH no cifrados en modo principal IKEv1"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 #, fuzzy
 msgid "Enable MSS clamping on VPN traffic"
 msgstr "Habilitar MSS de sujeción en el tráfico VPN"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 #, fuzzy
 msgid "Enable Unity Plugin"
 msgstr "Habilitar la Unidad Plugin"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr "Habilitar la comprobación estricta lista de certificados revocados"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 #, fuzzy
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 "Iniciar IKEv2 nueva autenticación con un maquillaje antes de la rotura"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr "Habilitar la omisión para la interfaz LAN IP"
 
@@ -37867,18 +37821,18 @@ msgstr "Utilice una clave de TLS"
 msgid "Automatically generate a TLS Key."
 msgstr "generar automáticamente una clave de TLS."
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "generar automáticamente una clave compartida"
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr "Habilitar parámetros criptográficos Negociables"
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -37903,26 +37857,26 @@ msgstr "Desactivar esta anulación"
 msgid "Block this client connection based on its common name."
 msgstr "Bloquear esta conexión de cliente en función de su nombre común."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 #, fuzzy
 msgid "Force all client generated traffic through the tunnel."
 msgstr "Obligar a todo el tráfico de cliente generado por el túnel."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 "Prevenir que este cliente reciba cualquier configuración definida por el "
 "servidor."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "Proporcionar una lista de servidores NTP para clientes"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "Habilitar NetBIOS sobre TCP / IP"
 
@@ -37930,26 +37884,26 @@ msgstr "Habilitar NetBIOS sobre TCP / IP"
 msgid "Disable this server"
 msgstr "Desactivar este servidor"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr "Hacer cumplir regla"
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "Permitir a los clientes en el puente obtener DHCP."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 "Envíe la configuración de compresión seleccionada para clientes que se "
 "conectan."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 "Permitir la comunicación entre los clientes conectados a este servidor"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
@@ -37957,7 +37911,7 @@ msgstr ""
 "Permitir múltiples conexiones simultáneas de clientes utilizando el mismo "
 "nombre común."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
@@ -37965,19 +37919,19 @@ msgstr ""
 "Permitir a los clientes conectados a conservar sus conexiones, si su "
 "dirección IP cambia."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 "Proporcionar una dirección IP del adaptador virtual para los clientes (véase "
 "el túnel de red)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 "Proporcionar una lista de servidores DNS a los clientes. Las direcciones "
 "pueden ser IPv4 o IPv6."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
@@ -37986,7 +37940,7 @@ msgstr ""
 "excepto a través de OpenVPN mientras está conectado, obligando a los "
 "clientes a utilizar sólo los servidores DNS de VPN."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
@@ -37995,6 +37949,6 @@ msgstr ""
 "\"ipconfig / flushdns \" y \\ \"ipconfig / registerdns \" en la iniciación "
 "de conexión."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "Utilizar un puerto de gestión diferente para los clientes."
diff --git a/src/usr/local/share/locale/fi/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/fi/LC_MESSAGES/pfSense.mo
index 53b05c9..8d7c3ab 100644
--- a/src/usr/local/share/locale/fi/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/fi/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/fi/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/fi/LC_MESSAGES/pfSense.po
index 623fa7e..a68827f 100644
--- a/src/usr/local/share/locale/fi/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/fi/LC_MESSAGES/pfSense.po
@@ -3,7 +3,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1880,8 +1880,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2365,7 +2365,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2437,7 +2437,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2841,13 +2841,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5523,7 +5523,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5599,7 +5599,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5771,8 +5771,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6053,8 +6053,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6071,9 +6071,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6283,7 +6283,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7232,13 +7232,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7491,8 +7491,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7502,8 +7502,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7782,10 +7782,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7799,7 +7799,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8009,7 +8009,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8305,7 +8305,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8450,8 +8450,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8878,14 +8878,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9431,10 +9431,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10060,7 +10060,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10140,9 +10140,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10155,8 +10155,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10245,10 +10245,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10256,7 +10256,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10542,8 +10542,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12044,7 +12044,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13735,8 +13735,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13746,9 +13746,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13785,7 +13785,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15942,7 +15942,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16481,7 +16481,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16909,7 +16909,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20165,7 +20165,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20367,14 +20367,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20691,7 +20691,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20789,7 +20789,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21268,7 +21268,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23507,7 +23507,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25182,21 +25182,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25353,7 +25353,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25713,7 +25713,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25767,7 +25767,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25777,7 +25777,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25787,7 +25787,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25797,9 +25797,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25809,7 +25809,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27154,51 +27154,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27217,13 +27217,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27300,7 +27300,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27311,8 +27311,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27328,7 +27328,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27338,12 +27338,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27352,9 +27352,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27568,331 +27568,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27909,185 +27909,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28924,8 +28924,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28934,12 +28934,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28948,22 +28948,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28975,12 +28975,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29597,18 +29597,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30145,9 +30145,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30438,8 +30438,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30456,8 +30456,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30740,43 +30740,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30787,46 +30788,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30835,11 +30836,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30874,10 +30875,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31060,7 +31062,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31101,10 +31103,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31155,9 +31158,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31219,126 +31223,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31350,8 +31380,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31363,12 +31393,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31378,12 +31408,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31404,7 +31434,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31412,7 +31442,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31421,7 +31451,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31450,19 +31480,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31565,32 +31596,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31599,109 +31633,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31797,7 +31835,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31820,58 +31858,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31880,7 +31940,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31889,15 +31949,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31906,11 +31966,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31918,15 +31978,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31934,11 +31994,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31946,171 +32006,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34194,7 +34256,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34349,8 +34411,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34361,13 +34423,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34417,35 +34479,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34479,18 +34541,18 @@ msgstr "Käytä TLS Salausavainta"
 msgid "Automatically generate a TLS Key."
 msgstr "Luo TLS salausavain auttomaattisesti."
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34512,23 +34574,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34536,54 +34598,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr "Poista käytöstä tämä palvelin"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "Käytä toista hallintaporttia clienteille"
diff --git a/src/usr/local/share/locale/fr/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/fr/LC_MESSAGES/pfSense.mo
index 0351fc0..4bd964f 100644
--- a/src/usr/local/share/locale/fr/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/fr/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/fr/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/fr/LC_MESSAGES/pfSense.po
index 005414f..2555405 100644
--- a/src/usr/local/share/locale/fr/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/fr/LC_MESSAGES/pfSense.po
@@ -11,7 +11,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1990,8 +1990,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2475,7 +2475,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr "Mise en réseau"
 
@@ -2547,7 +2547,7 @@ msgstr "Mon adresse IP"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2951,13 +2951,13 @@ msgstr "Serveur : Non"
 msgid "CA: %s"
 msgstr "CA : %s"
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr "Révoqué"
 
@@ -5675,7 +5675,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5751,7 +5751,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5923,8 +5923,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6205,8 +6205,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6223,9 +6223,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6435,7 +6435,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7433,13 +7433,13 @@ msgstr "Confirmer"
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7692,8 +7692,8 @@ msgstr "Type de lien"
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7703,8 +7703,8 @@ msgstr "Type de lien"
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr "Actions"
@@ -7985,10 +7985,10 @@ msgstr "Syslog"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -8002,7 +8002,7 @@ msgstr "Syslog"
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8214,7 +8214,7 @@ msgstr "Effacer la commande"
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr "Effacer"
@@ -8528,7 +8528,7 @@ msgstr "Nom d'hôte"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8677,8 +8677,8 @@ msgstr "Expression du filtre"
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "Filtrer"
 
@@ -9109,14 +9109,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9662,10 +9662,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10291,7 +10291,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10371,9 +10371,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10386,8 +10386,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10476,10 +10476,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10487,7 +10487,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10773,8 +10773,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12275,7 +12275,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13966,8 +13966,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13977,9 +13977,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -14016,7 +14016,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -16173,7 +16173,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16712,7 +16712,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -17140,7 +17140,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20396,7 +20396,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20598,14 +20598,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20922,7 +20922,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -21020,7 +21020,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21499,7 +21499,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23738,7 +23738,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25413,21 +25413,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25584,7 +25584,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25944,7 +25944,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25998,7 +25998,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -26008,7 +26008,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -26018,7 +26018,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -26028,9 +26028,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -26040,7 +26040,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27385,51 +27385,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27448,13 +27448,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27531,7 +27531,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27542,8 +27542,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27559,7 +27559,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27569,12 +27569,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27583,9 +27583,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27799,331 +27799,331 @@ msgstr "Créer une autorité de certification interne"
 msgid "Create an intermediate Certificate Authority"
 msgstr "Créer une autorité de certification intermédiaire"
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -28140,185 +28140,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -29155,8 +29155,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -29165,12 +29165,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -29179,22 +29179,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29206,12 +29206,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29828,18 +29828,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30376,9 +30376,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30669,8 +30669,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30687,8 +30687,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30971,43 +30971,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -31018,46 +31019,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -31066,11 +31067,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -31105,10 +31106,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31291,7 +31293,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31332,10 +31334,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31386,9 +31389,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31450,126 +31454,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31581,8 +31611,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31594,12 +31624,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31609,12 +31639,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31635,7 +31665,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31643,7 +31673,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31652,7 +31682,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31681,19 +31711,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31796,32 +31827,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31830,109 +31864,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -32028,7 +32066,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -32051,58 +32089,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -32111,7 +32171,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -32120,15 +32180,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -32137,11 +32197,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -32149,15 +32209,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32165,11 +32225,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32177,171 +32237,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34425,7 +34487,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34584,8 +34646,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34596,13 +34658,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr "Fournisser une liste de serveur WINS pour les clients"
 
@@ -34667,41 +34729,41 @@ msgstr "Activer DPD"
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr "Désactivez cette la phase 2 sans la supprimer de la liste."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr "Activer la compression IP"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr "Activer le nouage d'interface stricte"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 #, fuzzy
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 "Accepter les charges utiles d'ID et de HASH non cryptées en mode principal "
 "IKEv1"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 #, fuzzy
 msgid "Enable MSS clamping on VPN traffic"
 msgstr "Activer le verrouillage MSS sur le trafic VPN"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr "Activer le greffon Unity"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 "Activer la vérification stricte de la liste de révocation des certificats"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 #, fuzzy
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr "Lancer la réauthentification IKEv2 avec un make-before-break"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr "Activer le contournement pour l'IP de l'interface LAN"
 
@@ -34736,18 +34798,18 @@ msgstr "Utiliser une clé TLS"
 msgid "Automatically generate a TLS Key."
 msgstr "Générer automatiquement une clé TLS."
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "Générer automatiquement une clé partagée."
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34770,25 +34832,25 @@ msgstr "Désactiver ce contournement "
 msgid "Block this client connection based on its common name."
 msgstr "Bloquez cette connexion client en fonction de son nom commun."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr "Forcer tout le trafic généré par le client à travers le tunnel."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 #, fuzzy
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 "Empêchez ce client à recevoir des paramètres client définis par le serveur."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "Communiquer une liste de serveurs NTP aux clients"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "Activer NetBIOS sur TCP/IP"
 
@@ -34796,25 +34858,25 @@ msgstr "Activer NetBIOS sur TCP/IP"
 msgid "Disable this server"
 msgstr "Désactiver ce serveur"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr "Appliquer la correspondance"
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "Autoriser les clients du pont à obtenir une adresse IP dynamique."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 "Envoyez les paramètres de compression sélectionnés pour les clients qui se "
 "connectent."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr "Autoriser la communication entre les clients connectés et ce serveur"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
@@ -34822,7 +34884,7 @@ msgstr ""
 "Autoriser plusieurs connexions simultanées des clients qui utilise le même "
 "nom commun."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
@@ -34830,20 +34892,20 @@ msgstr ""
 "Autoriser les clients connectés à conserver leurs connexions si leur adresse "
 "IP change."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 #, fuzzy
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 "Fournir une adresse IP de l'interface virtuelle aux clients (voir Réseau de "
 "tunnels)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 "Fournisser une liste de serveur DNS pour les clients. Les adresses peuvent "
 "être en IPv4 ou IPv6."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
@@ -34852,7 +34914,7 @@ msgstr ""
 "OpenVPN pendant qu'ils sont connectés, forçant les clients à n'utiliser que "
 "les serveurs DNS VPN."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
@@ -34860,6 +34922,6 @@ msgstr ""
 "Exécuter \"net stop dnscache\", \"net start dnscache\", \"ipconfig /"
 "flushdns\" et\"ipconfig /registerdns\" pour initialiser la connexion."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "Utiliser un port de management différent pour les clients."
diff --git a/src/usr/local/share/locale/he/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/he/LC_MESSAGES/pfSense.mo
index c8a597c..34ed7e4 100644
--- a/src/usr/local/share/locale/he/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/he/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/he/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/he/LC_MESSAGES/pfSense.po
index 7c9463d..5d72bb1 100644
--- a/src/usr/local/share/locale/he/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/he/LC_MESSAGES/pfSense.po
@@ -3,7 +3,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1881,8 +1881,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2366,7 +2366,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2438,7 +2438,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2842,13 +2842,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5524,7 +5524,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5600,7 +5600,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5772,8 +5772,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6054,8 +6054,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6072,9 +6072,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6284,7 +6284,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7233,13 +7233,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7492,8 +7492,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7503,8 +7503,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7783,10 +7783,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7800,7 +7800,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8010,7 +8010,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8306,7 +8306,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8451,8 +8451,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8879,14 +8879,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9432,10 +9432,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10061,7 +10061,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10141,9 +10141,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10156,8 +10156,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10246,10 +10246,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10257,7 +10257,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10543,8 +10543,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12045,7 +12045,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13736,8 +13736,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13747,9 +13747,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13786,7 +13786,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15943,7 +15943,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16482,7 +16482,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16910,7 +16910,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20166,7 +20166,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20368,14 +20368,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20692,7 +20692,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20790,7 +20790,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21269,7 +21269,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23508,7 +23508,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25183,21 +25183,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25354,7 +25354,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25714,7 +25714,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25768,7 +25768,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25778,7 +25778,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25788,7 +25788,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25798,9 +25798,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25810,7 +25810,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27155,51 +27155,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27218,13 +27218,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27301,7 +27301,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27312,8 +27312,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27329,7 +27329,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27339,12 +27339,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27353,9 +27353,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27569,331 +27569,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27910,185 +27910,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28925,8 +28925,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28935,12 +28935,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28949,22 +28949,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28976,12 +28976,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29598,18 +29598,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30146,9 +30146,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30439,8 +30439,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30457,8 +30457,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30741,43 +30741,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30788,46 +30789,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30836,11 +30837,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30875,10 +30876,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31061,7 +31063,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31102,10 +31104,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31156,9 +31159,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31220,126 +31224,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31351,8 +31381,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31364,12 +31394,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31379,12 +31409,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31405,7 +31435,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31413,7 +31443,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31422,7 +31452,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31451,19 +31481,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31566,32 +31597,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31600,109 +31634,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31798,7 +31836,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31821,58 +31859,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31881,7 +31941,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31890,15 +31950,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31907,11 +31967,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31919,15 +31979,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31935,11 +31995,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31947,171 +32007,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34195,7 +34257,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34350,8 +34412,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34362,13 +34424,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34418,35 +34480,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34480,18 +34542,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34513,23 +34575,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34537,54 +34599,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/it/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/it/LC_MESSAGES/pfSense.mo
index 2999f65..0a36468 100644
--- a/src/usr/local/share/locale/it/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/it/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/it/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/it/LC_MESSAGES/pfSense.po
index c3b5547..e809fa1 100644
--- a/src/usr/local/share/locale/it/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/it/LC_MESSAGES/pfSense.po
@@ -1,16 +1,17 @@
 # Andrea Cuccuru <cuccuru.andrea@gmail.com>, 2017. #zanata
 # Filippo Santinello <filippo.santinello@gmail.com>, 2017. #zanata
 # Luca <luca.moncelli@multimediaitalia.eu>, 2017. #zanata
+# Luca Morisi <luca.morisi@tiscalinet.it>, 2017. #zanata
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-09 04:40-0500\n"
-"Last-Translator: Filippo Santinello <filippo.santinello@gmail.com>\n"
+"PO-Revision-Date: 2017-02-09 01:04-0500\n"
+"Last-Translator: Luca Morisi <luca.morisi@tiscalinet.it>\n"
 "Language-Team: Italian\n"
 "Language: it\n"
 "X-Generator: Zanata 3.9.6\n"
@@ -1982,8 +1983,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -1996,7 +1997,7 @@ msgstr ""
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:34
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:135
 msgid "Name"
-msgstr ""
+msgstr "Nome"
 
 #: src/etc/inc/gmirror.inc:74 src/usr/local/www/diag_arp.php:336
 #: src/usr/local/www/diag_gmirror.php:222 src/usr/local/www/easyrule.php:122
@@ -2049,7 +2050,7 @@ msgstr ""
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:223
 #: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:64
 msgid "Status"
-msgstr ""
+msgstr "Stato"
 
 #: src/etc/inc/gmirror.inc:75 src/usr/local/www/diag_gmirror.php:223
 msgid "Component"
@@ -2123,11 +2124,11 @@ msgstr ""
 
 #: src/etc/inc/interfaces.inc:172
 msgid "Configuring loopback interface..."
-msgstr ""
+msgstr "Configuro interfaccia di loopback..."
 
 #: src/etc/inc/interfaces.inc:185
 msgid "Configuring VLAN interfaces..."
-msgstr ""
+msgstr "Configuro interfacce VLAN..."
 
 #: src/etc/inc/interfaces.inc:209
 msgid "VLAN: called with wrong options. Problems with config!"
@@ -2180,7 +2181,7 @@ msgstr ""
 
 #: src/etc/inc/interfaces.inc:700
 msgid "Configuring LAGG interfaces..."
-msgstr ""
+msgstr "Configuro interfacce LAGG..."
 
 #: src/etc/inc/interfaces.inc:851
 msgid "Could not bring greif up -- variable not defined."
@@ -2200,13 +2201,13 @@ msgstr ""
 #: src/etc/inc/interfaces.inc:1117 src/etc/inc/interfaces.inc:1135
 #, php-format
 msgid "Configuring %s interface..."
-msgstr ""
+msgstr "Configuro interfaccia %s..."
 
 #: src/etc/inc/interfaces.inc:1067 src/etc/inc/interfaces.inc:1096
 #: src/etc/inc/interfaces.inc:1120 src/etc/inc/interfaces.inc:1138
 #, php-format
 msgid "Configuring %s"
-msgstr ""
+msgstr "Configuro %s"
 
 #: src/etc/inc/interfaces.inc:1221
 #, php-format
@@ -2263,16 +2264,16 @@ msgstr ""
 
 #: src/etc/inc/interfaces.inc:2119
 msgid "Configuring CARP settings..."
-msgstr ""
+msgstr "Configuro impostazioni CARP..."
 
 #: src/etc/inc/interfaces.inc:2160
 msgid "waiting for pfsync..."
-msgstr ""
+msgstr "In attesa di pfsyncv..."
 
 #: src/etc/inc/interfaces.inc:2166
 #, php-format
 msgid "pfsync done in %s seconds."
-msgstr ""
+msgstr "pfsync eseguito in %s secondi."
 
 #: src/etc/inc/interfaces.inc:2167
 msgid "Configuring CARP settings finalize..."
@@ -2288,7 +2289,7 @@ msgstr ""
 #: src/etc/inc/interfaces.inc:2450
 #, php-format
 msgid "Interface %s changed to hostap mode"
-msgstr ""
+msgstr "L'interfaccia %s è cambiata in modalità hostap"
 
 #: src/etc/inc/interfaces.inc:2454
 #, php-format
@@ -2332,7 +2333,7 @@ msgstr ""
 
 #: src/etc/inc/interfaces.inc:3291
 msgid "Generating new MAC address."
-msgstr ""
+msgstr "Genero nuovo indirizzo MAC."
 
 #: src/etc/inc/interfaces.inc:3297
 #, php-format
@@ -2340,6 +2341,8 @@ msgid ""
 "The INVALID MAC address (ff:ff:ff:ff:ff:ff) on interface %1$s has been "
 "automatically replaced with %2$s"
 msgstr ""
+"L'indirizzo MAC INVALIDO (ff:ff:ff:ff:ff:ff) dell'interfaccia %1$s è stato "
+"sostituito automaticamente con %2$s"
 
 #: src/etc/inc/interfaces.inc:3362
 #, php-format
@@ -2467,7 +2470,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2539,7 +2542,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2724,7 +2727,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:445
 #: src/usr/local/www/vpn_ipsec_phase2.php:543
 msgid "None"
-msgstr ""
+msgstr "Nessuno"
 
 #: src/etc/inc/ipsec.inc:612
 msgid ""
@@ -2740,7 +2743,7 @@ msgstr ""
 #: src/etc/inc/meta.inc:97
 #, php-format
 msgid "unable to read %s"
-msgstr ""
+msgstr "Impossibile leggere %s"
 
 #: src/etc/inc/meta.inc:134
 #, php-format
@@ -2943,13 +2946,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5625,7 +5628,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5701,7 +5704,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5873,8 +5876,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6155,8 +6158,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6173,9 +6176,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6385,7 +6388,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7334,13 +7337,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7593,8 +7596,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7604,8 +7607,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7884,10 +7887,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7901,7 +7904,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8111,7 +8114,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8407,7 +8410,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8552,8 +8555,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8980,14 +8983,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9533,10 +9536,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10162,7 +10165,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10242,9 +10245,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10257,8 +10260,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10347,10 +10350,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10358,7 +10361,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10644,8 +10647,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12146,7 +12149,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13837,8 +13840,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13848,9 +13851,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13887,7 +13890,7 @@ msgstr "Manager Cert."
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr "Manager Utenti"
@@ -16113,7 +16116,7 @@ msgstr "Interfacce che partecipano al bridge."
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr "Configurazione avanzata"
@@ -16656,7 +16659,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -17084,7 +17087,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20340,7 +20343,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20542,14 +20545,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20866,7 +20869,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20964,7 +20967,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21443,7 +21446,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23682,7 +23685,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25357,21 +25360,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25528,7 +25531,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25888,7 +25891,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25942,7 +25945,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25952,7 +25955,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25962,7 +25965,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25972,9 +25975,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25984,7 +25987,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27329,51 +27332,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27392,13 +27395,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27475,7 +27478,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27486,8 +27489,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27503,7 +27506,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27513,12 +27516,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27527,9 +27530,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27743,331 +27746,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -28084,185 +28087,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -29099,8 +29102,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -29109,12 +29112,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -29123,22 +29126,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29150,12 +29153,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29772,18 +29775,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30320,9 +30323,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30613,8 +30616,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30631,8 +30634,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30915,43 +30918,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30962,46 +30966,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -31010,11 +31014,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -31049,10 +31053,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31235,7 +31240,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31276,10 +31281,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31330,9 +31336,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31394,126 +31401,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31525,8 +31558,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31538,12 +31571,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31553,12 +31586,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31579,7 +31612,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31587,7 +31620,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31596,7 +31629,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31625,19 +31658,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31740,32 +31774,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31774,109 +31811,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31972,7 +32013,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31995,58 +32036,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
+msgid ""
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -32055,7 +32118,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -32064,15 +32127,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -32081,11 +32144,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -32093,15 +32156,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32109,11 +32172,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32121,171 +32184,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34384,7 +34449,7 @@ msgstr "Segna il gateway come spento"
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr "<span class=\"help-block\">"
 
@@ -34541,8 +34606,8 @@ msgstr ""
 "Permetti ai clients di salvare le password Xauth (solo client VPN Cisco)"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr "Fornisci un nome di dominio predefinito ai clients"
 
@@ -34555,13 +34620,13 @@ msgstr ""
 "separata con lo spazio."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr "Fornisci una lista di server DNS ai clients"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr "Fornisci una lista di server WINS ai clients"
 
@@ -34615,35 +34680,35 @@ msgstr "Abilita DPD"
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr "Disabilita questa voce della fase2 senza rimuoverla dalla lista."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr "Abilita IPCompressione"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34677,18 +34742,18 @@ msgstr "Usa una chiave TLS"
 msgid "Automatically generate a TLS Key."
 msgstr "Genera automaticamente una chiave TLS."
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "Genera automaticamente una chiave condivisa"
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr "Abilita i Parametri di Crittogrifazione negoziabili"
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34710,23 +34775,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr "Forza tutti i client a generare il traffico attraverso il tunnel."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "Fornisci ai client una lista di server NTP"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "Abilita il NetBIOS su TCP/IP"
 
@@ -34734,23 +34799,23 @@ msgstr "Abilita il NetBIOS su TCP/IP"
 msgid "Disable this server"
 msgstr "Disabilita questo server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr "Forza la coincidenza"
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "Permetti ai clients nel bridge di ottenere il DHCP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr "Permetti la comunicazione tra i clients connessi a questo server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
@@ -34758,7 +34823,7 @@ msgstr ""
 "Permetti connessioni multiple simultanee da clients che usano lo stesso "
 "Common Name."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
@@ -34766,28 +34831,28 @@ msgstr ""
 "Permetti ai clients connessi di conservare la connessione se il loro IP "
 "cambia."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 "Immettere una lista di server DNS per i clients. Gli indirizzi possono "
 "essere sia IPv4 che IPv6."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "Usa una differente porta di management per i clients"
diff --git a/src/usr/local/share/locale/ja/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/ja/LC_MESSAGES/pfSense.mo
index d538644..75928f0 100644
--- a/src/usr/local/share/locale/ja/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/ja/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/ja/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/ja/LC_MESSAGES/pfSense.po
index 97fbbae..815c965 100644
--- a/src/usr/local/share/locale/ja/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/ja/LC_MESSAGES/pfSense.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1886,8 +1886,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2371,7 +2371,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr "ネットワーキング"
 
@@ -2443,7 +2443,7 @@ msgstr "私のIPアドレス"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2847,13 +2847,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "使用中"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5531,7 +5531,7 @@ msgstr "NTPクロック同期"
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr "Captive Portal"
 
@@ -5607,7 +5607,7 @@ msgstr "停止"
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr "使用禁止"
@@ -5779,8 +5779,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr "UPnPサービスを開始... "
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr "フィールドが '%s'は無効な文字が含まれています。"
@@ -6061,8 +6061,8 @@ msgstr "このキューの((オプション))を選択します"
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6079,9 +6079,9 @@ msgstr "このキューの((オプション))を選択します"
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6291,7 +6291,7 @@ msgstr "遅延は整数でなければなりません。"
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "削除"
@@ -7243,13 +7243,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7502,8 +7502,8 @@ msgstr "リンク型"
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7513,8 +7513,8 @@ msgstr "リンク型"
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr "アクション"
@@ -7793,10 +7793,10 @@ msgstr "Syslogの"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7810,7 +7810,7 @@ msgstr "Syslogの"
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8020,7 +8020,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr "クリアー"
@@ -8316,7 +8316,7 @@ msgstr "ホスト名"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8461,8 +8461,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "フィルター"
 
@@ -8889,14 +8889,14 @@ msgid "Packet Capture"
 msgstr "パケットキャプチャ"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9442,10 +9442,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10071,7 +10071,7 @@ msgstr "エイリアスリストが変更されました。"
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10151,9 +10151,9 @@ msgstr "エイリアスを削除"
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10166,8 +10166,8 @@ msgstr "エイリアスを削除"
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "加える"
 
@@ -10256,10 +10256,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10267,7 +10267,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10553,8 +10553,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12056,7 +12056,7 @@ msgstr "アンチロックアウトルール"
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13751,8 +13751,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "値"
 
@@ -13762,9 +13762,9 @@ msgstr "値"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr "高度な"
@@ -13801,7 +13801,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr "ユーザーマネージャ"
@@ -15966,7 +15966,7 @@ msgstr "ブリッジに参加するインターフェイス。"
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16515,7 +16515,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16946,7 +16946,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr "圧縮"
 
@@ -20216,7 +20216,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr "WINSサーバー"
 
@@ -20418,14 +20418,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20742,7 +20742,7 @@ msgstr "WINSサーバー"
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr "DNSサーバー"
 
@@ -20840,7 +20840,7 @@ msgstr "NTPサーバー"
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr "NTPサーバー"
 
@@ -21324,7 +21324,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23571,7 +23571,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25246,21 +25246,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25417,7 +25417,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr "コモンネーム"
 
@@ -25779,7 +25779,7 @@ msgstr "webConfiguratorの言語を選択"
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr "webConfigurator"
 
@@ -25833,7 +25833,7 @@ msgstr "一つの瞬間が··· 20秒で%sにリダイレクトする。"
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr "管理者のアクセス"
 
@@ -25843,7 +25843,7 @@ msgstr "管理者のアクセス"
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25853,7 +25853,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr "雑多"
@@ -25863,9 +25863,9 @@ msgstr "雑多"
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr "システムのチューニング可能パラメータ"
 
@@ -25875,7 +25875,7 @@ msgstr "システムのチューニング可能パラメータ"
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr "お知らせメール"
 
@@ -27228,51 +27228,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr "このページのオプションは、上級ユーザーのみが使用するためのものです。"
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr "調整可能な名前"
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27291,13 +27291,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27374,7 +27374,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr "認証サーバー"
@@ -27385,8 +27385,8 @@ msgstr "認証サーバー"
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27402,7 +27402,7 @@ msgstr "ユーザー"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr "グループ"
@@ -27412,12 +27412,12 @@ msgid "Server Name"
 msgstr "サーバー名"
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27426,9 +27426,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27642,331 +27642,331 @@ msgstr "内部認証局を作成する"
 msgid "Create an intermediate Certificate Authority"
 msgstr "中間認証局を作成する"
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr "証明書データ"
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr "この証明書は有効であると表示されません。"
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr "暗号化された秘密鍵は、まだサポートされていません。"
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr "キーの長さ"
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr "一生"
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr "識別名の国コード"
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr "識別名の都道府県"
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr "識別名市"
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr "識別名組織"
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr "識別名のメールアドレス"
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr "識別名共通名"
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr "認証局の署名"
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr "有効なキーの長さを選択してください。"
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr "有効なダイジェストアルゴリズムを選択してください。"
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr "証明書マネージャ"
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr "CAは"
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr "証明書"
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr "証明書失効"
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr "内部"
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr "発行者"
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr "識別名"
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr "自己署名"
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr "外部"
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr "から有効"
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr "まで有効"
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr "既存の認証局"
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr "ここで、X.509 PEM形式の証明書を貼り付けます。"
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr "次の証明書のシリアル"
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr "このCAを使用して作成される証明書の「次のシリアル番号として使用される進数を入力してください」 。"
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr "内部認証局"
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27983,185 +27983,185 @@ msgstr "内部証明書を作成します。"
 msgid "Create a Certificate Signing Request"
 msgstr "証明書署名要求を作成します。"
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr "既存の証明書を選択してください"
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr "重要なデータ"
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr "認証局"
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr "証明書の種類"
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr "既存の証明書の選択"
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr "最終的な証明書データ"
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr "証明書の弾性率は、署名要求弾性率と一致しない。"
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr "証明書のインポート"
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr "ここで、X.509 PEM形式の秘密鍵を貼り付けます。"
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr "内部認証"
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr "」を生成する証明書の種類。使用方法に制限を配置するために使用される「生成された証明書の。"
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr "代替名"
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr "外部署名要求"
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr "既存の証明書を選択する"
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr "署名要求データ"
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr "外部 - 署名申請中"
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28998,8 +28998,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -29008,12 +29008,12 @@ msgid "Assigned Privileges"
 msgstr "割り当てられた権限"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -29022,22 +29022,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29049,12 +29049,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr "説明については、上記のリストから権限を選択"
 
@@ -29671,18 +29671,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr "IPsecの事前共有キー"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30220,9 +30220,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr "DNSのデフォルトドメイン"
 
@@ -30513,8 +30513,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30531,8 +30531,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30815,43 +30815,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30862,16 +30863,16 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr "最大MSS"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
@@ -30879,31 +30880,31 @@ msgstr ""
 "IPsec VPNのリンク上でPMTUD 「VPN上を流れるTCP上でクランプするMSSを有効にします。これはの問題を克服するのに役立ちます」 "
 "。空白の場合、デフォルト値は1400バイトです。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30912,11 +30913,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30951,10 +30952,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31137,7 +31139,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr "共有鍵"
 
@@ -31178,10 +31180,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31232,9 +31235,10 @@ msgid "Proxy host or address"
 msgstr "プロキシのホストまたはアドレス"
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31296,126 +31300,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr "クライアント証明書"
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr "ハードウェア暗号"
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr "トンネル設定"
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr "IPv4のトンネルネットワーク"
 
@@ -31427,8 +31457,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr "IPv6トンネルネットワーク"
 
@@ -31440,12 +31470,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31455,12 +31485,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31481,7 +31511,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31489,7 +31519,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr "トポロジー"
 
@@ -31498,7 +31528,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr "サービスタイプ"
 
@@ -31527,19 +31557,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31642,32 +31673,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr "IPv4のローカルネットワーク/ S"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31676,109 +31710,113 @@ msgid "IPv6 Local Network/s"
 msgstr "IPv6ローカルネットワーク/ S"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr "IPv4のリモートネットワーク/ S"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr "IPv6リモートネットワーク/ S"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr "ゲートウェイにリダイレクト"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr "クライアント設定"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr "サーバー定義"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr "NetBIOSのオプション"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr "ノード種別"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31874,7 +31912,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31897,41 +31935,63 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
@@ -31940,17 +32000,17 @@ msgstr ""
 "この深さ」の証明書ベースのクライアントがログインすると、以下の証明書を受け入れない」 。サーバと同じCAから生成された中間CA "
 "」で作られた証明書を否定するのに便利です。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr "クライアント証明書と、ログイン時に指定されたユーザー名」ユーザを認証するときの一般的な名前との間の一致を強制する」 。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31959,7 +32019,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31968,15 +32028,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr "ブリッジDHCP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr "ブリッジインターフェース"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31985,11 +32045,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr "サーバー·ブリッジのDHCPスタート"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31997,15 +32057,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr "サーバー·ブリッジのDHCP終了"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32013,11 +32073,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32025,108 +32085,109 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr "同時接続"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr "クライアント間通信"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr "動的IP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr "アドレスプール"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
@@ -32135,63 +32196,64 @@ msgstr ""
 "「可能なオプション：B-ノード（ブロードキャスト） 、 Pノード（ポイント·ツー·ポイントの名前照会」 、 WINSサーバーに） 、 "
 "Mノード（ネームサーバに照会し、ブロードキャスト） 、およびhノード」 （クエリーネームサーバその後ブロードキャスト）"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr "スコープID"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr "プロトコル/ポート"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr "トンネルネットワーク"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34275,7 +34337,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34430,8 +34492,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr "クライアントがXauthのパスワードを保存することができます（Cisco VPNクライアントのみ） 。"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr "クライアントにデフォルトのドメイン名を提供"
 
@@ -34442,13 +34504,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr "クライアントに、DNSサーバリストを提供"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr "クライアントに、WINSサーバーの一覧を提供"
 
@@ -34498,35 +34560,35 @@ msgstr "DPDを有効にします"
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr "MSSは、VPNトラフィックにクランプ可能にする"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34560,18 +34622,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "自動的に共有鍵を生成する"
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34593,23 +34655,23 @@ msgstr "このオーバーライドを無効にする"
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34617,54 +34679,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr "このサーバーを使用不可に"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "橋の上のクライアントがDHCPを取得することができます。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr "このサーバーに接続しているクライアント間の通信を可能に"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/nb/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/nb/LC_MESSAGES/pfSense.mo
index a28deb8..1d0acb5 100644
--- a/src/usr/local/share/locale/nb/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/nb/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/nb/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/nb/LC_MESSAGES/pfSense.po
index 6ced7b1..096b73e 100644
--- a/src/usr/local/share/locale/nb/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/nb/LC_MESSAGES/pfSense.po
@@ -4,7 +4,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1903,8 +1903,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2388,7 +2388,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2460,7 +2460,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2864,13 +2864,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5546,7 +5546,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5622,7 +5622,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5794,8 +5794,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6076,8 +6076,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6094,9 +6094,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6306,7 +6306,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7255,13 +7255,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7514,8 +7514,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7525,8 +7525,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7805,10 +7805,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7822,7 +7822,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8032,7 +8032,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8328,7 +8328,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8473,8 +8473,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8901,14 +8901,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9454,10 +9454,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10083,7 +10083,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10163,9 +10163,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10178,8 +10178,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10268,10 +10268,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10279,7 +10279,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10565,8 +10565,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12067,7 +12067,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13758,8 +13758,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13769,9 +13769,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13808,7 +13808,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15965,7 +15965,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16504,7 +16504,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16932,7 +16932,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20188,7 +20188,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20390,14 +20390,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20714,7 +20714,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20812,7 +20812,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21291,7 +21291,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23530,7 +23530,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25205,21 +25205,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25376,7 +25376,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25736,7 +25736,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25790,7 +25790,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25800,7 +25800,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25810,7 +25810,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25820,9 +25820,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25832,7 +25832,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27177,51 +27177,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27240,13 +27240,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27323,7 +27323,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27334,8 +27334,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27351,7 +27351,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27361,12 +27361,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27375,9 +27375,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27591,331 +27591,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27932,185 +27932,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28947,8 +28947,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28957,12 +28957,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28971,22 +28971,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28998,12 +28998,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29620,18 +29620,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30168,9 +30168,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30461,8 +30461,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30479,8 +30479,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30763,43 +30763,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30810,46 +30811,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30858,11 +30859,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30897,10 +30898,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31083,7 +31085,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31124,10 +31126,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31178,9 +31181,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31242,126 +31246,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31373,8 +31403,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31386,12 +31416,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31401,12 +31431,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31427,7 +31457,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31435,7 +31465,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31444,7 +31474,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31473,19 +31503,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31588,32 +31619,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31622,109 +31656,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31820,7 +31858,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31843,58 +31881,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31903,7 +31963,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31912,15 +31972,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31929,11 +31989,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31941,15 +32001,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31957,11 +32017,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31969,171 +32029,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34217,7 +34279,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34372,8 +34434,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34384,13 +34446,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34440,35 +34502,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34502,18 +34564,18 @@ msgstr "Bruk en TLS Nøkkel"
 msgid "Automatically generate a TLS Key."
 msgstr "Auto generere en TLS Nøkkel"
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "Auto generere en delt nøkkel"
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr "Aktiver Forhandlingsbar Kryptografiske parametere"
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34537,25 +34599,25 @@ msgstr "Deaktiver denne overstyringen"
 msgid "Block this client connection based on its common name."
 msgstr "Blokkere denne klientens tilkobling basert på sitt nettverksnavn."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr "Tving alt av klient generert trafikk gjennom tunnelen."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 "Forhindre at denne klienten i å motta alle server-definerte "
 "klientinnstillinger ."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "Angi en NTP server liste til klienter"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "Aktiver NetBIOS over TCP / IP"
 
@@ -34563,24 +34625,24 @@ msgstr "Aktiver NetBIOS over TCP / IP"
 msgid "Disable this server"
 msgstr "Deaktiver denne serveren"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "Tillater at klienter i broen til å få DHCP."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr "Push den valgte Komprimering innstillingen til på koblete klienter"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 "Tillate kommunikasjon mellom klienter som er koblet til denne serveren"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
@@ -34588,7 +34650,7 @@ msgstr ""
 "Tillat flere samtidige tilkoplinger fra klienter som bruker samme "
 "nettverksnavn."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
@@ -34596,18 +34658,18 @@ msgstr ""
 "Tillat tilkoblede klienter til å beholde sine forbindelser dersom deres IP-"
 "adressen endres."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 "Gi det virtuelle adapteret en IP-adresse til klienter (se Tunnel Nettverk)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 "Oppgi en liste med DNS-Servere til klientene. Adressene kan både være IPv4 "
 "eller IPv6."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
@@ -34616,7 +34678,7 @@ msgstr ""
 "tilkoblet med VPN, Dette tvinger klientene til å  bare bruke di DNS-Serverne "
 "som er oppgitt av OpenVPN Serveren den er koblet til."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
@@ -34624,6 +34686,6 @@ msgstr ""
 "Kjør \"net stop dnscache\", \"net start dnscache\", \"ipconfig / flushdns\" "
 "og \"ipconfig / registerdns\" ved tilkobling start"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "Bruk en annen port for klient administrasjon"
diff --git a/src/usr/local/share/locale/nl/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/nl/LC_MESSAGES/pfSense.mo
index f7a5690..886d72d 100644
--- a/src/usr/local/share/locale/nl/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/nl/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/nl/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/nl/LC_MESSAGES/pfSense.po
index 4704a46..b502844 100644
--- a/src/usr/local/share/locale/nl/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/nl/LC_MESSAGES/pfSense.po
@@ -5,7 +5,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1930,8 +1930,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2415,7 +2415,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2487,7 +2487,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2891,13 +2891,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5573,7 +5573,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5649,7 +5649,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5821,8 +5821,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6103,8 +6103,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6121,9 +6121,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6333,7 +6333,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7282,13 +7282,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7541,8 +7541,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7552,8 +7552,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7832,10 +7832,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7849,7 +7849,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8059,7 +8059,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8355,7 +8355,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8500,8 +8500,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8928,14 +8928,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9481,10 +9481,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10110,7 +10110,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10190,9 +10190,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10205,8 +10205,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10295,10 +10295,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10306,7 +10306,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10592,8 +10592,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12094,7 +12094,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13785,8 +13785,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13796,9 +13796,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13835,7 +13835,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15992,7 +15992,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16531,7 +16531,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16959,7 +16959,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20215,7 +20215,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20417,14 +20417,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20741,7 +20741,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20839,7 +20839,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21318,7 +21318,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23557,7 +23557,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25232,21 +25232,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25403,7 +25403,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25763,7 +25763,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25817,7 +25817,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25827,7 +25827,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25837,7 +25837,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25847,9 +25847,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25859,7 +25859,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27204,51 +27204,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27267,13 +27267,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27350,7 +27350,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27361,8 +27361,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27378,7 +27378,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27388,12 +27388,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27402,9 +27402,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27618,331 +27618,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27959,185 +27959,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28974,8 +28974,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28984,12 +28984,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28998,22 +28998,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29025,12 +29025,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29647,18 +29647,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30195,9 +30195,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30488,8 +30488,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30506,8 +30506,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30790,43 +30790,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30837,46 +30838,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30885,11 +30886,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30924,10 +30925,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31110,7 +31112,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31151,10 +31153,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31205,9 +31208,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31269,126 +31273,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31400,8 +31430,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31413,12 +31443,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31428,12 +31458,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31454,7 +31484,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31462,7 +31492,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31471,7 +31501,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31500,19 +31530,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31615,32 +31646,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31649,109 +31683,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31847,7 +31885,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31870,58 +31908,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31930,7 +31990,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31939,15 +31999,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31956,11 +32016,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31968,15 +32028,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31984,11 +32044,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31996,171 +32056,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34244,7 +34306,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34399,8 +34461,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34411,13 +34473,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34467,35 +34529,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34529,18 +34591,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34562,23 +34624,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34586,54 +34648,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/pl/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/pl/LC_MESSAGES/pfSense.mo
index cf30528..477c838 100644
--- a/src/usr/local/share/locale/pl/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/pl/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/pl/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/pl/LC_MESSAGES/pfSense.po
index 5c45d0c..3cd94ac 100644
--- a/src/usr/local/share/locale/pl/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/pl/LC_MESSAGES/pfSense.po
@@ -3,11 +3,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-01 04:02-0500\n"
+"PO-Revision-Date: 2017-02-09 08:54-0500\n"
 "Last-Translator: Robert <rootolf@gmail.com>\n"
 "Language-Team: Polish\n"
 "Language: pl\n"
@@ -806,7 +806,7 @@ msgstr ""
 
 #: src/etc/inc/dyndns.class:979
 msgid "Invalid Username."
-msgstr ""
+msgstr "Błędna nazwa użytkownika"
 
 #: src/etc/inc/dyndns.class:982
 msgid "Invalid Password."
@@ -981,7 +981,7 @@ msgstr ""
 #: src/etc/inc/dyndns.class:1205 src/etc/inc/dyndns.class:1225
 #: src/etc/inc/dyndns.class:1252
 msgid "Invalid username or password."
-msgstr ""
+msgstr "Zła nazwa użytkownika lub hasło."
 
 #: src/etc/inc/dyndns.class:1210 src/etc/inc/dyndns.class:1230
 #: src/etc/inc/dyndns.class:1257 src/etc/inc/dyndns.class:1269
@@ -1033,7 +1033,7 @@ msgstr ""
 
 #: src/etc/inc/dyndns.class:1350
 msgid "Unknown username - User does not exist."
-msgstr ""
+msgstr "Użytkownik nie istnieje."
 
 #: src/etc/inc/dyndns.class:1352
 msgid "Wrong password - Remember password is case sensitive."
@@ -1065,7 +1065,7 @@ msgstr ""
 
 #: src/etc/inc/dyndns.class:1419 src/etc/inc/dyndns.class:1477
 msgid "Invalid username or password"
-msgstr ""
+msgstr "Zła nazwa użytkownika lub hasło."
 
 #: src/etc/inc/dyndns.class:1422
 msgid "Account suspended"
@@ -1881,8 +1881,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2366,7 +2366,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2438,7 +2438,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2842,13 +2842,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5524,7 +5524,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5600,7 +5600,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5772,8 +5772,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6054,8 +6054,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6072,9 +6072,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6284,7 +6284,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7233,13 +7233,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7492,8 +7492,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7503,8 +7503,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7581,7 +7581,7 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:712
 #: src/usr/local/www/vpn_l2tp_users_edit.php:153
 msgid "*Username"
-msgstr ""
+msgstr "*Nazwa użytkownika"
 
 #: src/usr/local/www/diag_authentication.php:106
 #: src/usr/local/www/interfaces.php:2606 src/usr/local/www/interfaces.php:2731
@@ -7783,10 +7783,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7800,7 +7800,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8010,7 +8010,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8306,7 +8306,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8451,8 +8451,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8879,14 +8879,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9432,10 +9432,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10061,7 +10061,7 @@ msgstr "Lista aliasów została zmieniona."
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10141,9 +10141,9 @@ msgstr "Usuń alias"
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10156,8 +10156,8 @@ msgstr "Usuń alias"
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "Dodaj"
 
@@ -10246,10 +10246,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10257,7 +10257,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10543,8 +10543,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12047,7 +12047,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13738,8 +13738,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13749,9 +13749,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13788,7 +13788,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15945,7 +15945,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16484,7 +16484,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16912,7 +16912,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20168,7 +20168,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20370,14 +20370,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20694,7 +20694,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20792,7 +20792,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21271,7 +21271,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23510,7 +23510,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25187,21 +25187,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25358,7 +25358,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25719,7 +25719,7 @@ msgstr "Wybierz język dla Konfiguratora"
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr "webConfigurator"
 
@@ -25773,7 +25773,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25783,7 +25783,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25793,7 +25793,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25803,9 +25803,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25815,7 +25815,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27174,51 +27174,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27237,13 +27237,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27320,7 +27320,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27331,8 +27331,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27348,7 +27348,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27358,12 +27358,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27372,9 +27372,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27588,331 +27588,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27929,185 +27929,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28944,8 +28944,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28954,12 +28954,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28968,22 +28968,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28995,12 +28995,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29617,18 +29617,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30165,9 +30165,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30458,8 +30458,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30476,8 +30476,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30760,43 +30760,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30807,46 +30808,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30855,11 +30856,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30894,10 +30895,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31080,7 +31082,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31121,10 +31123,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31175,9 +31178,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31239,126 +31243,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31370,8 +31400,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31383,12 +31413,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31398,12 +31428,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31424,7 +31454,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31432,7 +31462,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31441,7 +31471,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31470,19 +31500,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31585,32 +31616,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31619,109 +31653,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31817,7 +31855,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31840,58 +31878,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31900,7 +31960,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31909,15 +31969,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31926,11 +31986,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31938,15 +31998,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31954,11 +32014,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31966,171 +32026,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34214,7 +34276,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34369,8 +34431,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34381,13 +34443,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34437,35 +34499,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34499,18 +34561,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34532,23 +34594,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34556,54 +34618,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/pt_BR/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/pt_BR/LC_MESSAGES/pfSense.mo
index b2af0d4..00af57c 100644
--- a/src/usr/local/share/locale/pt_BR/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/pt_BR/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/pt_BR/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/pt_BR/LC_MESSAGES/pfSense.po
index 8b677b4..3d756e1 100644
--- a/src/usr/local/share/locale/pt_BR/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/pt_BR/LC_MESSAGES/pfSense.po
@@ -15,12 +15,12 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-07 01:05-0500\n"
-"Last-Translator: Renato Botelho <garga@FreeBSD.org>\n"
+"PO-Revision-Date: 2017-02-10 05:58-0500\n"
+"Last-Translator: Silvio Ap Silva <alvolivre@live.com>\n"
 "Language-Team: Powered By: TrustUX Network <www.trustux.com>\n"
 "Language: pt-BR\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
@@ -2003,8 +2003,8 @@ msgstr "Não foram encontrados servidores."
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2520,7 +2520,7 @@ msgstr "Interface de kernel"
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr "Rede"
 
@@ -2592,7 +2592,7 @@ msgstr "Meu endereço IP"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -3004,13 +3004,13 @@ msgstr "Servidor: Não"
 msgid "CA: %s"
 msgstr "CA: %s"
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "Em Uso"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr "Revogado"
 
@@ -4868,7 +4868,7 @@ msgstr "Permitir acesso à página 'Serviços: DHCPv6 Relay'."
 
 #: src/etc/inc/priv.defs.inc:691
 msgid "WebCfg - Services: DNS Forwarder"
-msgstr ""
+msgstr "WebCfg - Serviços: Redirecionamento DNS"
 
 #: src/etc/inc/priv.defs.inc:692
 msgid "Allow access to the 'Services: DNS Forwarder' page."
@@ -4876,7 +4876,7 @@ msgstr "Permitir acesso à página 'Serviços: DNS Forwarder'."
 
 #: src/etc/inc/priv.defs.inc:697
 msgid "WebCfg - Services: DNS Forwarder: Edit Domain Override"
-msgstr ""
+msgstr "WebCfg - Serviços: Redirecionamento DNS: Editar Sobreescrever Dominio"
 
 #: src/etc/inc/priv.defs.inc:698
 msgid ""
@@ -4887,7 +4887,7 @@ msgstr ""
 
 #: src/etc/inc/priv.defs.inc:703
 msgid "WebCfg - Services: DNS Forwarder: Edit host"
-msgstr ""
+msgstr "WebCfg - Serviços: Redirecionamento DNS: Editar host"
 
 #: src/etc/inc/priv.defs.inc:704
 msgid "Allow access to the 'Services: DNS Forwarder: Edit host' page."
@@ -4895,7 +4895,7 @@ msgstr "Permitir acesso à página 'Serviços: DNS Forwarder: Editar'."
 
 #: src/etc/inc/priv.defs.inc:709
 msgid "WebCfg - Services: Dynamic DNS clients"
-msgstr ""
+msgstr "WebCfg - Serviços: Clientes DNS Dinamico"
 
 #: src/etc/inc/priv.defs.inc:710
 msgid "Allow access to the 'Services: Dynamic DNS clients' page."
@@ -4903,7 +4903,7 @@ msgstr "Permitir acesso à página 'Serviços: Clientes DNS Dinâmico'."
 
 #: src/etc/inc/priv.defs.inc:715
 msgid "WebCfg - Services: Dynamic DNS client"
-msgstr ""
+msgstr "WebCfg - Serviços: Cliente DNS Dinamico"
 
 #: src/etc/inc/priv.defs.inc:716
 msgid "Allow access to the 'Services: Dynamic DNS client' page."
@@ -4911,27 +4911,27 @@ msgstr "Permitir acesso à página 'Serviços: Cliente DNS Dinâmico'."
 
 #: src/etc/inc/priv.defs.inc:721
 msgid "WebCfg - Services: IGMP Proxy"
-msgstr ""
+msgstr "WebCfg - Serviços: Proxy IGMP"
 
 #: src/etc/inc/priv.defs.inc:722
 msgid "Allow access to the 'Services: IGMP Proxy' page."
-msgstr ""
+msgstr "Permitir acesso a pagina 'Serviços: Proxy IGMP'."
 
 #: src/etc/inc/priv.defs.inc:727
 msgid "WebCfg - Services: IGMP Proxy: Edit"
-msgstr ""
+msgstr "WebCfg - Serviços: Proxy IGMP: Editar"
 
 #: src/etc/inc/priv.defs.inc:728
 msgid "Allow access to the 'Services: IGMP Proxy: Edit' page."
-msgstr ""
+msgstr "Permitir acesso à página 'Serviços: Proxy IGMP: Editar'."
 
 #: src/etc/inc/priv.defs.inc:733
 msgid "WebCfg - Services: NTP Settings"
-msgstr ""
+msgstr "WebCfg - Serviços: Configurações NTP"
 
 #: src/etc/inc/priv.defs.inc:734
 msgid "Allow access to the 'Services: NTP Settings' page."
-msgstr ""
+msgstr "Permitir acesso a pagina 'Serviços: Configurações NTP'."
 
 #: src/etc/inc/priv.defs.inc:739
 msgid "WebCfg - Services: NTP ACL Settings"
@@ -5775,7 +5775,7 @@ msgstr "Sincronização de relógio NTP"
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr "Portal Captive"
 
@@ -5851,7 +5851,7 @@ msgstr "Interrompido"
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr "Desabilitado"
@@ -6024,8 +6024,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr "Iniciando serviço UPnP..."
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr "O campo '%s' contém caracteres inválidos."
@@ -6309,8 +6309,8 @@ msgstr "Selecione opções para essa fila"
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6327,9 +6327,9 @@ msgstr "Selecione opções para essa fila"
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6545,7 +6545,7 @@ msgstr "Espera deve ser um inteiro."
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "Excluir"
@@ -7520,13 +7520,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7779,8 +7779,8 @@ msgstr "Tipo de Link"
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7790,8 +7790,8 @@ msgstr "Tipo de Link"
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr "Ações"
@@ -8072,10 +8072,10 @@ msgstr "Syslog"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -8089,7 +8089,7 @@ msgstr "Syslog"
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8303,7 +8303,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr "Limpar"
@@ -8602,7 +8602,7 @@ msgstr "Nome do Host"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8749,8 +8749,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "Filtro"
 
@@ -9177,14 +9177,14 @@ msgid "Packet Capture"
 msgstr "Captura de pacotes"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9733,10 +9733,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10364,7 +10364,7 @@ msgstr "A lista de alias foi alterada."
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10444,9 +10444,9 @@ msgstr "Remove alias"
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10459,8 +10459,8 @@ msgstr "Remove alias"
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "Adicionar"
 
@@ -10549,10 +10549,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10560,7 +10560,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10849,8 +10849,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12371,7 +12371,7 @@ msgstr "Regra Anti-Lockout"
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -14072,8 +14072,8 @@ msgstr "listando somente os primeiros 10k items"
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "Valor"
 
@@ -14083,9 +14083,9 @@ msgstr "Valor"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr "Avançado"
@@ -14122,7 +14122,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr "Ger. de usuário"
@@ -16326,7 +16326,7 @@ msgstr "Interfaces participando da ponte."
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16869,7 +16869,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -17313,7 +17313,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr "Compressão"
 
@@ -20682,7 +20682,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr "Servidores WINS"
 
@@ -20884,14 +20884,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -21212,7 +21212,7 @@ msgstr "Servidores WINS"
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr "Servidores DNS"
 
@@ -21310,7 +21310,7 @@ msgstr "Servidores NTP"
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr "Servidores NTP"
 
@@ -21797,7 +21797,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -24058,7 +24058,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25736,21 +25736,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25907,7 +25907,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr "Nome Comum"
 
@@ -26274,7 +26274,7 @@ msgstr "Escolha o idioma para o configurador web (webConfigurator)"
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr "webConfigurator"
 
@@ -26328,7 +26328,7 @@ msgstr "Um momento... redirecionando para %s em 20 segundos."
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr "Acesso de Administrador"
 
@@ -26338,7 +26338,7 @@ msgstr "Acesso de Administrador"
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -26348,7 +26348,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr "Diversos"
@@ -26358,9 +26358,9 @@ msgstr "Diversos"
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr "Ajustes do sistema"
 
@@ -26370,7 +26370,7 @@ msgstr "Ajustes do sistema"
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr "Notificações"
 
@@ -27738,53 +27738,53 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 "As opções nesta página são destinados somente para o uso de usuários "
 "avançados."
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr "Nome do Ajuste"
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27803,13 +27803,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27886,7 +27886,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr "Servidores de Autenticação"
@@ -27897,8 +27897,8 @@ msgstr "Servidores de Autenticação"
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27914,7 +27914,7 @@ msgstr "Usuários"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr "Grupos"
@@ -27924,12 +27924,12 @@ msgid "Server Name"
 msgstr "Nome do Servidor"
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27938,9 +27938,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -28154,257 +28154,257 @@ msgstr "Criar uma Autoridade de Certificadora interna"
 msgid "Create an intermediate Certificate Authority"
 msgstr "Cria uma Autoridade Certificadora intermediária"
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr "Dados do Certificado"
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr "Esse certificado não parece ser válido."
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr "Chaves privadas criptografadas não são suportadas ainda."
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr "Tamanho da chave"
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr "Tempo de vida"
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr "Código de País de nome distinto"
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr "Estado ou Província de nome distinto"
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr "Cidade de nome distinto"
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr "Organização de nome distinto"
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr "Endereço de E-mail de nome distinto"
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr "Nome Comum de nome distinto"
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr "Assinatura da Autoridade Certificadora"
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr "Por favor, selecione um comprimento de chave válido."
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr "Por favor, selecione um algoritmo digest válido."
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr "Gerenciador de Certificado"
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr "CAs"
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr "Certificados"
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr "Revogação de Certificado"
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr "Interno"
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr "Emissor"
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr "Nome distinto"
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr "auto-assinada"
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr "externa"
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr "Válido de"
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr "Válido até"
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr "Fonte Autorizadora Existente"
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr "Cole um certificado em formato X.509 PEM aqui."
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr "Serial para o próximo certificado"
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
@@ -28412,75 +28412,75 @@ msgstr ""
 "Digite um número decimal a ser usado como o número de série para o próximo "
 "certificado a ser criado usando essa CA."
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr "Fonte Autorizadora de Certificado Interno"
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -28497,93 +28497,93 @@ msgstr "Criar um certificado interno"
 msgid "Create a Certificate Signing Request"
 msgstr "Criar uma Requisição de Assinatura de Certificado"
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr "Escolha um certificado existente"
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr "Dado chave"
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr "Fonte Autorizadora"
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr "Tipo do Certificado"
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr "Escolha de Certificado Existente"
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr "Dado de Certificado Final"
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 "O módulo de certificado não coincide com o módulo de solicitação de "
 "assinatura."
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr "Importar Certificado"
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr "Cole uma chave privada no formato X.509 PEM aqui."
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr "Certificação Interna"
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
@@ -28591,95 +28591,95 @@ msgstr ""
 "Tipo do certificado a gerar. Usado para colocar restrições sobre o uso do "
 "certificado gerado."
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr "Nomes Alternativos"
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr "Requisição de Assinatura Externa"
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr "Escolher um Certificado Existente"
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr "Assinatura de dados pedido"
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr "externa - assinatura pendente"
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -29527,8 +29527,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -29537,12 +29537,12 @@ msgid "Assigned Privileges"
 msgstr "Privilégios atribuídos"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -29551,22 +29551,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29578,12 +29578,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr "Selecione um privilégio da lista acima para uma descrição"
 
@@ -30204,18 +30204,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr "Chave Pre-Compartilhada IPsec"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30762,9 +30762,9 @@ msgstr ""
 "ferramentas de configuração do iPhone, somente por entrada manual."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr "Domínio Padrão do DNS"
 
@@ -31077,8 +31077,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -31095,8 +31095,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -31381,43 +31381,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -31428,16 +31429,16 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr "Máximo MSS"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
@@ -31446,31 +31447,31 @@ msgstr ""
 "problemas com PMTUD em links IPsec da VPN. Se deixado em branco o valor "
 "padrão é 1400 bytes."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -31479,11 +31480,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -31521,10 +31522,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31713,7 +31715,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr "Chave compartilhada"
 
@@ -31754,10 +31756,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31808,9 +31811,10 @@ msgid "Proxy host or address"
 msgstr "Host de Proxy ou endereço"
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31872,126 +31876,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr "Certificado de Cliente"
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr "Hardware Crypto"
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr "Configurações de túnel"
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr "Tunel da Rede IPv4"
 
@@ -32003,8 +32033,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr "Tunel da Rede IPv6"
 
@@ -32016,12 +32046,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -32031,12 +32061,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -32057,7 +32087,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -32065,7 +32095,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr "Topologia"
 
@@ -32074,7 +32104,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr "Tipo de Serviço"
 
@@ -32103,19 +32133,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -32220,32 +32251,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr "Rede(s) local(is) IPv4"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -32254,109 +32288,113 @@ msgid "IPv6 Local Network/s"
 msgstr "Rede(s) local(is) IPv6"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr "Rede(s) remota(s) IPv4"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr "Rede(s) remota(s) IPv6"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr "Gateway de redirecionamento"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr "Configurações de Cliente"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr "Definições de Servidor"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr "Opções de NetBIOS"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr "Tipo de Nó"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -32455,7 +32493,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -32478,41 +32516,63 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
@@ -32522,11 +32582,11 @@ msgstr ""
 "certificados com profundidade abaixo desta. Útil para negar certificados "
 "emitidos por CAs intermadiários gerados a partir do mesmo CA que o servidor."
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
@@ -32534,7 +32594,7 @@ msgstr ""
 "Durante a autenticação de usuários, reforce uma correspondência entre um "
 "nome comum do certificado do cliente e um dado nome de usuário no login."
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -32543,7 +32603,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -32552,15 +32612,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr "Bridge DHCP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr "Interface Bridge"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -32569,11 +32629,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr "Servidor Bridge DHCP Inicial"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -32581,15 +32641,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr "Servidor Bridge DHCP Final"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32597,11 +32657,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32609,108 +32669,109 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr "Conexões concorrentes"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr "Comunicação inter-clientes"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr "IP Dinâmico"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr "Pool de endereços"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
@@ -32720,63 +32781,64 @@ msgstr ""
 "ponto para um servidor WINS), m-node (faz broadcast e então consulta "
 "servidor de nome), e h-node (consulta servidor de nome, então faz broadcast)"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr "ID de Escopo"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr "Protocolo / Porta"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr "Rede de túneis"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34875,7 +34937,7 @@ msgstr "Marca Gateway como Down"
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34953,7 +35015,7 @@ msgstr "Configuração do Traffic Shaper"
 
 #: src/usr/local/www/system_hasync.php:305
 msgid "Traffic Shaper Limiters configuration "
-msgstr ""
+msgstr "Configuração do Limitador do Traffic Shaper"
 
 #: src/usr/local/www/system_hasync.php:313
 msgid "DNS Forwarder and DNS Resolver configurations "
@@ -34965,7 +35027,7 @@ msgstr "Captive Portal "
 
 #: src/usr/local/www/system_routes_edit.php:268
 msgid "Disable this static route"
-msgstr "Desabilitar esta rota estática"
+msgstr "Desabilita esta rota estática"
 
 #: src/usr/local/www/system_update_settings.php:170
 msgid "Disable the automatic dashboard auto-update check"
@@ -35036,8 +35098,8 @@ msgstr ""
 "Permite clientes para salvar senhas Xauth (somente cliente VPN da Cisco)."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr "Fornece um nome de domínio padrão para clientes"
 
@@ -35048,13 +35110,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr "Fornece uma lista de servidores DNS para clientes"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr "Fornece uma lista de servidores WINS para clientes"
 
@@ -35110,35 +35172,35 @@ msgstr "Habilitar DPD"
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr "Desabilitar esta entrada de phase 2 sem removê-la da lista."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr "Habilitar compressão IP"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr "Habilitar ligação estrita de interface."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr "Aceitar ID e HASH payloads descriptografados no modo principal IKEv1"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr "Habilitar MSS clamping no tráfego da VPN"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr "Habilitar Plugin Unity"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr "Habilitar verificação estrita da Lista de Certificados Revogados."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr "Inicia reautenticação IKEv2 com make-before-break."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr "Ignorar o IP da interface LAN"
 
@@ -35172,18 +35234,18 @@ msgstr "Use uma chave TLS"
 msgid "Automatically generate a TLS Key."
 msgstr "Gerar uma chave TLS automaticamente."
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "Gerar automaticamente uma chave compartilhada"
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr "Habilita Parâmetros Criptográficos Negociavel"
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -35203,27 +35265,27 @@ msgstr "Desabilitar essa substituição"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:357
 msgid "Block this client connection based on its common name."
-msgstr ""
+msgstr "Bloquear conexão do cliente baseado em seu Common Name."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr "Força todo o trafego gerado pelo cliente através do túnel."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 "Previne este cliente de receber quaisquer configurações de cliente definidas "
 "pelo servidor."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "Forneça uma lista de servidores NTP para os estações"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "Habilitar NetBIOS sobre TCP/IP"
 
@@ -35231,30 +35293,30 @@ msgstr "Habilitar NetBIOS sobre TCP/IP"
 msgid "Disable this server"
 msgstr "Desabilitar esse servidor"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr "Forçar correspondência"
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "Permite ao clientes da bridge obterem DHCP."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr "Permite comunicação entre clientes conectados a esse servidor"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 "Permitir conexões simultâneas de vários clientes usando o mesmo Common Name."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
@@ -35262,19 +35324,19 @@ msgstr ""
 "Permite clientes conectados reterem suas conexões se seus endereços de IP "
 "mudarem."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 "Fornece um endereço IP de adaptador virtual para clientes (Veja Tunnel "
 "Network)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 "Fornece uma lista de servidores DNS para os clientes. Endereços podem ser "
 "IPv4 ou IPv6."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
@@ -35283,7 +35345,7 @@ msgstr ""
 "enquanto conectado, forçando os clientes a usarem somente Servidores DNS VPN."
 ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
@@ -35291,6 +35353,6 @@ msgstr ""
 "Execute \"net stop dnscache\", \"net start dnscache\", \"ipconfig /"
 "flushdns\" e \"ipconfig /registerdns\" no inicio da conexão."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "Use uma porta de gerenciamento diferente para clientes."
diff --git a/src/usr/local/share/locale/pt_PT/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/pt_PT/LC_MESSAGES/pfSense.mo
new file mode 100644
index 0000000..50774af
--- /dev/null
+++ b/src/usr/local/share/locale/pt_PT/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/pt_PT/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/pt_PT/LC_MESSAGES/pfSense.po
new file mode 100644
index 0000000..823747f
--- /dev/null
+++ b/src/usr/local/share/locale/pt_PT/LC_MESSAGES/pfSense.po
@@ -0,0 +1,34660 @@
+# Bruno Almeida <balmeida@gmail.com>, 2017. #zanata
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"PO-Revision-Date: 2017-02-09 09:55-0500\n"
+"Last-Translator: Bruno Almeida <balmeida@gmail.com>\n"
+"Language-Team: Portuguese (Portugal)\n"
+"Language: pt-PT\n"
+"X-Generator: Zanata 3.9.6\n"
+"Plural-Forms: nplurals=2; plural=(n != 1)\n"
+
+#: src/etc/inc/auth.inc:95
+msgid ""
+"Potential DNS Rebind attack detected, see http://en.wikipedia.org/wiki/"
+"DNS_rebinding<br />Try accessing the router by IP address instead of by "
+"hostname."
+msgstr ""
+"Detectado potencial ataque DNS Rebind, consulte em http://en.wikipedia.org/"
+"wiki/DNS_rebinding <br /> Tente acessar o roteador por endereço IP em vez de "
+"por hostname."
+
+#: src/etc/inc/auth.inc:114 src/etc/inc/captiveportal.inc:267
+msgid "Redirecting..."
+msgstr "Redireccionando..."
+
+#: src/etc/inc/auth.inc:120
+msgid "Redirecting to the dashboard..."
+msgstr "Redireccionando para o painel..."
+
+#: src/etc/inc/auth.inc:397 src/etc/inc/auth.inc:421 src/etc/inc/auth.inc:498
+#: src/etc/inc/auth.inc:539 src/etc/inc/auth.inc:608 src/etc/inc/auth.inc:766
+#: src/etc/inc/auth.inc:779
+#, php-format
+msgid "Running: %s"
+msgstr "Correndo: %s"
+
+#: src/etc/inc/auth.inc:820 src/etc/inc/auth.inc:901 src/etc/inc/auth.inc:989
+#: src/etc/inc/auth.inc:1301
+#, php-format
+msgid "ERROR!  Could not connect to server %s."
+msgstr "ERRO!  Não foi possível conectar ao servidor %s."
+
+#: src/etc/inc/auth.inc:838
+#, php-format
+msgid "LDAP: Could not lookup CA by reference for host %s."
+msgstr "LDAP: Não foi possivel pesquisar CA pela referencia para host %s."
+
+#: src/etc/inc/auth.inc:913
+#, php-format
+msgid "ERROR! ldap_test_bind() could not STARTTLS to server %s."
+msgstr "ERRO! ldap_test_bind() Não foi possível iniciar TLS no servidor %s."
+
+#: src/etc/inc/auth.inc:975
+msgid ""
+"ERROR!  ldap_get_user_ous() backed selected with no LDAP authentication "
+"server defined."
+msgstr ""
+"ERRO!  ldap_get_user_ous() suporte seleccionado com LDAP sem autenticação "
+"definida no servidor."
+
+#: src/etc/inc/auth.inc:1003
+#, php-format
+msgid "ERROR! ldap_get_user_ous() could not STARTTLS to server %s."
+msgstr ""
+"ERRO! ldap_get_user_ous() não foi possível iniciar TLS para o servidor%s."
+
+#: src/etc/inc/auth.inc:1013
+#, php-format
+msgid "ERROR! ldap_get_user_ous() could not bind anonymously to server %s."
+msgstr ""
+"ERRO! ldap_get_user_ous() não foi possível ligar anonimamente ao servidor %s."
+""
+
+#: src/etc/inc/auth.inc:1018
+#, php-format
+msgid "ERROR! ldap_get_user_ous() could not bind to server %s."
+msgstr "ERRO! ldap_get_user_ous() não foi possível ligar ao servidor %s."
+
+#: src/etc/inc/auth.inc:1134
+#, php-format
+msgid "ERROR! ldap_get_groups() Could not connect to server %s."
+msgstr "ERRO! ldap_get_groups() Não foi possível conectar ao servidor %s."
+
+#: src/etc/inc/auth.inc:1146
+#, php-format
+msgid "ERROR! ldap_get_groups() could not STARTTLS to server %s."
+msgstr ""
+"ERRO! ldap_get_groups() não foi possível iniciar TLS para o servidor%s."
+
+#: src/etc/inc/auth.inc:1157
+#, php-format
+msgid "ERROR! ldap_get_groups() could not bind anonymously to server %s."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1162
+#, php-format
+msgid "ERROR! ldap_get_groups() could not bind to server %s."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1268
+msgid ""
+"ERROR! ldap_backed() called with no LDAP authentication server defined.  "
+"Defaulting to local user database. Visit System -> User Manager."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1271
+msgid ""
+"ERROR! ldap_backed() called with no LDAP authentication server defined."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1294
+#, php-format
+msgid "ERROR! ldap_backed() could not STARTTLS to server %s."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1319
+#, php-format
+msgid "ERROR! Could not bind to server %s."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1337
+#, php-format
+msgid "Now Searching for %s in directory."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1346
+#, php-format
+msgid "Now Searching in server %1$s, container %2$s with filter %3$s."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1360
+#, php-format
+msgid "Search resulted in error: %s"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1376
+msgid "ERROR! Either LDAP search failed, or multiple users were found."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1383
+#, php-format
+msgid "ERROR! Could not login to server %1$s as user %2$s: %3$s"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1390
+#, php-format
+msgid "Logged in successfully as %1$s via LDAP server %2$s with DN = %3$s."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1465
+#, php-format
+msgid "RADIUS start: %s"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1477
+#, php-format
+msgid "RADIUS send failed: %s"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1485
+#, php-format
+msgid "RADIUS Auth succeeded"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1491
+#, php-format
+msgid "RADIUS Auth rejected"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1608
+msgid "Widget configuration has been changed."
+msgstr ""
+
+#: src/etc/inc/auth.inc:1613
+#, php-format
+msgid "(User %s)"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1631 src/etc/inc/auth.inc:1647
+msgid "Local Database"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1751
+#, php-format
+msgid "Successful login for user '%1$s' from: %2$s"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1809
+#, php-format
+msgid "Session timed out for user '%1$s' from: %2$s"
+msgstr ""
+
+#: src/etc/inc/auth.inc:1811
+#, php-format
+msgid "User logged out for user '%1$s' from: %2$s"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:73
+msgid "No page assigned to this user! Click here to logout."
+msgstr ""
+
+#: src/etc/inc/authgui.inc:104
+#, php-format
+msgid "Error: %1$s Description: %2$s"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:122
+msgid "Error: not allowed"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:149
+msgid "unknown reason"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:150
+#, php-format
+msgid "Invalid login (%s)."
+msgstr ""
+
+#: src/etc/inc/authgui.inc:155
+#, php-format
+msgid "This device is currently being maintained by: %s."
+msgstr ""
+
+#: src/etc/inc/authgui.inc:224
+#, php-format
+msgid "Login to %1$s on %2$s.%3$s"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:226
+#, php-format
+msgid "Login to %1$s"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:235 src/etc/inc/authgui.inc:283
+#: src/usr/local/www/services_captiveportal.php:1016
+msgid "Login"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:249
+msgid ""
+"The IP address being used to access this router is not configured locally, "
+"which may be forwarded by NAT or other means. <br /><br />If this forwarding "
+"is unexpected, it should be verified that a man-in-the-middle attack is not "
+"taking place."
+msgstr ""
+
+#: src/etc/inc/authgui.inc:264
+msgid "The browser must support cookies to login."
+msgstr ""
+
+#: src/etc/inc/authgui.inc:268 src/usr/local/www/interfaces.php:2532
+#: src/usr/local/www/interfaces_ppps_edit.php:210
+#: src/usr/local/www/interfaces_ppps_edit.php:213
+#: src/usr/local/www/interfaces_ppps_edit.php:221
+#: src/usr/local/www/interfaces_ppps_edit.php:224
+#: src/usr/local/www/interfaces_ppps_edit.php:613
+#: src/usr/local/www/services_dyndns_edit.php:100
+#: src/usr/local/www/services_dyndns_edit.php:356
+#: src/usr/local/www/services_pppoe_edit.php:503
+#: src/usr/local/www/status_captiveportal.php:200
+#: src/usr/local/www/system_usermanager.php:174
+#: src/usr/local/www/system_usermanager.php:179
+#: src/usr/local/www/system_usermanager.php:184
+#: src/usr/local/www/system_usermanager.php:581
+#: src/usr/local/www/vpn_l2tp_users.php:95
+#: src/usr/local/www/vpn_l2tp_users_edit.php:78
+#: src/usr/local/www/vpn_l2tp_users_edit.php:81
+#: src/usr/local/www/vpn_openvpn_client.php:576
+#: src/usr/local/www/vpn_openvpn_client.php:601
+#: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:84
+msgid "Username"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:270
+msgid "Enter your username"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:275 src/usr/local/www/diag_backup.php:568
+#: src/usr/local/www/diag_backup.php:615 src/usr/local/www/interfaces.php:2539
+#: src/usr/local/www/interfaces_ppps_edit.php:210
+#: src/usr/local/www/interfaces_ppps_edit.php:213
+#: src/usr/local/www/interfaces_ppps_edit.php:221
+#: src/usr/local/www/interfaces_ppps_edit.php:224
+#: src/usr/local/www/interfaces_ppps_edit.php:614
+#: src/usr/local/www/services_checkip_edit.php:148
+#: src/usr/local/www/services_dyndns_edit.php:98
+#: src/usr/local/www/services_dyndns_edit.php:366
+#: src/usr/local/www/services_pppoe_edit.php:510
+#: src/usr/local/www/system_advanced_notifications.php:356
+#: src/usr/local/www/system_authservers.php:653
+#: src/usr/local/www/system_usermanager.php:180
+#: src/usr/local/www/system_usermanager.php:185
+#: src/usr/local/www/system_usermanager.php:734
+#: src/usr/local/www/system_usermanager.php:737
+#: src/usr/local/www/system_usermanager_passwordmg.php:40
+#: src/usr/local/www/vpn_l2tp_users_edit.php:81
+#: src/usr/local/www/vpn_l2tp_users_edit.php:160
+#: src/usr/local/www/vpn_openvpn_client.php:583
+#: src/usr/local/www/vpn_openvpn_client.php:608
+msgid "Password"
+msgstr ""
+
+#: src/etc/inc/authgui.inc:277
+msgid "Enter your password"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:36
+#, php-format
+msgid "%s captive portal"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:37
+#, php-format
+msgid "Welcome to the %s Captive Portal!"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:38
+msgid "Username:"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:39
+msgid "Password:"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:91
+msgid "Enter Voucher Code:"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:101 src/usr/local/www/crash_reporter.php:93
+msgid "Continue"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:268
+msgid "Redirecting to"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:269 src/usr/local/www/head.inc:226
+#: src/usr/local/www/head.inc:512
+msgid "Logout"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:270
+msgid "Click the button below to disconnect"
+msgstr ""
+
+#: src/etc/inc/captiveportal.inc:1749
+#, php-format
+msgid "Error: cannot open '%1$s' in captiveportal_write_elements()%2$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:40
+msgid "DANGER!  WARNING!  ACHTUNG!"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:41
+#, php-format
+msgid "%1$s requires *AT LEAST* %2$s RAM to function correctly.%3$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:42
+#, php-format
+msgid ""
+"Only (%1$s) MB RAM has been detected, with (%2$s) available to %3$s.%4$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:43
+msgid "Press ENTER to continue."
+msgstr ""
+
+#: src/etc/inc/config.console.inc:61 src/etc/inc/config.console.inc:436
+msgid "No interfaces found!"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:79
+msgid "Do VLANs need to be set up first?"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:82
+msgid ""
+"If VLANs will not be used, or only for optional interfaces, it is typical to\n"
+"say no here and use the webConfigurator to configure VLANs later, if "
+"required."
+msgstr ""
+
+#: src/etc/inc/config.console.inc:85
+msgid "Should VLANs be set up now [y|n]?"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:96
+msgid "VLAN interfaces:"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:116
+msgid "Enter the WAN interface name or 'a' for auto-detection"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:117
+#, php-format
+msgid "%1$s(%2$s or a): "
+msgstr ""
+
+#: src/etc/inc/config.console.inc:125 src/etc/inc/config.console.inc:151
+#: src/etc/inc/config.console.inc:187 src/etc/inc/config.console.inc:459
+#, php-format
+msgid "%1$sInvalid interface name '%2$s'%3$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:133
+#, php-format
+msgid ""
+"%1$sEnter the LAN interface name or 'a' for auto-detection %2$sNOTE: this "
+"enables full Firewalling/NAT mode.%3$s(%4$s a or nothing if finished):%5$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:170
+#, php-format
+msgid "%1$sOptional interface %2$s description found: %3$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:173
+#, php-format
+msgid ""
+"%1$sEnter the Optional %2$s interface name or 'a' for auto-"
+"detection%3$s(%4$s a or nothing if finished):%5$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:180
+msgid "Optional"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:216
+msgid "The interfaces will be assigned as follows:"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:226 src/etc/inc/config.console.inc:419
+msgid "Do you want to proceed [y|n]?"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:243
+msgid "You have chosen to remove the LAN interface."
+msgstr ""
+
+#: src/etc/inc/config.console.inc:244
+msgid ""
+"Would you like to remove the LAN IP address and \n"
+"unload the interface now [y|n]?"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:365
+#, php-format
+msgid "%sWriting configuration..."
+msgstr ""
+
+#: src/etc/inc/config.console.inc:366
+msgid "Console assignment of interfaces"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:367
+#, php-format
+msgid "done.%s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:375
+msgid "One moment while the settings are reloading..."
+msgstr ""
+
+#: src/etc/inc/config.console.inc:376
+msgid " done!"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:396
+#, php-format
+msgid "Detected link-up on interface %1$s.%2$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:401
+#, php-format
+msgid "No link-up detected.%s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:418
+msgid "WARNING: all existing VLANs will be cleared if you proceed!"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:434
+msgid "VLAN Capable interfaces:"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:449
+msgid "No VLAN capable interfaces detected."
+msgstr ""
+
+#: src/etc/inc/config.console.inc:453
+msgid ""
+"Enter the parent interface name for the new VLAN (or nothing if finished):"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:466
+msgid "Enter the VLAN tag (1-4094):"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:470
+#, php-format
+msgid "%1$sInvalid VLAN tag '%2$s'%3$s"
+msgstr ""
+
+#: src/etc/inc/config.console.inc:477
+#, php-format
+msgid "This parent interface and VLAN already created."
+msgstr ""
+
+#: src/etc/inc/config.inc:74
+msgid "Upgrading m0n0wall configuration to pfSense... "
+msgstr ""
+
+#: src/etc/inc/config.inc:77
+msgid "ERROR!  Could not convert m0n0wall -> pfsense in config.xml"
+msgstr ""
+
+#: src/etc/inc/config.inc:105 src/etc/inc/config.inc:123
+#, php-format
+msgid "Found configuration on %1$s.%2$s"
+msgstr ""
+
+#: src/etc/inc/config.inc:137 src/etc/inc/config.inc:138
+#: src/etc/inc/config.lib.inc:90 src/etc/inc/config.lib.inc:91
+#: src/etc/inc/config.lib.inc:232 src/etc/inc/config.lib.inc:253
+#: src/etc/inc/config.lib.inc:254
+msgid "No config.xml found, attempting last known config restore."
+msgstr ""
+
+#: src/etc/inc/config.inc:141
+msgid "No config.xml or config backups found, resetting to factory defaults."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:63
+msgid "Config.xml unlocked."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:67
+msgid "Invalid password entered.  Please try again."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:95 src/etc/inc/config.lib.inc:129
+#: src/etc/inc/config.lib.inc:258
+msgid ""
+"Config.xml is corrupted and is 0 bytes.  Could not restore a previous backup."
+""
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:127 src/etc/inc/config.lib.inc:138
+#: src/etc/inc/config.lib.inc:498
+msgid "Could not restore config.xml."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:208 src/etc/inc/config.lib.inc:209
+#, php-format
+msgid "%1$s is restoring the configuration %2$s"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:236
+#, php-format
+msgid "XML configuration file not found.  %s cannot continue booting."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:242
+msgid ""
+"Last known config found and restored.  Please double check the configuration "
+"file for accuracy."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:245
+msgid "Could not find a usable configuration file! Exiting...."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:323
+#, php-format
+msgid "Start Configuration upgrade at %s, set execution timeout to 15 minutes"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:334 src/etc/inc/config.lib.inc:335
+msgid "Updated bogon update frequency to 3am"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:371
+#, php-format
+msgid "Ended Configuration upgrade at %s"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:374
+#, php-format
+msgid "Upgraded config version level from %1$s to %2$s"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:475
+msgid "WARNING: Config contents could not be saved. Could not open file!"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:477
+#, php-format
+msgid "Unable to open %1$s/config.xml for writing in write_config()%2$s"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:597
+#, php-format
+msgid "Reverted to %s."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:614
+msgid "Installing configuration..."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:616
+msgid "Installing configuration ...."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:667
+msgid "XML error: unable to open file"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:673
+#, php-format
+msgid "%1$s at line %2$d"
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:726 src/etc/inc/config.lib.inc:728
+#, php-format
+msgid "The backup cache file %s is corrupted.  Unlinking."
+msgstr ""
+
+#: src/etc/inc/config.lib.inc:878
+#, php-format
+msgid "%s made unknown change"
+msgstr ""
+
+#: src/etc/inc/crypt.inc:35
+msgid "Failed to encrypt/decrypt data!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:194
+msgid "Dynamic DNS: updatedns() starting"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:261
+#, php-format
+msgid ""
+"Dynamic DNS (%1$s): running get_failover_interface for %2$s. found %3$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:270
+#, php-format
+msgid ""
+"Dynamic DNS (%1$s) There was an error trying to determine the public IP for "
+"interface - %2$s (%3$s %4$s)."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:348
+#, php-format
+msgid "Dynamic DNS %1$s (%2$s): _update() starting."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:445
+#, php-format
+msgid ""
+"Dynamic DNS %1$s (%2$s): Processing dummy update on No-IP free account. IP "
+"temporarily set to %3$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:685
+#, php-format
+msgid "Sending request to: %s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:842
+#, php-format
+msgid "Dynamic DNS %1$s (%2$s): _checkStatus() starting."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:845 src/usr/local/www/pkg_mgr_install.php:119
+msgid "Success"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:846 src/etc/inc/dyndns.class:1518
+#: src/usr/local/www/diag_smart.php:373
+msgid "Error"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:850
+msgid "Curl error occurred:"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:859 src/etc/inc/dyndns.class:880
+#: src/etc/inc/dyndns.class:899 src/etc/inc/dyndns.class:917
+#: src/etc/inc/dyndns.class:934 src/etc/inc/dyndns.class:951
+#: src/etc/inc/dyndns.class:1100 src/etc/inc/dyndns.class:1113
+#: src/etc/inc/dyndns.class:1126 src/etc/inc/dyndns.class:1143
+#: src/etc/inc/dyndns.class:1272 src/etc/inc/dyndns.class:1336
+#: src/etc/inc/dyndns.class:1394 src/etc/inc/dyndns.class:1415
+#: src/etc/inc/dyndns.class:1460 src/etc/inc/dyndns.class:1472
+msgid "IP Address Changed Successfully!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:862 src/etc/inc/dyndns.class:885
+#: src/etc/inc/dyndns.class:904 src/etc/inc/dyndns.class:922
+#: src/etc/inc/dyndns.class:939 src/etc/inc/dyndns.class:956
+#: src/etc/inc/dyndns.class:1023 src/etc/inc/dyndns.class:1041
+#: src/etc/inc/dyndns.class:1061 src/etc/inc/dyndns.class:1079
+#: src/etc/inc/dyndns.class:1089 src/etc/inc/dyndns.class:1103
+#: src/etc/inc/dyndns.class:1116 src/etc/inc/dyndns.class:1131
+#: src/etc/inc/dyndns.class:1150 src/etc/inc/dyndns.class:1174
+#: src/etc/inc/dyndns.class:1193 src/etc/inc/dyndns.class:1213
+#: src/etc/inc/dyndns.class:1233 src/etc/inc/dyndns.class:1260
+#: src/etc/inc/dyndns.class:1277 src/etc/inc/dyndns.class:1341
+#: src/etc/inc/dyndns.class:1359 src/etc/inc/dyndns.class:1382
+#: src/etc/inc/dyndns.class:1407 src/etc/inc/dyndns.class:1444
+#: src/etc/inc/dyndns.class:1465 src/etc/inc/dyndns.class:1480
+msgid "Unknown Response"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:863 src/etc/inc/dyndns.class:886
+#: src/etc/inc/dyndns.class:905 src/etc/inc/dyndns.class:923
+#: src/etc/inc/dyndns.class:940 src/etc/inc/dyndns.class:957
+#: src/etc/inc/dyndns.class:1042 src/etc/inc/dyndns.class:1062
+#: src/etc/inc/dyndns.class:1080 src/etc/inc/dyndns.class:1090
+#: src/etc/inc/dyndns.class:1104 src/etc/inc/dyndns.class:1117
+#: src/etc/inc/dyndns.class:1132 src/etc/inc/dyndns.class:1151
+#: src/etc/inc/dyndns.class:1175 src/etc/inc/dyndns.class:1194
+#: src/etc/inc/dyndns.class:1214 src/etc/inc/dyndns.class:1234
+#: src/etc/inc/dyndns.class:1261 src/etc/inc/dyndns.class:1278
+#: src/etc/inc/dyndns.class:1326 src/etc/inc/dyndns.class:1342
+#: src/etc/inc/dyndns.class:1360 src/etc/inc/dyndns.class:1383
+#: src/etc/inc/dyndns.class:1408 src/etc/inc/dyndns.class:1445
+#: src/etc/inc/dyndns.class:1466 src/etc/inc/dyndns.class:1481
+msgid "PAYLOAD:"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:870
+msgid ""
+"The DNS-O-Matic username or password specified are incorrect. No updates "
+"will be distributed to services until this is resolved."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:872
+msgid ""
+"The hostname specified is not a fully-qualified domain name. If no hostnames "
+"included, notfqdn will be returned once."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:874
+msgid ""
+"The hostname passed could not be matched to any services configured. The "
+"service field will be blank in the return code."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:876
+msgid ""
+"Up to 20 hosts my be updated. numhost is returned if attempting to update "
+"more than 20 or update a round-robin."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:878
+msgid "The hostname is blocked for update abuse."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:883
+msgid "DNS error encountered. Stop updating for 30 minutes."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:892 src/etc/inc/dyndns.class:912
+#: src/etc/inc/dyndns.class:929 src/etc/inc/dyndns.class:946
+#: src/etc/inc/dyndns.class:1267 src/etc/inc/dyndns.class:1331
+#: src/etc/inc/dyndns.class:1453
+msgid "Not A FQDN!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:894 src/etc/inc/dyndns.class:1455
+msgid "No such host"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:896 src/etc/inc/dyndns.class:914
+#: src/etc/inc/dyndns.class:931 src/etc/inc/dyndns.class:948
+#: src/etc/inc/dyndns.class:1097 src/etc/inc/dyndns.class:1110
+#: src/etc/inc/dyndns.class:1123 src/etc/inc/dyndns.class:1333
+#: src/etc/inc/dyndns.class:1391 src/etc/inc/dyndns.class:1434
+#: src/etc/inc/dyndns.class:1457
+msgid "No Change In IP Address"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:902 src/etc/inc/dyndns.class:920
+#: src/etc/inc/dyndns.class:937 src/etc/inc/dyndns.class:954
+#: src/etc/inc/dyndns.class:1129 src/etc/inc/dyndns.class:1275
+#: src/etc/inc/dyndns.class:1339 src/etc/inc/dyndns.class:1397
+#: src/etc/inc/dyndns.class:1463
+msgid "User Authorization Failed"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:968
+msgid "IP address is current, no update performed."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:972
+msgid "DNS hostname update successful."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:976
+msgid "Hostname supplied does not exist."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:979
+msgid "Invalid Username."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:982
+msgid "Invalid Password."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:985
+msgid "Too many updates sent."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:988
+msgid "Account disabled due to violation of No-IP terms of service."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:991
+msgid ""
+"Invalid IP. IP Address submitted is improperly formatted or is a private IP "
+"address or is on a blacklist."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:994
+msgid "Disabled / Locked Hostname."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:997
+msgid ""
+"Host updated is configured as a web redirect and no update was performed."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1000
+msgid "Group supplied does not exist."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1003
+msgid "DNS group update is successful."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1007
+msgid "DNS group is current, no update performed."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1011
+msgid "Update client support not available for supplied hostname or group."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1014
+msgid "Hostname supplied does not have offline settings configured."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1017 src/etc/inc/dyndns.class:1020
+msgid ""
+"Client disabled. Client should exit and not perform any more updates without "
+"user intervention."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1024
+msgid "Unknown Response:"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1030
+msgid "Authentication Failed: Username and/or Password was Incorrect."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1032
+msgid "No Service: Dynamic DNS Service has been disabled for this domain."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1034
+msgid "Illegal Input: Self-Explanatory"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1036
+msgid "Too Soon: Not Enough Time Has Elapsed Since Last Update"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1038
+msgid "IP Updated Successfully!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1051
+msgid "Error 799"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1051 src/etc/inc/dyndns.class:1053
+msgid "Update Failed!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1053
+msgid "Error 700"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1055 src/etc/inc/dyndns.class:1058
+#: src/etc/inc/dyndns.class:1076 src/etc/inc/dyndns.class:1086
+#: src/etc/inc/dyndns.class:1171 src/etc/inc/dyndns.class:1187
+#: src/etc/inc/dyndns.class:1207 src/etc/inc/dyndns.class:1227
+#: src/etc/inc/dyndns.class:1254 src/etc/inc/dyndns.class:1309
+#: src/etc/inc/dyndns.class:1356 src/etc/inc/dyndns.class:1370
+msgid "IP Address Updated Successfully!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1068
+msgid ""
+"Bad Request - The URL was malformed. Required parameters were not provided."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1070
+msgid "Update Too Soon - Attempted to update too quickly since last change."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1072
+msgid "Database Error - There was a server-sided database error."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1074
+#, php-format
+msgid "Hostname Error - The hostname (%1$s) doesn't belong to user (%2$s)."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1138
+msgid "Not a valid username or password!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1140
+msgid "Hostname specified does not exist."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1146
+msgid "Hostname specified exists, but not under the username specified."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1148
+msgid "Updating too frequently, considered abuse."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1157 src/etc/inc/dyndns.class:1221
+msgid "Bad Request - The IP provided was invalid."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1159
+msgid "Bad Request - Required parameters were not provided."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1161
+msgid ""
+"Bad Request - Illegal characters in either the username or the password."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1163
+msgid "Invalid password."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1165
+msgid "This account has been administratively locked."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1167
+msgid "Updating too frequently."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1169 src/etc/inc/dyndns.class:1183
+#: src/etc/inc/dyndns.class:1201
+msgid "Server side error."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1185
+msgid "Badly Formed Request (check the settings)."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1203 src/etc/inc/dyndns.class:1223
+msgid "Bad Request - A hostname was not provided."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1205 src/etc/inc/dyndns.class:1225
+#: src/etc/inc/dyndns.class:1252
+msgid "Invalid username or password."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1210 src/etc/inc/dyndns.class:1230
+#: src/etc/inc/dyndns.class:1257 src/etc/inc/dyndns.class:1269
+msgid "No Change In IP Address."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1248
+msgid "Bad Request - Missing/Invalid Parameters."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1250
+msgid "Bad Request - Invalid Tunnel ID."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1284
+msgid "Route53 API call failed"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1288
+msgid "IP address changed successfully"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1311 src/etc/inc/dyndns.class:1475
+msgid "Result did not match."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1318
+#, php-format
+msgid "%1$s updated to %2$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1321
+msgid ""
+"Invalid Credentials! Don't forget to use API Key for password field with "
+"CloudFlare."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1323
+msgid "Zone or Host ID was not found, check the hostname."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1325
+msgid "UNKNOWN ERROR"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1348
+msgid "Wrong values - Update could not be completed."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1350
+msgid "Unknown username - User does not exist."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1352
+msgid "Wrong password - Remember password is case sensitive."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1354
+msgid "User unable to administer the selected domain."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1389
+msgid "Not A FQDN"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1399
+msgid "Hostname does not exist or DynDNS not enabled"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1401
+msgid "Bad request"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1403
+msgid "Dynamic DNS access has been blocked!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1405
+msgid "Error on Google's end, retry in 5 minutes"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1419 src/etc/inc/dyndns.class:1477
+msgid "Invalid username or password"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1422
+msgid "Account suspended"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1425
+msgid "Account revoked"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1428
+msgid "Record does not exist in the system. Unable to update record"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1431
+msgid "User does not have access to this record"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1438
+msgid "General system error recognized by the system"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1441
+msgid "General system error unrecognized by the system"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1493
+#, php-format
+msgid "DynDNS updated IP Address on %1$s (%2$s) to %3$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1494 src/etc/inc/dyndns.class:1502
+#: src/etc/inc/services.inc:2674 src/etc/inc/services.inc:2686
+#, php-format
+msgid "phpDynDNS: updating cache file %1$s: %2$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1501
+#, php-format
+msgid "DynDNS updated IPv6 Address on %1$s (%2$s) to %3$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1517
+msgid "ERROR!"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1523
+msgid "No Dynamic DNS Service provider was selected."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1526
+msgid "No Username Provided."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1529
+msgid "No Password Provided."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1532
+msgid "No Hostname Provided."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1535
+msgid "The Dynamic DNS Service provided is not yet supported."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1538
+msgid "No Update URL Provided."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1541
+msgid "Invalid ZoneID"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1544
+msgid "Invalid TTL"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1547
+#, php-format
+msgid ""
+"No change in my IP address and/or %s days has not passed. Not updating "
+"dynamic DNS entry."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1550
+msgid "Unknown Response."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1569
+#, php-format
+msgid "Dynamic DNS %1$s (%2$s): _detectChange() starting."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1576
+#, php-format
+msgid ""
+"Dynamic Dns (%s): Current WAN IP could not be determined, skipping update "
+"process."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1579
+#, php-format
+msgid "Dynamic Dns (%1$s): Current WAN IP: %2$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1587
+#, php-format
+msgid "Cached IPv6: %s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1593
+msgid "No Cached IPv6 found."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1601
+#, php-format
+msgid "Cached IP: %s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1607
+msgid "No Cached IP found."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1621
+msgid "Dynamic Dns: cacheIP != wan_ip. Updating."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1622
+#, php-format
+msgid "Cached IP: %1$s WAN IP: %2$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1627
+#, php-format
+msgid "Dynamic Dns: More than %s days. Updating."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1632
+msgid "Initial update."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1669
+#, php-format
+msgid "Dynamic DNS %1$s (%2$s): _checkIP() starting."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1694
+#, php-format
+msgid ""
+"Dynamic DNS %1$s debug information (%2$s): Could not resolve %3$s to IP "
+"using interface IP %4$s."
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1713
+#, php-format
+msgid "Dynamic DNS %1$s (%2$s): %3$s extracted from %4$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1716
+#, php-format
+msgid "Dynamic DNS %1$s (%2$s): IP address could not be extracted from %3$s"
+msgstr ""
+
+#: src/etc/inc/dyndns.class:1721
+#, php-format
+msgid "Dynamic DNS %1$s (%2$s): %3$s extracted from local system."
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:113
+msgid "Easy Rule: Blocked from Firewall Log View"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:204 src/etc/inc/easyrule.inc:216
+msgid "Entry added"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:213
+msgid "Hosts blocked from Firewall Log view"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:295
+msgid "Easy Rule: Passed from Firewall Log View"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:354
+msgid "Tried to block invalid IP:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:358 src/etc/inc/easyrule.inc:381
+#: src/etc/inc/easyrule.inc:438
+msgid "Invalid interface for block rule:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:361
+msgid "Host added successfully"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:363
+msgid "Failed to create block rule, alias, or add host."
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:366
+msgid "Tried to block but had no host IP or interface"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:368
+msgid "Unknown block error."
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:377
+msgid "Tried to unblock invalid IP:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:387 src/etc/inc/easyrule.inc:445
+msgid "No block rules set on interface:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:422
+msgid "Host unblocked successfully"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:425
+msgid "Host is not on block list: "
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:429
+msgid "Tried to unblock but had no host IP or interface"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:460
+msgid "Invalid interface for pass rule:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:463
+msgid "Invalid protocol for pass rule:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:466
+msgid "Tried to pass invalid source IP:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:469
+msgid "Tried to pass invalid destination IP:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:473
+msgid "Missing destination port:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:476
+msgid "Tried to pass invalid destination port:"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:483
+msgid "Successfully added pass rule!"
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:485
+msgid "Failed to add pass rule."
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:488
+msgid "Missing parameters for pass rule."
+msgstr ""
+
+#: src/etc/inc/easyrule.inc:490
+msgid "Unknown pass error."
+msgstr ""
+
+#: src/etc/inc/filter.inc:48
+msgid "Alternate Host"
+msgstr ""
+
+#: src/etc/inc/filter.inc:49
+msgid "Datagram conversion error"
+msgstr ""
+
+#: src/etc/inc/filter.inc:50
+msgid "Echo reply"
+msgstr ""
+
+#: src/etc/inc/filter.inc:51
+msgid "Echo request"
+msgstr ""
+
+#: src/etc/inc/filter.inc:52
+msgid "FQDN reply"
+msgstr ""
+
+#: src/etc/inc/filter.inc:53
+msgid "FQDN query"
+msgstr ""
+
+#: src/etc/inc/filter.inc:54
+msgid "Group membership query"
+msgstr ""
+
+#: src/etc/inc/filter.inc:55
+msgid "Group membership report"
+msgstr ""
+
+#: src/etc/inc/filter.inc:56
+msgid "Group membership termination"
+msgstr ""
+
+#: src/etc/inc/filter.inc:57
+msgid "Information reply"
+msgstr ""
+
+#: src/etc/inc/filter.inc:58
+msgid "Information request"
+msgstr ""
+
+#: src/etc/inc/filter.inc:59
+msgid "IPv6 I-am-here"
+msgstr ""
+
+#: src/etc/inc/filter.inc:60
+msgid "IPv6 where-are-you"
+msgstr ""
+
+#: src/etc/inc/filter.inc:61
+msgid "Multicast listener done"
+msgstr ""
+
+#: src/etc/inc/filter.inc:62
+msgid "Multicast listener report"
+msgstr ""
+
+#: src/etc/inc/filter.inc:63
+msgid "Multicast listener query"
+msgstr ""
+
+#: src/etc/inc/filter.inc:64
+msgid "Address mask reply"
+msgstr ""
+
+#: src/etc/inc/filter.inc:65
+msgid "Address mask request"
+msgstr ""
+
+#: src/etc/inc/filter.inc:66
+msgid "Mobile host redirect"
+msgstr ""
+
+#: src/etc/inc/filter.inc:67
+msgid "Mobile registration reply"
+msgstr ""
+
+#: src/etc/inc/filter.inc:68
+msgid "Mobile registration request"
+msgstr ""
+
+#: src/etc/inc/filter.inc:69
+msgid "mtrace messages"
+msgstr ""
+
+#: src/etc/inc/filter.inc:70
+msgid "mtrace resp"
+msgstr ""
+
+#: src/etc/inc/filter.inc:71
+msgid "Neighbor advertisement"
+msgstr ""
+
+#: src/etc/inc/filter.inc:72
+msgid "Neighbor solicitation"
+msgstr ""
+
+#: src/etc/inc/filter.inc:73
+msgid "Node information request"
+msgstr ""
+
+#: src/etc/inc/filter.inc:74
+msgid "Node information reply"
+msgstr ""
+
+#: src/etc/inc/filter.inc:75
+msgid "Parameter problem (invalid IP header)"
+msgstr ""
+
+#: src/etc/inc/filter.inc:76
+msgid "Photuris"
+msgstr ""
+
+#: src/etc/inc/filter.inc:77 src/etc/inc/unbound.inc:746
+msgid "Redirect"
+msgstr ""
+
+#: src/etc/inc/filter.inc:78
+msgid "Router advertisement"
+msgstr ""
+
+#: src/etc/inc/filter.inc:79
+msgid "Router solicitation"
+msgstr ""
+
+#: src/etc/inc/filter.inc:80
+msgid "Router renumbering"
+msgstr ""
+
+#: src/etc/inc/filter.inc:81
+msgid "SKIP"
+msgstr ""
+
+#: src/etc/inc/filter.inc:82
+msgid "Source quench"
+msgstr ""
+
+#: src/etc/inc/filter.inc:83
+msgid "Timestamp reply"
+msgstr ""
+
+#: src/etc/inc/filter.inc:84
+msgid "Timestamp"
+msgstr ""
+
+#: src/etc/inc/filter.inc:85
+msgid "Time exceeded"
+msgstr ""
+
+#: src/etc/inc/filter.inc:86
+msgid "Packet too big"
+msgstr ""
+
+#: src/etc/inc/filter.inc:87 src/usr/local/www/diag_dns.php:308
+#: src/usr/local/www/diag_traceroute.php:37
+#: src/usr/local/www/diag_traceroute.php:121
+#: src/usr/local/www/diag_traceroute.php:170 src/usr/local/www/head.inc:393
+msgid "Traceroute"
+msgstr ""
+
+#: src/etc/inc/filter.inc:88
+msgid "Destination unreachable"
+msgstr ""
+
+#: src/etc/inc/filter.inc:89
+msgid "Who are you reply"
+msgstr ""
+
+#: src/etc/inc/filter.inc:90
+msgid "Who are you request"
+msgstr ""
+
+#: src/etc/inc/filter.inc:221
+msgid "Initializing"
+msgstr ""
+
+#: src/etc/inc/filter.inc:233
+msgid "Configuring firewall"
+msgstr ""
+
+#: src/etc/inc/filter.inc:240
+msgid "Creating aliases"
+msgstr ""
+
+#: src/etc/inc/filter.inc:246
+msgid "Generating Limiter rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:249
+msgid "Generating NAT rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:255
+msgid "Generating filter rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:262
+msgid "Generating ALTQ queues"
+msgstr ""
+
+#: src/etc/inc/filter.inc:267
+msgid "Loading filter rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:274
+msgid "Filter is disabled.  Not loading rules."
+msgstr ""
+
+#: src/etc/inc/filter.inc:276 src/etc/inc/filter.inc:528
+#: src/etc/inc/interfaces.inc:177 src/etc/inc/interfaces.inc:201
+#: src/etc/inc/interfaces.inc:347 src/etc/inc/interfaces.inc:409
+#: src/etc/inc/interfaces.inc:717 src/etc/inc/interfaces.inc:1071
+#: src/etc/inc/interfaces.inc:1102 src/etc/inc/interfaces.inc:1126
+#: src/etc/inc/interfaces.inc:1147 src/etc/inc/interfaces.inc:2181
+#: src/etc/inc/pkg-utils.inc:561 src/etc/inc/pkg-utils.inc:709
+#: src/etc/inc/pkg-utils.inc:732 src/etc/inc/pkg-utils.inc:768
+#: src/etc/inc/pkg-utils.inc:773 src/etc/inc/pkg-utils.inc:778
+#: src/etc/inc/pkg-utils.inc:796 src/etc/inc/pkg-utils.inc:813
+#: src/etc/inc/pkg-utils.inc:835 src/etc/inc/pkg-utils.inc:876
+#: src/etc/inc/pkg-utils.inc:902 src/etc/inc/pkg-utils.inc:945
+#: src/etc/inc/pkg-utils.inc:964 src/etc/inc/rrd.inc:970
+#: src/etc/inc/services.inc:1595 src/etc/inc/services.inc:1998
+#: src/etc/inc/services.inc:2215 src/etc/inc/services.inc:2257
+#: src/etc/inc/services.inc:2478 src/etc/inc/system.inc:1213
+#: src/etc/inc/system.inc:1311 src/etc/inc/system.inc:1614
+#: src/etc/inc/system.inc:2186
+msgid "done."
+msgstr ""
+
+#: src/etc/inc/filter.inc:372
+msgid "Setting up logging information"
+msgstr ""
+
+#: src/etc/inc/filter.inc:377
+msgid "Setting up SCRUB information"
+msgstr ""
+
+#: src/etc/inc/filter.inc:423
+#, php-format
+msgid "The line in question reads [%1$d]: %2$s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:430
+msgid "PF was wedged/busy and has been reset."
+msgstr ""
+
+#: src/etc/inc/filter.inc:436 src/etc/inc/filter.inc:437
+#, php-format
+msgid "There were error(s) loading the rules: %1$s - %2$s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:513
+msgid "Processing down interface states"
+msgstr ""
+
+#: src/etc/inc/filter.inc:517
+msgid "Running plugins"
+msgstr ""
+
+#: src/etc/inc/filter.inc:521
+msgid "Running plugins (pf)"
+msgstr ""
+
+#: src/etc/inc/filter.inc:523
+msgid "Plugins completed."
+msgstr ""
+
+#: src/etc/inc/filter.inc:526
+msgid "Done"
+msgstr ""
+
+#: src/etc/inc/filter.inc:750
+#, php-format
+msgid "Aliases with numeric-only names are not valid. Skipping alias %s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:828
+msgid "Creating gateway group item..."
+msgstr ""
+
+#: src/etc/inc/filter.inc:868
+#, php-format
+msgid "Setting up route with %1$s on %2$s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:872
+#, php-format
+msgid "Too many members in group %s, gateway group truncated in ruleset."
+msgstr ""
+
+#: src/etc/inc/filter.inc:884
+#, php-format
+msgid ""
+"An error occurred while trying to find the interface got %s .  The rule has "
+"not been added."
+msgstr ""
+
+#: src/etc/inc/filter.inc:1249
+#, php-format
+msgid "Creating reflection NAT rule for %s..."
+msgstr ""
+
+#: src/etc/inc/filter.inc:1347
+#, php-format
+msgid "Creating reflection rule for %s..."
+msgstr ""
+
+#: src/etc/inc/filter.inc:1468
+msgid "Not installing NAT reflection rules for a port range > 500"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1474
+msgid "Installing partial NAT reflection rules. Maximum 1,000 reached."
+msgstr ""
+
+#: src/etc/inc/filter.inc:1555
+msgid "localhost"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1564
+msgid "static route"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1576
+msgid "DHCP alias address"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1610
+msgid "PPPoE server"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1621
+msgid "L2TP server"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1630
+msgid "OpenVPN server"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1639
+msgid "OpenVPN client"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1649
+msgid "IPsec client"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1685
+msgid "Auto created rule for ISAKMP"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1695
+msgid "Auto created rule"
+msgstr ""
+
+#: src/etc/inc/filter.inc:1828
+msgid "Creating 1:1 rules..."
+msgstr ""
+
+#: src/etc/inc/filter.inc:2013
+#, php-format
+msgid "Creating advanced outbound rule %s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2060
+msgid "Creating outbound NAT rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2067
+msgid "Creating automatic outbound rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2097
+msgid "Setting up TFTP helper"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2141
+#, php-format
+msgid "Creating NAT rule %s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2371
+#, php-format
+msgid "Creating filter rule %s ..."
+msgstr ""
+
+#: src/etc/inc/filter.inc:2395
+#, php-format
+msgid "filter_generate_port: %1$s is not a valid %2$s port."
+msgstr ""
+
+#: src/etc/inc/filter.inc:2632
+#, php-format
+msgid "Creating filter rules %s ..."
+msgstr ""
+
+#: src/etc/inc/filter.inc:2687
+#, php-format
+msgid "Unresolvable source alias '%1$s' for rule '%2$s'"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2692
+#, php-format
+msgid "Unresolvable destination alias '%1$s' for rule '%2$s'"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2696
+msgid "Setting up pass/block rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2723
+#, php-format
+msgid "Setting up pass/block rules %s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:2747
+#, php-format
+msgid "The gateway: %s is invalid or unknown, not using it."
+msgstr ""
+
+#: src/etc/inc/filter.inc:2766
+#, php-format
+msgid "Creating rule %s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:3009
+#, php-format
+msgid "[TDR DEBUG] status true -- rule type '%s'"
+msgstr ""
+
+#: src/etc/inc/filter.inc:3053
+msgid "Creating default rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:3734
+msgid "Creating IPsec rules..."
+msgstr ""
+
+#: src/etc/inc/filter.inc:3787
+msgid ""
+"Please use filter_tdr_install_cron() function tdr_install_cron will be "
+"deprecated!"
+msgstr ""
+
+#: src/etc/inc/filter.inc:3836
+msgid "Installed 15 minute filter reload for Time Based Rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:3843
+msgid "Removed 15 minute filter reload for Time Based Rules"
+msgstr ""
+
+#: src/etc/inc/filter.inc:4227
+#, php-format
+msgid "Checking for %1$s PF hooks in package %2$s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:4240
+#, php-format
+msgid "Processing early %1$s rules for package %2$s"
+msgstr ""
+
+#: src/etc/inc/filter.inc:4250
+#, php-format
+msgid "There was an error while parsing the package filter rules for %s."
+msgstr ""
+
+#: src/etc/inc/filter.inc:4318
+msgid "delete this separator"
+msgstr ""
+
+#: src/etc/inc/filter_log.inc:227 src/etc/inc/filter_log.inc:249
+#: src/etc/inc/filter_log.inc:272 src/etc/inc/filter_log.inc:295
+#, php-format
+msgid ""
+"There was a error parsing log entry: %s. Please report to mailing list or "
+"forum."
+msgstr ""
+
+#: src/etc/inc/filter_log.inc:426
+#, php-format
+msgid ""
+"There was a error parsing rule number: %s. Please report to mailing list or "
+"forum."
+msgstr ""
+
+#: src/etc/inc/filter_log.inc:436
+#, php-format
+msgid ""
+"There was a error parsing rule: %s. Please report to mailing list or forum."
+msgstr ""
+
+#: src/etc/inc/filter_log.inc:450
+#, php-format
+msgid "Service %1$s/%2$s: %3$s"
+msgstr ""
+
+#: src/etc/inc/functions.inc:88
+msgid "Acknowledge All Notices"
+msgstr ""
+
+#: src/etc/inc/functions.inc:89
+msgid "Click to Acknowledge"
+msgstr ""
+
+#: src/etc/inc/functions.inc:109
+msgid "unread notice"
+msgstr ""
+
+#: src/etc/inc/functions.inc:111
+msgid "unread notices"
+msgstr ""
+
+#: src/etc/inc/gmirror.inc:65
+msgid "No mirrors found."
+msgstr ""
+
+#: src/etc/inc/gmirror.inc:73 src/etc/inc/shaper.inc:1201
+#: src/etc/inc/shaper.inc:3283 src/usr/local/www/diag_gmirror.php:221
+#: src/usr/local/www/diag_gmirror.php:302
+#: src/usr/local/www/firewall_aliases.php:192
+#: src/usr/local/www/firewall_aliases_edit.php:153
+#: src/usr/local/www/firewall_aliases_import.php:65
+#: src/usr/local/www/firewall_schedule.php:93
+#: src/usr/local/www/interfaces_groups.php:79
+#: src/usr/local/www/load_balancer_monitor.php:106
+#: src/usr/local/www/load_balancer_monitor_edit.php:86
+#: src/usr/local/www/load_balancer_pool.php:120
+#: src/usr/local/www/load_balancer_pool_edit.php:73
+#: src/usr/local/www/load_balancer_virtual_server.php:140
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:70
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:75
+#: src/usr/local/www/pkg_mgr.php:66 src/usr/local/www/pkg_mgr.php:158
+#: src/usr/local/www/pkg_mgr_installed.php:76
+#: src/usr/local/www/services_captiveportal_filemanager.php:189
+#: src/usr/local/www/services_checkip.php:88
+#: src/usr/local/www/services_checkip_edit.php:63
+#: src/usr/local/www/services_igmpproxy.php:83
+#: src/usr/local/www/status_gateways.php:60
+#: src/usr/local/www/status_lb_pool.php:133
+#: src/usr/local/www/status_lb_vs.php:63
+#: src/usr/local/www/status_openvpn.php:236
+#: src/usr/local/www/status_openvpn.php:296
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
+#: src/usr/local/www/system_crlmanager.php:583
+#: src/usr/local/www/system_gateways.php:257
+#: src/usr/local/www/system_gateways_edit.php:109
+#: src/usr/local/www/system_groupmanager.php:231
+#: src/usr/local/www/system_usermanager.php:436
+#: src/usr/local/www/system_usermanager.php:503
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:76
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:50
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:384
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:34
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:135
+msgid "Name"
+msgstr ""
+
+#: src/etc/inc/gmirror.inc:74 src/usr/local/www/diag_arp.php:336
+#: src/usr/local/www/diag_gmirror.php:222 src/usr/local/www/easyrule.php:122
+#: src/usr/local/www/index.php:294 src/usr/local/www/pkg_mgr_install.php:490
+#: src/usr/local/www/status_captiveportal.php:130
+#: src/usr/local/www/status_captiveportal_expire.php:57
+#: src/usr/local/www/status_captiveportal_test.php:57
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
+#: src/usr/local/www/status_captiveportal_vouchers.php:57
+#: src/usr/local/www/status_carp.php:106 src/usr/local/www/status_carp.php:178
+#: src/usr/local/www/status_dhcp_leases.php:36
+#: src/usr/local/www/status_dhcpv6_leases.php:37
+#: src/usr/local/www/status_filter_reload.php:33
+#: src/usr/local/www/status_gateway_groups.php:47
+#: src/usr/local/www/status_gateways.php:41
+#: src/usr/local/www/status_gateways.php:66
+#: src/usr/local/www/status_graph.php:125
+#: src/usr/local/www/status_graph_cpu.php:33
+#: src/usr/local/www/status_interfaces.php:93
+#: src/usr/local/www/status_interfaces.php:115
+#: src/usr/local/www/status_ipsec.php:459
+#: src/usr/local/www/status_ipsec.php:487
+#: src/usr/local/www/status_ipsec_leases.php:32
+#: src/usr/local/www/status_ipsec_leases.php:57
+#: src/usr/local/www/status_ipsec_sad.php:36
+#: src/usr/local/www/status_ipsec_spd.php:39
+#: src/usr/local/www/status_lb_pool.php:59
+#: src/usr/local/www/status_lb_vs.php:45 src/usr/local/www/status_lb_vs.php:66
+#: src/usr/local/www/status_logs.php:96 src/usr/local/www/status_logs.php:99
+#: src/usr/local/www/status_logs_filter.php:102
+#: src/usr/local/www/status_logs_filter_dynamic.php:82
+#: src/usr/local/www/status_logs_filter_summary.php:67
+#: src/usr/local/www/status_logs_settings.php:187
+#: src/usr/local/www/status_logs_vpn.php:84
+#: src/usr/local/www/status_ntpd.php:283 src/usr/local/www/status_ntpd.php:295
+#: src/usr/local/www/status_openvpn.php:30
+#: src/usr/local/www/status_openvpn.php:156
+#: src/usr/local/www/status_openvpn.php:237
+#: src/usr/local/www/status_openvpn.php:297
+#: src/usr/local/www/status_pkglogs.php:71
+#: src/usr/local/www/status_queues.php:110
+#: src/usr/local/www/status_services.php:56
+#: src/usr/local/www/status_services.php:88
+#: src/usr/local/www/status_upnp.php:42
+#: src/usr/local/www/status_wireless.php:31
+#: src/usr/local/www/status_wireless.php:62
+#: src/usr/local/www/widgets/widgets/carp_status.widget.php:39
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:80
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:207
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:223
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:64
+msgid "Status"
+msgstr ""
+
+#: src/etc/inc/gmirror.inc:75 src/usr/local/www/diag_gmirror.php:223
+msgid "Component"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:185
+msgid "No gateways to monitor. dpinger will not run."
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:233 src/etc/inc/gwlb.inc:274
+#, php-format
+msgid ""
+"Removing static route for monitor %1$s and adding a new route through %2$s"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:302
+#, php-format
+msgid "Error starting gateway monitor for %s"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:315
+#, php-format
+msgid "dpinger: No dpinger session running for gateway %s"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:329
+#, php-format
+msgid "dpinger: cannot connect to status socket %1$s - %2$s (%3$s)"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:983
+#, php-format
+msgid "MONITOR: %1$s is down, omitting from routing group %2$s"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:987
+#, php-format
+msgid "MONITOR: %1$s has packet loss, omitting from routing group %2$s"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:991
+#, php-format
+msgid "MONITOR: %1$s has high latency, omitting from routing group %2$s"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:1014
+#, php-format
+msgid "MONITOR: %1$s is available now, adding to routing group %2$s"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:1032
+#, php-format
+msgid ""
+"Gateways status could not be determined, considering all as up/active. "
+"(Group: %s)"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:1075
+#, php-format
+msgid "GATEWAYS: Group %1$s did not have any gateways up on tier %2$s!"
+msgstr ""
+
+#: src/etc/inc/gwlb.inc:1097
+#, php-format
+msgid "Updating gateway group gateway for %1$s - new gateway is %2$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:33
+msgid "interfaces_bring_up() was called but no variable defined."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:172
+msgid "Configuring loopback interface..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:185
+msgid "Configuring VLAN interfaces..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:209
+msgid "VLAN: called with wrong options. Problems with config!"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:214
+msgid "interface_vlan_configure called with if undefined."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:260 src/etc/inc/interfaces.inc:355
+#, php-format
+msgid "QinQ compat VLAN: called with wrong options. Problems with config!%s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:267
+#, php-format
+msgid "interface_qinq_configure called with if undefined.%s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:272
+#, php-format
+msgid "interface_qinq_configure called with invalid if.%s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:338
+msgid "Configuring QinQ interfaces..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:363
+#, php-format
+msgid "interface_qinq2_configure called with if undefined.%s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:384
+msgid "Creating wireless clone interfaces..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:462
+#, php-format
+msgid "No members found on %s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:526
+msgid "realif not defined in interfaces bridge - up"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:545
+msgid "bridgeif not defined -- could not bring interface up"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:700
+msgid "Configuring LAGG interfaces..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:851
+msgid "Could not bring greif up -- variable not defined."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:934
+msgid ""
+"could not bring realif up -- variable not defined -- "
+"interface_gif_configure()"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:981
+msgid "could not bring gifif up -- variable not defined"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1063 src/etc/inc/interfaces.inc:1093
+#: src/etc/inc/interfaces.inc:1117 src/etc/inc/interfaces.inc:1135
+#, php-format
+msgid "Configuring %s interface..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1067 src/etc/inc/interfaces.inc:1096
+#: src/etc/inc/interfaces.inc:1120 src/etc/inc/interfaces.inc:1138
+#, php-format
+msgid "Configuring %s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1221
+#, php-format
+msgid "Calling interface down for interface %1$s, destroy is %2$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1235
+msgid "Wrong parameters used during interface_bring_down"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1406
+msgid "Enter CARP maintenance mode"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1610
+#, php-format
+msgid "Can't find PPP config for %s in interface_ppps_configure()."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1668
+#, php-format
+msgid ""
+"Could not get a Local IP address for PPTP/L2TP link on %s in "
+"interfaces_ppps_configure. Using 0.0.0.0 ip!"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1675
+#, php-format
+msgid ""
+"Could not get a PPTP/L2TP Remote IP address from %1$s for %2$s in "
+"interfaces_ppps_configure."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1682
+#, php-format
+msgid ""
+"Device %s does not exist. PPP link cannot start without the modem device."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:1687
+#, php-format
+msgid "Unknown %s configured as ppp interface."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2007
+#, php-format
+msgid "Error: cannot open mpd_%1$s.conf in interface_ppps_configure().%2$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2102
+#, php-format
+msgid "Starting 3gstats.php on device '%1$s' for interface '%2$s'"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2119
+msgid "Configuring CARP settings..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2160
+msgid "waiting for pfsync..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2166
+#, php-format
+msgid "pfsync done in %s seconds."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2167
+msgid "Configuring CARP settings finalize..."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2390
+#, php-format
+msgid ""
+"Interface specified for the virtual IP address %s does not exist. Skipping "
+"this VIP."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2450
+#, php-format
+msgid "Interface %s changed to hostap mode"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2454
+#, php-format
+msgid "Interface %s changed to adhoc mode"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2458
+#, php-format
+msgid "Interface %s changed to infrastructure mode"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2471
+#, php-format
+msgid "Cloning new wireless interface %s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:2476
+#, php-format
+msgid "Failed to clone interface %1$s with error code %2$s, output %3$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3097
+#, php-format
+msgid "Starting dhcp6 client for interface wan %s in DHCP6 without RA mode"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3118
+#, php-format
+msgid "OpenVPN: Resync server %s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3131
+#, php-format
+msgid "OpenVPN: Resync client %s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3266
+#, php-format
+msgid "Deny router advertisements for interface %s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3291
+msgid "Generating new MAC address."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3297
+#, php-format
+msgid ""
+"The INVALID MAC address (ff:ff:ff:ff:ff:ff) on interface %1$s has been "
+"automatically replaced with %2$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3362
+#, php-format
+msgid "There is a conflict on MTU between parent %1$s and VLAN(%2$s)"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3553 src/etc/inc/interfaces.inc:3623
+#: src/etc/inc/interfaces.inc:3687
+#, php-format
+msgid "Interface %1$s tracking non-existent interface %2$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3560 src/etc/inc/interfaces.inc:3566
+#, php-format
+msgid "Interface %1$s configured via %2$s type %3$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3629
+#, php-format
+msgid ""
+"The interface IPv4 '%1$s' address on interface '%2$s' is not valid, not "
+"configuring 6RD tunnel"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3665
+#, php-format
+msgid "rd6 %1$s with ipv6 address %2$s based on %3$s ipv4 %4$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3693 src/etc/inc/interfaces.inc:3748
+#: src/etc/inc/interfaces.inc:3834
+#, php-format
+msgid ""
+"The interface IPv4 '%1$s' address on interface '%2$s' is not public, not "
+"configuring 6RD tunnel"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3725
+#, php-format
+msgid "sixto4 %1$s with ipv6 address %2$s based on %3$s ipv4 %4$s"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:3940
+msgid "Failed to write user DUID file!"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:4341
+#, php-format
+msgid "Error: cannot open %s in DHCP6_Config_File_Override() for reading."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:4369
+#, php-format
+msgid ""
+"Error: cannot open dhclient_%s.conf in interface_dhcp_configure() for "
+"writing."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:4382
+#, php-format
+msgid "Invalid interface \"%s\" in interface_dhcp_configure()"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:4438
+#, php-format
+msgid "Could not bring up %s interface in interface_dhcp_configure()"
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:4531
+#, php-format
+msgid "Error: cannot open %s in DHCP_Config_File_Override() for reading."
+msgstr ""
+
+#: src/etc/inc/interfaces.inc:5571 src/etc/inc/service-utils.inc:358
+#: src/usr/local/www/diag_backup.php:476
+#: src/usr/local/www/firewall_nat_1to1_edit.php:457
+#: src/usr/local/www/firewall_nat_edit.php:689
+#: src/usr/local/www/firewall_nat_npt_edit.php:172
+#: src/usr/local/www/firewall_rules.php:161
+#: src/usr/local/www/firewall_rules_edit.php:1085
+#: src/usr/local/www/head.inc:321 src/usr/local/www/head.inc:339
+#: src/usr/local/www/status_graph.php:49 src/usr/local/www/status_logs.php:53
+#: src/usr/local/www/status_logs_common.inc:96
+#: src/usr/local/www/status_logs_settings.php:224
+#: src/usr/local/www/status_openvpn.php:30
+#: src/usr/local/www/vpn_openvpn_client.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:283
+#: src/usr/local/www/vpn_openvpn_server.php:633
+#: src/usr/local/www/widgets/include/openvpn.inc:22
+msgid "OpenVPN"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:26 src/etc/inc/ipsec.inc:56
+msgid "Daemon"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:27 src/etc/inc/ipsec.inc:57
+msgid "SA Manager"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:28 src/etc/inc/ipsec.inc:58
+msgid "IKE SA"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:29 src/etc/inc/ipsec.inc:59
+msgid "IKE Child SA"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:30 src/etc/inc/ipsec.inc:60
+msgid "Job Processing"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:31 src/etc/inc/ipsec.inc:61
+msgid "Configuration backend"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:32 src/etc/inc/ipsec.inc:62
+msgid "Kernel Interface"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:33 src/etc/inc/ipsec.inc:63
+#: src/usr/local/www/system_advanced_admin.php:299
+#: src/usr/local/www/system_advanced_firewall.php:380
+#: src/usr/local/www/system_advanced_misc.php:309
+#: src/usr/local/www/system_advanced_network.php:141
+#: src/usr/local/www/system_advanced_network.php:156
+#: src/usr/local/www/system_advanced_notifications.php:209
+#: src/usr/local/www/system_advanced_sysctl.php:138
+msgid "Networking"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:34 src/etc/inc/ipsec.inc:64
+msgid "ASN encoding"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:35 src/etc/inc/ipsec.inc:65
+msgid "Message encoding"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:36 src/etc/inc/ipsec.inc:66
+msgid "Integrity checker"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:37 src/etc/inc/ipsec.inc:67
+msgid "Integrity Verifier"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:38 src/etc/inc/ipsec.inc:68
+msgid "Platform Trust Service"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:39 src/etc/inc/ipsec.inc:69
+msgid "TLS handler"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:40 src/etc/inc/ipsec.inc:70
+msgid "IPsec traffic"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:41 src/etc/inc/ipsec.inc:71
+msgid "StrongSwan Lib"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:46
+msgid "Silent"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:47
+msgid "Audit"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:48
+msgid "Control"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:49
+msgid "Diag"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:50 src/usr/local/www/status_logs_common.inc:862
+msgid "Raw"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:51
+msgid "Highest"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:76
+msgid "My IP address"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:77 src/etc/inc/ipsec.inc:89
+#: src/usr/local/www/diag_arp.php:333 src/usr/local/www/services_dhcp.php:1402
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:67
+#: src/usr/local/www/services_dnsmasq_edit.php:63
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:63
+#: src/usr/local/www/services_unbound_host_edit.php:78
+#: src/usr/local/www/status_captiveportal.php:192
+#: src/usr/local/www/status_dhcp_leases.php:352
+#: src/usr/local/www/system_certmanager.php:735
+#: src/usr/local/www/vpn_l2tp_users.php:96
+#: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
+msgid "IP address"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:78 src/etc/inc/ipsec.inc:90
+msgid "Distinguished name"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:79 src/etc/inc/ipsec.inc:91
+msgid "User distinguished name"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:80 src/etc/inc/ipsec.inc:92
+msgid "ASN.1 distinguished Name"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:81 src/etc/inc/ipsec.inc:93
+msgid "KeyID tag"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:82 src/usr/local/www/head.inc:301
+#: src/usr/local/www/services_checkip.php:65
+#: src/usr/local/www/services_checkip_edit.php:106
+#: src/usr/local/www/services_dhcp.php:1045
+#: src/usr/local/www/services_dhcp_edit.php:588
+#: src/usr/local/www/services_dhcpv6.php:751
+#: src/usr/local/www/services_dyndns.php:67
+#: src/usr/local/www/services_dyndns_edit.php:242
+#: src/usr/local/www/services_rfc2136.php:58
+#: src/usr/local/www/services_rfc2136_edit.php:148
+msgid "Dynamic DNS"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:87 src/usr/local/www/diag_traceroute.php:142
+#: src/usr/local/www/firewall_nat_1to1_edit.php:297
+#: src/usr/local/www/firewall_nat_1to1_edit.php:344
+#: src/usr/local/www/firewall_nat_edit.php:536
+#: src/usr/local/www/firewall_nat_edit.php:576
+#: src/usr/local/www/firewall_nat_edit.php:748
+#: src/usr/local/www/firewall_nat_out_edit.php:523
+#: src/usr/local/www/firewall_nat_out_edit.php:548
+#: src/usr/local/www/firewall_rules_edit.php:1281
+#: src/usr/local/www/firewall_rules_edit.php:1485
+#: src/usr/local/www/interfaces.php:2976
+msgid "Any"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:88
+msgid "Peer IP address"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:166
+msgid "Hybrid RSA + Xauth"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:167
+msgid "Mutual RSA + Xauth"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:168
+msgid "Mutual PSK + Xauth"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:169
+msgid "EAP-TLS"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:170
+msgid "EAP-RADIUS"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:171
+msgid "EAP-MSChapv2"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:172
+msgid "Mutual RSA"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:173
+msgid "Mutual PSK"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:184
+msgid "Tunnel IPv4"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:185
+msgid "Tunnel IPv6"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:186 src/usr/local/www/system_authservers.php:236
+msgid "Transport"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:197
+msgid "off"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:198
+msgid "1 (768 bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:199
+msgid "2 (1024 bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:200
+msgid "5 (1536 bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:201
+msgid "14 (2048 bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:202
+msgid "15 (3072 bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:203
+msgid "16 (4096 bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:204
+msgid "17 (6144 bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:205
+msgid "18 (8192 bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:206
+msgid "19 (nist ecp256)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:207
+msgid "20 (nist ecp384)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:208
+msgid "21 (nist ecp521)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:209
+msgid "22 (1024(sub 160) bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:210
+msgid "23 (2048(sub 224) bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:211
+msgid "24 (2048(sub 256) bit)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:212
+msgid "28 (brainpool ecp256)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:213
+msgid "29 (brainpool ecp384)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:214
+msgid "30 (brainpool ecp512)"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:411 src/usr/local/www/vpn_ipsec.php:319
+msgid "Mobile Client"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:414 src/etc/inc/pfsense-utils.inc:2989
+#: src/etc/inc/shaper.inc:3866 src/etc/inc/shaper.inc:4170
+#: src/usr/local/www/diag_pftop.php:116
+#: src/usr/local/www/firewall_nat_edit.php:913
+#: src/usr/local/www/firewall_rules_edit.php:1596
+#: src/usr/local/www/interfaces.php:1658 src/usr/local/www/interfaces.php:1659
+#: src/usr/local/www/interfaces.php:1683 src/usr/local/www/interfaces.php:1696
+#: src/usr/local/www/services_ntpd_gps.php:364
+#: src/usr/local/www/services_ntpd_pps.php:149
+#: src/usr/local/www/system_advanced_misc.php:445
+#: src/usr/local/www/vpn_ipsec_phase2.php:543
+msgid "None"
+msgstr ""
+
+#: src/etc/inc/ipsec.inc:612
+msgid ""
+"Unable to find IPsec daemon leases file. Could not display mobile user "
+"stats!"
+msgstr ""
+
+#: src/etc/inc/meta.inc:61
+#, php-format
+msgid "list_phpfiles: unable to examine path %s"
+msgstr ""
+
+#: src/etc/inc/meta.inc:97
+#, php-format
+msgid "unable to read %s"
+msgstr ""
+
+#: src/etc/inc/meta.inc:134
+#, php-format
+msgid "error: tag mismatch ( %1$s != %2$s ) in '%3$s'%4$s"
+msgstr ""
+
+#: src/etc/inc/meta.inc:145
+#, php-format
+msgid "warning: tag %1$s has no data in '%2$s'%3$s"
+msgstr ""
+
+#: src/etc/inc/meta.inc:168
+#, php-format
+msgid "warning: tag %1$s has malformed data in '%2$s'%3$s"
+msgstr ""
+
+#: src/etc/inc/meta.inc:190
+#, php-format
+msgid "warning: tag %1$s has invalid data in '%2$s'%3$s"
+msgstr ""
+
+#: src/etc/inc/notices.inc:74
+#, php-format
+msgid "Could not open %s for writing"
+msgstr ""
+
+#: src/etc/inc/notices.inc:79
+#, php-format
+msgid "New alert found: %s"
+msgstr ""
+
+#: src/etc/inc/notices.inc:321
+#, php-format
+msgid "Could not send the message to %1$s -- Error: %2$s"
+msgstr ""
+
+#: src/etc/inc/notices.inc:327
+#, php-format
+msgid "Message sent to %s OK"
+msgstr ""
+
+#: src/etc/inc/notices.inc:364 src/etc/inc/notices.inc:420
+msgid ""
+"Growl IP Address is invalid. Check the setting in System Advanced "
+"Notifications."
+msgstr ""
+
+#: src/etc/inc/notices.inc:383
+#, php-format
+msgid "%1$s (%2$s) - Notification"
+msgstr ""
+
+#: src/etc/inc/notices.inc:387
+#, php-format
+msgid "Could not send Growl notification to %1$s -- Error: %2$s"
+msgstr ""
+
+#: src/etc/inc/notices.inc:445
+#, php-format
+msgid "Could not send register Growl on %1$s -- Error: %2$s"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:53 src/usr/local/www/firewall_rules.php:763
+#: src/usr/local/www/firewall_rules_edit.php:1635
+#: src/usr/local/www/firewall_rules_edit.php:1676
+#: src/usr/local/www/firewall_rules_edit.php:1683
+#: src/usr/local/www/status_ipsec.php:332
+#: src/usr/local/www/vpn_ipsec_mobile.php:462
+#: src/usr/local/www/vpn_openvpn_client.php:571
+msgid "none"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:54 src/usr/local/www/diag_pftop.php:94
+#: src/usr/local/www/firewall_rules_edit.php:1638
+#: src/usr/local/www/services_captiveportal.php:967
+msgid "default"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:56
+msgid "3 (recommended)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:100
+msgid "One (Client+Server)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:101
+msgid "Two (Client+Intermediate+Server)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:102
+msgid "Three (Client+2xIntermediate+Server)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:103
+msgid "Four (Client+3xIntermediate+Server)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:104
+msgid "Five (Client+4xIntermediate+Server)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:109 src/etc/inc/openvpn.inc:120
+msgid "Peer to Peer ( SSL/TLS )"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:110 src/etc/inc/openvpn.inc:121
+msgid "Peer to Peer ( Shared Key )"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:111
+msgid "Remote Access ( SSL/TLS )"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:112
+msgid "Remote Access ( User Auth )"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:113
+msgid "Remote Access ( SSL/TLS + User Auth )"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:125
+msgid "Omit Preference (Use OpenVPN Default)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:126
+msgid "LZ4 Compression [compress lz4]"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:127
+msgid "LZ4 Comression v2 [compress lz4-v2]"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:128
+msgid ""
+"LZO Compression [compress lzo, equivalent to comp-lzo yes for compatibility]"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:129
+msgid "Enable Compression (stub) [compress]"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:130
+msgid ""
+"Omit Preference, + Disable Adaptive LZO Compression [Legacy style, comp-"
+"noadapt]"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:131
+msgid "Adaptive LZO Compression [Legacy style, comp-lzo adaptive]"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:132
+msgid "LZO Compression [Legacy style, comp-lzo yes]"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:133
+msgid "No LZO Compression [Legacy style, comp-lzo no]"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:138
+msgid "Subnet -- One IP address per client in a common subnet"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:139
+msgid "net30 -- Isolated /30 network per client"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:145
+msgid "TLS Authentication"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:146
+msgid "TLS Encryption and Authentication"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:219
+msgid "None (Username and/or Password required)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:227
+msgid "===== Server Certificates ====="
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:228
+msgid "===== Non-Server Certificates ====="
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:238
+msgid "Server: Yes"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:240
+msgid "Server: NO"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:243
+#, php-format
+msgid "CA: %s"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
+#: src/usr/local/www/system_crlmanager.php:586
+msgid "In Use"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
+msgid "Revoked"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:413
+msgid "None (No Encryption)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:420
+msgid "Use Default"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:446
+msgid "None (No Authentication)"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:451
+msgid "No Hardware Crypto Acceleration"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:495
+#, php-format
+msgid "The field '%s' must contain a valid IP address or domain name."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:503
+#, php-format
+msgid "The field '%s' must contain a valid port, ranging from 0 to 65535."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:517
+#, php-format
+msgid "The field '%1$s' must contain a single valid %2$s CIDR range."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:532
+#, php-format
+msgid ""
+"The field '%1$s' must contain only valid %2$s CIDR range(s) separated by "
+"commas."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1074
+msgid ""
+"Failed to construct OpenVPN server configuration. The selected DH Parameter "
+"length cannot be used."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1228
+#, php-format
+msgid "OpenVPN ID %1$s PID %2$s still running, killing."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1463
+#, php-format
+msgid "Resyncing OpenVPN instances for interface %s."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1465
+msgid "Resyncing OpenVPN instances."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1498
+#, php-format
+msgid "Resyncing OpenVPN for gateway group %1$s server %2$s."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1507
+#, php-format
+msgid "Resyncing OpenVPN for gateway group %1$s client %2$s."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1516
+msgid "openvpn_resync_gwgroup called with null gwgroup parameter."
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1622 src/etc/inc/openvpn.inc:1753
+msgid "Unable to contact daemon"
+msgstr ""
+
+#: src/etc/inc/openvpn.inc:1623 src/etc/inc/openvpn.inc:1754
+msgid "Service not running?"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:190
+#: src/usr/local/www/system_user_settings.php:62
+msgid "Theme"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:193
+#, php-format
+msgid ""
+"Choose an alternative css file (if installed) to change the appearance of "
+"the webConfigurator. css files are located in /usr/local/www/css/%s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:211
+msgid "Scrolls with page"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:211
+msgid "Fixed (Remains visible at top of page)"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:209
+msgid "Top Navigation"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:212
+msgid "The fixed option is intended for large screens only."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:230
+msgid "Default (No hostname)"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:230
+msgid "Hostname only"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:230
+msgid "Fully Qualified Domain Name"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:228
+msgid "Hostname in Menu"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:231
+msgid ""
+"Replaces the Help menu title in the Navbar with the system hostname or FQDN."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:251
+#: src/usr/local/www/system_user_settings.php:62
+msgid "Dashboard Columns"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:269
+msgid "Associated Panels Show/Hide"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:276
+msgid "Show the Available Widgets panel on the Dashboard."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:283
+msgid "Show the Log Filter panel in System Logs."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:290
+msgid "Show the Manage Log panel in System Logs."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:297
+msgid "Show the Settings panel in Status Monitoring."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:299
+msgid ""
+"These options allow certain panels to be automatically hidden on page load. "
+"A control is provided in the title bar to un-hide the panel."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:317
+msgid "Left Column Labels"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:320
+msgid ""
+"If selected, clicking a label in the left column will select/toggle the "
+"first item of the group."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:336
+msgid "Browser tab text"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:339
+msgid ""
+"When this is unchecked, the browser tab shows the host name followed by the "
+"current page. Check this box to display the current page followed by the "
+"host name."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:381
+msgid "Require State Filter"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:384
+msgid ""
+"By default, the entire state table is displayed when entering Diagnostics > "
+"States. This option requires a filter to be entered before the states are "
+"displayed. Useful for systems with large state tables."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:672
+msgid "After synch increase advertising skew"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:722
+msgid "Error creating socket!"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:723
+#, php-format
+msgid "Error code is '%1$s' - %2$s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:728
+#, php-format
+msgid "setsockopt() failed, error: %s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:732
+#, php-format
+msgid "Magic Packet sent (%1$s) to (%2$s) MAC=%3$s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:795 src/etc/inc/pfsense-utils.inc:815
+#, php-format
+msgid "Restored %s of config file (maybe from CARP partner)"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:902
+msgid "reload_interfaces_sync() is starting."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:911
+msgid "Enabling system routing"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:915
+msgid "Cleaning up Interfaces"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1354
+msgid "No history data found!"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1486
+msgid "device not present! Is the modem attached to the system?"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1555
+msgid "running"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1556 src/usr/local/www/graph.php:198
+msgid "up"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1601
+msgid "blocking"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1601
+msgid "check for ethernet loops"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1604
+msgid "learning"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1607
+msgid "forwarding"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1741
+#, php-format
+msgid "DNSCACHE: Found old IP %1$s and new IP %2$s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1761
+#, php-format
+msgid "Loading %s cryptographic accelerator module."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1778
+#, php-format
+msgid "Loading %s thermal monitor module."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:1855 src/etc/inc/pfsense-utils.inc:1911
+#, php-format
+msgid "Download file failed with status code %1$s. URL: %2$s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2107
+#, php-format
+msgid "Could not process non-existent file from alias: %s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2112
+#, php-format
+msgid "Could not process empty file from alias: %s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2117
+#, php-format
+msgid "Could not process aliases from alias: %s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2174
+#, php-format
+msgid "Failed to download alias %s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2203
+msgid ""
+"Alias archive is a .tar/tgz file which cannot be decompressed because "
+"utility is missing!"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2213
+#, php-format
+msgid "Could not open %s/aliases for writing!"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2219
+#, php-format
+msgid "The following file could not be read %1$s from %2$s"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2798
+msgid "English"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2799
+msgid "Spanish"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2800
+msgid "Portuguese (Brazil)"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2801
+msgid "Turkish"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2802
+msgid "Chinese (Simplified, China)"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:2997 src/etc/inc/pfsense-utils.inc:3012
+#: src/etc/inc/pfsense-utils.inc:3037
+msgid "No Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3007 src/etc/inc/pfsense-utils.inc:3049
+#: src/usr/local/www/firewall_nat_out.php:228
+#: src/usr/local/www/firewall_nat_out.php:232
+#: src/usr/local/www/interfaces.php:875 src/usr/local/www/interfaces.php:2959
+#: src/usr/local/www/interfaces_wireless.php:100
+#: src/usr/local/www/interfaces_wireless_edit.php:81
+#: src/usr/local/www/load_balancer_pool.php:121
+#: src/usr/local/www/load_balancer_pool_edit.php:73
+#: src/usr/local/www/load_balancer_pool_edit.php:313
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:70
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:75
+#: src/usr/local/www/status_lb_pool.php:134 src/usr/local/www/vpn_ipsec.php:252
+#: src/usr/local/www/vpn_ipsec.php:394
+msgid "Mode"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3013
+msgid "Restricted Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3014
+msgid "Valid Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3015
+msgid "Restricted Regional Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3016
+msgid "Powersaving Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3022
+msgid "Invalid SIM/locked State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3023
+msgid "Valid SIM State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3024
+msgid "Invalid SIM CS State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3025
+msgid "Invalid SIM PS State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3026
+msgid "Invalid SIM CS/PS State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3027
+msgid "Missing SIM State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3038
+msgid "Limited Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3054
+msgid "Initializing Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3055
+msgid "Network Lock error Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3056
+msgid "Network Locked Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3057
+msgid "Unlocked or correct MCC/MNC Service"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3063
+msgid "No action State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3064
+msgid "Network lock State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3065
+msgid "(U)SIM card lock State"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:3066
+msgid "Network Lock and (U)SIM card Lock State"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:45
+msgid "Warning, could not open log for writing."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:187
+#, php-format
+msgid ""
+"ERROR!!! An error occurred on pkg execution (rc = %d) with parameters '%s':"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:410 src/etc/inc/pkg-utils.inc:413
+msgid "ERROR: Error trying to get packages list. Aborting..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:445 src/etc/inc/pkg-utils.inc:448
+msgid "ERROR: Error trying to get package version. Aborting..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:498
+#, php-format
+msgid "Running last steps of %s installation."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:511
+msgid "Resyncing configuration for all packages."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:533
+msgid "Syncing packages..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:555
+msgid "Removing package..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:588
+#, php-format
+msgid ""
+"The %s package is missing its configuration file and must be reinstalled."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:604
+#, php-format
+msgid "Reinstalling package %1$s because its include file(%2$s) is missing!"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:607
+#, php-format
+msgid "Reinstalling package %s failed. Take appropriate measures!!!"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:700
+msgid "Beginning package installation."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:701
+#, php-format
+msgid "Beginning package installation for %s ."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:705
+msgid "Saving updated package information..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:708
+#, php-format
+msgid "Installed %s package."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:712
+#, php-format
+msgid "Overwrote previous installation of %s."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:713
+msgid "overwrite!"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:716
+#, php-format
+msgid "Intermediate config write during package install for %s."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:720
+#, php-format
+msgid "The %1$s package is not installed.%2$sInstallation aborted."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:724 src/etc/inc/pkg-utils.inc:756
+#: src/etc/inc/pkg-utils.inc:822
+#, php-format
+msgid "Failed to install package: %s."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:725 src/etc/inc/pkg-utils.inc:757
+#: src/etc/inc/pkg-utils.inc:823
+msgid "Failed to install package."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:730
+msgid "Loading package configuration... "
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:733
+msgid "Configuring package components..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:745 src/etc/inc/pkg-utils.inc:917
+msgid "Loading package instructions..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:752
+#, php-format
+msgid "Include %s is missing!"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:763
+msgid "Custom commands..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:766
+msgid "Executing custom_php_global_functions()..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:771
+msgid "Executing custom_php_install_command()..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:776
+msgid "Executing custom_php_resync_config_command()..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:783 src/etc/inc/pkg-utils.inc:865
+msgid "Menu items... "
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:800 src/etc/inc/pkg-utils.inc:880
+msgid "Services... "
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:817
+msgid "Loading package configuration... failed!"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:817
+msgid "Installation aborted."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:818
+msgid "Unable to load package configuration. Installation aborted."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:832
+msgid "Writing configuration... "
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:834
+#, php-format
+msgid "Successfully installed package: %s."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:849
+#, php-format
+msgid "The %1$s package is not installed.%2$sDeletion aborted."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:854
+#, php-format
+msgid "Removing %s package... "
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:855
+#, php-format
+msgid "Removing %s components..."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:908
+#, php-format
+msgid "Intermediate config write during package removal for %s."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:924
+#, php-format
+msgid "Include file %s could not be found for inclusion."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:942
+msgid "Deinstall commands... "
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:947
+msgid "Not executing custom deinstall hook because an include is missing."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:954
+msgid "Syslog entries... "
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:962
+msgid "Configuration... "
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:965
+#, php-format
+msgid "Removed %s package."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:992
+msgid ""
+"Waiting for Internet connection to update pkg metadata and finish package "
+"reinstallation"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:1005 src/etc/inc/pkg-utils.inc:1044
+msgid "Package reinstall"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:1006
+msgid ""
+"Package reinstall process was ABORTED due to lack of internet connectivity"
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:1045
+#, php-format
+msgid ""
+"Package %s does not exist in current %s version and it has been removed."
+msgstr ""
+
+#: src/etc/inc/pkg-utils.inc:1066
+msgid "Stopping all packages."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:6
+msgid "System - HA node sync"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:7
+msgid "Allow access to authenticate this user for HA sync via XMLRPC"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:10
+msgid "User - Services: Captive Portal login"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:11
+msgid "Indicates whether the user is able to login on the captive portal."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:14
+msgid "WebCfg - Help pages"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:15
+msgid "Show all items on help menu and allow access to Help shortcut links"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:20
+msgid "WebCfg - Dashboard (all)"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:21
+msgid "Allow access to all pages required for the dashboard."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:32
+msgid "WebCfg - Dashboard widgets (direct access)."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:33
+msgid ""
+"Allow direct access to all Dashboard widget pages, required for some widgets "
+"using AJAX."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:38
+msgid "User - Config: Deny Config Write"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:39
+msgid "If present, ignores requests from this user to write config.xml."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:42
+msgid "User - Notices: View"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:43
+msgid "This user can view system notices."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:46
+msgid "User - Notices: View and Clear"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:47
+msgid "This user can view and clear system notices."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:50
+msgid "User - System: Shell account access"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:51
+msgid "Indicates whether the user is able to login for example via SSH."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:55
+msgid "User - System: Copy files (scp)"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:60
+msgid "User - System: Copy files to home directory (chrooted scp)"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:61
+msgid ""
+"Indicates whether this user is allowed to copy files to the home directory "
+"via SCP/SFTP.Note: User - System - Copy files (scp) conflicts with this "
+"privilege.Warning: Manual chroot setup required, see /usr/local/etc/rc.d/"
+"scponlyc."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:66
+msgid "User - System: SSH tunneling"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:67
+msgid ""
+"Indicates whether the user is able to login for tunneling via SSH when they "
+"have no shell access. Note: User - System - Copy files (scp) and System: "
+"Copy files to home directory (chrooted scp) conflict with this privilege."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:74
+msgid "User - VPN: IPsec xauth Dialin"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:75
+msgid ""
+"Indicates whether the user is allowed to dial in via IPsec xauth (Note: Does "
+"not allow shell access, but may allow the user to create SSH tunnels)"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:80
+msgid "User - VPN: L2TP Dialin"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:81
+msgid "Indicates whether the user is allowed to dial in via L2TP"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:84
+msgid "User - VPN: PPPOE Dialin"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:85
+msgid "Indicates whether the user is allowed to dial in via PPPOE"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:88
+msgid "WebCfg - Status: System Logs: Portal Auth"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:89
+msgid "Allow access to the 'Status: System Logs: Portal Auth' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:94
+msgid "WebCfg - Status: Logs: DHCP"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:95
+msgid "Allow access to the 'Status: Logs: DHCP' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:100
+msgid "WebCfg - Status: Logs: Gateways"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:101
+msgid "Allow access to the 'Status: Logs: System: Gateways' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:106
+msgid "WebCfg - Status: Logs: Resolver"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:107
+msgid "Allow access to the 'Status: Logs: System: Resolver' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:112 src/etc/inc/priv/user.priv.inc:130
+msgid "WebCfg - Status: System Logs: IPsec VPN"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:113 src/etc/inc/priv/user.priv.inc:131
+msgid "Allow access to the 'Status: System Logs: IPsec VPN' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:118
+msgid "WebCfg - Status: System Logs: NTP"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:119
+msgid "Allow access to the 'Status: System Logs: NTP' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:124
+msgid "WebCfg - Status: System Logs: OpenVPN"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:125
+msgid "Allow access to the 'Status: System Logs: OpenVPN' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:136
+msgid "WebCfg - Status: System Logs: Load Balancer"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:137
+msgid "Allow access to the 'Status: System Logs: Load Balancer' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:142
+msgid "WebCfg - Status: System Logs: Routing"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:143
+msgid "Allow access to the 'Status: System Logs: System: Routing' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:148
+msgid "WebCfg - Status: System Logs: Wireless"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:149
+msgid "Allow access to the 'Status: System Logs: System: Wireless' page."
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:154
+msgid "WebCfg - Services: UPnP"
+msgstr ""
+
+#: src/etc/inc/priv/user.priv.inc:155
+msgid "Allow access to the 'Services: UPnP' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:17
+msgid "WebCfg - All pages"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:18
+msgid "Allow access to all pages"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:24
+msgid "WebCfg - Crash reporter"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:25
+msgid "Uploads crash reports to pfSense and or deletes crash reports."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:30
+msgid "WebCfg - Diagnostics: ARP Table"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:31
+msgid "Allow access to the 'Diagnostics: ARP Table' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:36
+msgid "WebCfg - Diagnostics: Authentication"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:37
+msgid "Allow access to the 'Diagnostics: Authentication' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:42
+msgid "WebCfg - Diagnostics: Backup & Restore"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:43
+msgid "Allow access to the 'Diagnostics: Backup & Restore' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:49
+msgid "WebCfg - Diagnostics: Command"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:50
+msgid "Allow access to the 'Diagnostics: Command' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:56
+msgid "WebCfg - Diagnostics: Configuration History"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:57
+msgid "Allow access to the 'Diagnostics: Configuration History' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:62
+msgid "WebCfg - Diagnostics: Factory defaults"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:63
+msgid "Allow access to the 'Diagnostics: Factory defaults' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:69
+msgid "WebCfg - Diagnostics: DNS Lookup"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:70
+msgid "Allow access to the 'Diagnostics: DNS Lookup' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:75
+msgid "WebCfg - Diagnostics: Show States"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:76
+msgid "Allow access to the 'Diagnostics: Show States' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:81
+msgid "WebCfg - Diagnostics: Show Source Tracking"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:82
+msgid "Allow access to the 'Diagnostics: Show Source Tracking' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:87
+msgid "WebCfg - Diagnostics: Edit File"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:88
+msgid "Allow access to the 'Diagnostics: Edit File' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:96
+msgid "WebCfg - Diagnostics: GEOM Mirrors"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:97
+msgid "Allow access to the 'Diagnostics: GEOM Mirrors' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:102
+msgid "WebCfg - Diagnostics: Halt system"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:103
+msgid "Allow access to the 'Diagnostics: Halt system' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:108
+msgid "WebCfg - Diagnostics: Limiter Info"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:109
+msgid "Allows access to the 'Diagnostics: Limiter Info' page"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:114
+msgid "WebCfg - Diagnostics: NDP Table"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:115
+msgid "Allow access to the 'Diagnostics: NDP Table' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:120
+msgid "WebCfg - Diagnostics: Packet Capture"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:121
+msgid "Allow access to the 'Diagnostics: Packet Capture' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:126
+msgid "WebCfg - Diagnostics: pfInfo"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:127
+msgid "Allows access to the 'Diagnostics: pfInfo' page"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:132
+msgid "WebCfg - Diagnostics: pfTop"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:133
+msgid "Allows access to the 'Diagnostics: pfTop' page"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:138
+msgid "WebCfg - Diagnostics: Ping"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:139
+msgid "Allow access to the 'Diagnostics: Ping' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:144
+msgid "WebCfg - Diagnostics: Reboot System"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:145
+msgid "Allow access to the 'Diagnostics: Reboot System' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:150
+msgid "WebCfg - Diagnostics: Reset states"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:151
+msgid "Allow access to the 'Diagnostics: Reset states' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:156
+msgid "WebCfg - Diagnostics: Routing tables"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:157
+msgid "Allow access to the 'Diagnostics: Routing tables' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:162
+msgid "WebCfg - Diagnostics: S.M.A.R.T. Status"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:163
+msgid "Allow access to the 'Diagnostics: S.M.A.R.T. Status' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:168
+msgid "WebCfg - Diagnostics: Sockets"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:169
+msgid "Allow access to the 'Diagnostics: Sockets' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:174
+msgid "WebCfg - Diagnostics: States Summary"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:175
+msgid "Allow access to the 'Diagnostics: States Summary' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:180
+msgid "WebCfg - Diagnostics: System Activity"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:181
+msgid "Allows access to the 'Diagnostics: System Activity' page"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:186
+msgid "WebCfg - Diagnostics: pf Table IP addresses"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:187
+msgid "Allow access to the 'Diagnostics: Tables' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:192
+msgid "WebCfg - Diagnostics: Test Port"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:193
+msgid "Allow access to the 'Diagnostics: Test Port' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:198
+msgid "WebCfg - Diagnostics: Traceroute"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:199
+msgid "Allow access to the 'Diagnostics: Traceroute' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:204
+msgid "WebCfg - Firewall: Easy Rule add/status"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:205
+msgid "Allow access to the 'Firewall: Easy Rule' add/status page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:210
+msgid "WebCfg - Firewall: Aliases"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:211
+msgid "Allow access to the 'Firewall: Aliases' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:216
+msgid "WebCfg - Firewall: Alias: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:217
+msgid "Allow access to the 'Firewall: Alias: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:222
+msgid "WebCfg - Firewall: Alias: Import"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:223
+msgid "Allow access to the 'Firewall: Alias: Import' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:228
+msgid "WebCfg - Firewall: NAT: Port Forward"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:229
+msgid "Allow access to the 'Firewall: NAT: Port Forward' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:234
+msgid "WebCfg - Firewall: NAT: 1:1"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:235
+msgid "Allow access to the 'Firewall: NAT: 1:1' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:240
+msgid "WebCfg - Firewall: NAT: 1:1: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:241
+msgid "Allow access to the 'Firewall: NAT: 1:1: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:246
+msgid "WebCfg - Firewall: NAT: Port Forward: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:247
+msgid "Allow access to the 'Firewall: NAT: Port Forward: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:252
+msgid "WebCfg - Firewall: NAT: NPt"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:253
+msgid "Allow access to the 'Firewall: NAT: NPt' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:258
+msgid "WebCfg - Firewall: NAT: NPt: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:259
+msgid "Allow access to the 'Firewall: NAT: NPt: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:264
+msgid "WebCfg - Firewall: NAT: Outbound"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:265
+msgid "Allow access to the 'Firewall: NAT: Outbound' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:270
+msgid "WebCfg - Firewall: NAT: Outbound: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:271
+msgid "Allow access to the 'Firewall: NAT: Outbound: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:276
+msgid "WebCfg - Firewall: Rules"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:277
+msgid "Allow access to the 'Firewall: Rules' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:282
+msgid "WebCfg - Firewall: Rules: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:283
+msgid "Allow access to the 'Firewall: Rules: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:288
+msgid "WebCfg - Firewall: Schedules"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:289
+msgid "Allow access to the 'Firewall: Schedules' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:294
+msgid "WebCfg - Firewall: Schedules: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:295
+msgid "Allow access to the 'Firewall: Schedules: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:300
+msgid "WebCfg - Firewall: Traffic Shaper"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:301
+msgid "Allow access to the 'Firewall: Traffic Shaper' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:306
+msgid "WebCfg - Firewall: Traffic Shaper: Queues"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:307
+msgid "Allow access to the 'Firewall: Traffic Shaper: Queues' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:312
+msgid "WebCfg - Firewall: Traffic Shaper: Limiters"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:313
+msgid "Allow access to the 'Firewall: Traffic Shaper: Limiters' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:318
+msgid "WebCfg - Firewall: Traffic Shaper: Wizard"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:319
+msgid "Allow access to the 'Firewall: Traffic Shaper: Wizard' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:324
+msgid "WebCfg - Firewall: Virtual IP Addresses"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:325
+msgid "Allow access to the 'Firewall: Virtual IP Addresses' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:330
+msgid "WebCfg - Firewall: Virtual IP Address: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:331
+msgid "Allow access to the 'Firewall: Virtual IP Address: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:336
+msgid "WebCfg - AJAX: Get Service Providers"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:337
+msgid "Allow access to the 'AJAX: Service Providers' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:342
+msgid "WebCfg - AJAX: Get Stats"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:343
+msgid "Allow access to the 'AJAX: Get Stats' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:348
+msgid "WebCfg - Diagnostics: Interface Traffic"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:349
+msgid "Allow access to the 'Diagnostics: Interface Traffic' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:354
+msgid "WebCfg - Diagnostics: CPU Utilization"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:355
+msgid "Allow access to the 'Diagnostics: CPU Utilization' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:361
+msgid "WebCfg - XMLRPC Interface Stats"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:362
+msgid "Allow access to the 'XMLRPC Interface Stats' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:367
+msgid "WebCfg - System: Login / Logout / Dashboard"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:368
+msgid "Allow access to the 'System: Login / Logout' page and Dashboard."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:373
+msgid "WebCfg - Interfaces: WAN"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:374
+msgid "Allow access to the 'Interfaces' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:379
+msgid "WebCfg - Interfaces: Interface Assignments"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:380
+msgid "Allow access to the 'Interfaces: Interface Assignments' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:385
+msgid "WebCfg - Interfaces: Bridge"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:386
+msgid "Allow access to the 'Interfaces: Bridge' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:391
+msgid "WebCfg - Interfaces: Bridge edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:392
+msgid "Allow access to the 'Interfaces: Bridge : Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:397
+msgid "WebCfg - Interfaces: GIF"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:398
+msgid "Allow access to the 'Interfaces: GIF' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:403
+msgid "WebCfg - Interfaces: GIF: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:404
+msgid "Allow access to the 'Interfaces: GIF: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:409
+msgid "WebCfg - Interfaces: GRE"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:410
+msgid "Allow access to the 'Interfaces: GRE' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:415
+msgid "WebCfg - Interfaces: GRE: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:416
+msgid "Allow access to the 'Interfaces: GRE: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:421
+msgid "WebCfg - Interfaces: Groups"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:422
+msgid "Create interface groups"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:427
+msgid "WebCfg - Interfaces: Groups: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:428
+msgid "Allow access to the 'Interfaces: Groups: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:433
+msgid "WebCfg - Interfaces: LAGG:"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:434
+msgid "Allow access to the 'Interfaces: LAGG' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:439
+msgid "WebCfg - Interfaces: LAGG: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:440
+msgid "Allow access to the 'Interfaces: LAGG: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:445
+msgid "WebCfg - Interfaces: PPPs"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:446
+msgid "Allow access to the 'Interfaces: PPPs' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:451
+msgid "WebCfg - Interfaces: PPPs: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:452
+msgid "Allow access to the 'Interfaces: PPPs: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:457
+msgid "WebCfg - Interfaces: QinQ"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:458
+msgid "Allow access to the 'Interfaces: QinQ' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:463
+msgid "WebCfg - Interfaces: QinQ: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:464
+msgid "Allow access to 'Interfaces: QinQ: Edit' page"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:469
+msgid "WebCfg - Interfaces: VLAN"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:470
+msgid "Allow access to the 'Interfaces: VLAN' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:475
+msgid "WebCfg - Interfaces: VLAN: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:476
+msgid "Allow access to the 'Interfaces: VLAN: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:481
+msgid "WebCfg - Interfaces: Wireless"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:482
+msgid "Allow access to the 'Interfaces: Wireless' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:487
+msgid "WebCfg - Interfaces: Wireless: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:488
+msgid "Allow access to the 'Interfaces: Wireless: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:493
+msgid "WebCfg - System: License"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:494
+msgid "Allow access to the 'System: License' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:499
+msgid "WebCfg - Services: Load Balancer: Monitors"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:500
+msgid "Allow access to the 'Services: Load Balancer: Monitors' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:505
+msgid "WebCfg - Services: Load Balancer: Monitor: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:506
+msgid "Allow access to the 'Services: Load Balancer: Monitor: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:511
+msgid "WebCfg - Load Balancer: Pool"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:512
+msgid "Allow access to the 'Load Balancer: Pool' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:517
+msgid "WebCfg - Load Balancer: Pool: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:518
+msgid "Allow access to the 'Load Balancer: Pool: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:523
+msgid "WebCfg - Services: Load Balancer: Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:524
+msgid "Allow access to the 'Settings: Load Balancer: Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:529
+msgid "WebCfg - Services: Load Balancer: Virtual Servers"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:530
+msgid "Allow access to the 'Services: Load Balancer: Virtual Servers' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:535
+msgid "WebCfg - Load Balancer: Virtual Server: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:536
+msgid "Allow access to the 'Load Balancer: Virtual Server: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:541
+msgid "WebCfg - Package: Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:542
+msgid "Allow access to the 'Package: Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:547
+msgid "WebCfg - Package: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:548
+msgid "Allow access to the 'Package: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:553
+msgid "WebCfg - System: Package Manager"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:554
+msgid "Allow access to the 'System: Package Manager' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:559
+msgid "WebCfg - System: Package Manager: Install Package"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:560
+msgid "Allow access to the 'System: Package Manager: Install Package' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:565
+msgid "WebCfg - System: Package Manager: Installed"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:566
+msgid "Allow access to the 'System: Package Manager: Installed' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:571
+msgid "WebCfg - Services: Captive Portal"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:572
+msgid "Allow access to the 'Services: Captive Portal' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:577
+msgid "WebCfg - Services: Captive Portal: File Manager"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:578
+msgid "Allow access to the 'Services: Captive Portal: File Manager' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:583
+msgid "WebCfg - Services: Captive Portal: Allowed Hostnames"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:584
+msgid ""
+"Allow access to the 'Services: Captive Portal: Allowed Hostnames' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:589
+msgid "WebCfg - Services: Captive Portal: Edit Allowed Hostnames"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:590
+msgid ""
+"Allow access to the 'Services: Captive Portal: Edit Allowed Hostnames' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:595
+msgid "WebCfg - Services: Captive Portal: Allowed IPs"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:596
+msgid "Allow access to the 'Services: Captive Portal: Allowed IPs' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:601
+msgid "WebCfg - Services: Captive Portal: Edit Allowed IPs"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:602
+msgid "Allow access to the 'Services: Captive Portal: Edit Allowed IPs' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:607
+msgid "WebCfg - Services: Captive Portal: Mac Addresses"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:608
+msgid "Allow access to the 'Services: Captive Portal: Mac Addresses' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:613
+msgid "WebCfg - Services: Captive Portal: Edit MAC Addresses"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:614
+msgid ""
+"Allow access to the 'Services: Captive Portal: Edit MAC Addresses' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:619
+msgid "WebCfg - Services: Captive Portal Vouchers"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:620
+msgid "Allow access to the 'Services: Captive Portal Vouchers' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:625
+msgid "WebCfg - Services: Captive Portal Voucher Rolls"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:626
+msgid ""
+"Allow access to the 'Services: Captive Portal Edit Voucher Rolls' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:631
+msgid "WebCfg - Services: Captive Portal Zones"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:632
+msgid "Allow access to the 'Services: Captive Portal Zones' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:637
+msgid "WebCfg - Services: Captive Portal: Edit Zones"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:638
+msgid "Allow access to the 'Services: Captive Portal: Edit Zones' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:643
+msgid "WebCfg - Services: Check IP Service"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:644
+msgid "Allow access to the 'Services: Check IP Service' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:649
+msgid "WebCfg - Services: Check IP Service: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:650
+msgid "Allow access to the 'Services: Check IP Service: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:655
+msgid "WebCfg - Services: DHCP Server"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:656
+msgid "Allow access to the 'Services: DHCP Server' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:661
+msgid "WebCfg - Services: DHCP Server: Edit static mapping"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:662
+msgid "Allow access to the 'Services: DHCP Server: Edit static mapping' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:667
+msgid "WebCfg - Services: DHCP Relay"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:668
+msgid "Allow access to the 'Services: DHCP Relay' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:673
+msgid "WebCfg - Services: DHCPv6 Server"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:674
+msgid "Allow access to the 'Services: DHCPv6 Server' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:679
+msgid "WebCfg - Services: DHCPv6 Server: Edit static mapping"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:680
+msgid ""
+"Allow access to the 'Services: DHCPv6 Server : Edit static mapping' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:685
+msgid "WebCfg - Services: DHCPv6 Relay"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:686
+msgid "Allow access to the 'Services: DHCPv6 Relay' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:691
+msgid "WebCfg - Services: DNS Forwarder"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:692
+msgid "Allow access to the 'Services: DNS Forwarder' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:697
+msgid "WebCfg - Services: DNS Forwarder: Edit Domain Override"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:698
+msgid ""
+"Allow access to the 'Services: DNS Forwarder: Edit Domain Override' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:703
+msgid "WebCfg - Services: DNS Forwarder: Edit host"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:704
+msgid "Allow access to the 'Services: DNS Forwarder: Edit host' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:709
+msgid "WebCfg - Services: Dynamic DNS clients"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:710
+msgid "Allow access to the 'Services: Dynamic DNS clients' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:715
+msgid "WebCfg - Services: Dynamic DNS client"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:716
+msgid "Allow access to the 'Services: Dynamic DNS client' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:721
+msgid "WebCfg - Services: IGMP Proxy"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:722
+msgid "Allow access to the 'Services: IGMP Proxy' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:727
+msgid "WebCfg - Services: IGMP Proxy: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:728
+msgid "Allow access to the 'Services: IGMP Proxy: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:733
+msgid "WebCfg - Services: NTP Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:734
+msgid "Allow access to the 'Services: NTP Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:739
+msgid "WebCfg - Services: NTP ACL Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:740
+msgid "Allow access to the 'Services: NTP ACL Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:745
+msgid "WebCfg - Services: NTP Serial GPS"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:746
+msgid "Allow access to the 'Services: NTP Serial GPS' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:751
+msgid "WebCfg - Services: NTP PPS"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:752
+msgid "Allow access to the 'Services: NTP PPS' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:757
+msgid "WebCfg - Services: PPPoE Server"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:758
+msgid "Allow access to the 'Services: PPPoE Server' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:763
+msgid "WebCfg - Services: PPPoE Server: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:764
+msgid "Allow access to the 'Services: PPPoE Server: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:769
+msgid "WebCfg - Services: RFC 2136 Clients"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:770
+msgid "Allow access to the 'Services: RFC 2136 Clients' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:775
+msgid "WebCfg - Services: RFC 2136 Client: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:776
+msgid "Allow access to the 'Services: RFC 2136 Client: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:781
+msgid "WebCfg - Services: Router Advertisements"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:782
+msgid "Allow access to the 'Services: Router Advertisements' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:787
+msgid "WebCfg - Services: SNMP"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:788
+msgid "Allow access to the 'Services: SNMP' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:793
+msgid "WebCfg - Services: DNS Resolver"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:794
+msgid "Allow access to the 'Services: DNS Resolver' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:799
+msgid "WebCfg - Services: DNS Resolver: Access Lists"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:800
+msgid "Allow access to the 'Services: DNS Resolver: Access Lists' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:805
+msgid "WebCfg - Services: DNS Resolver: Advanced"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:806
+msgid "Allow access to the 'Services: DNS Resolver: Advanced' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:811
+msgid "WebCfg - Services: DNS Resolver: Edit Domain Override"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:812
+msgid ""
+"Allow access to the 'Services: DNS Resolver: Edit Domain Override' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:817
+msgid "WebCfg - Services: DNS Resolver: Edit host"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:818
+msgid "Allow access to the 'Services: DNS Resolver: Edit host' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:823
+msgid "WebCfg - Services: Wake-on-LAN"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:824
+msgid "Allow access to the 'Services: Wake-on-LAN' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:829
+msgid "WebCfg - Services: Wake-on-LAN: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:830
+msgid "Allow access to the 'Services: Wake-on-LAN: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:835
+msgid "WebCfg - Hidden: Detailed Status"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:836
+msgid "Allow access to the 'Hidden: Detailed Status' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:841
+msgid "WebCfg - Status: Captive Portal"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:842
+msgid "Allow access to the 'Status: Captive Portal' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:847
+msgid "WebCfg - Status: Captive Portal: Expire Vouchers"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:848
+msgid "Allow access to the 'Status: Captive Portal: Expire Vouchers' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:853
+msgid "WebCfg - Status: Captive Portal: Test Vouchers"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:854
+msgid "Allow access to the 'Status: Captive Portal: Test Vouchers' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:859
+msgid "WebCfg - Status: Captive Portal Voucher Rolls"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:860
+msgid "Allow access to the 'Status: Captive Portal Voucher Rolls' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:865
+msgid "WebCfg - Status: Captive Portal Vouchers"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:866
+msgid "Allow access to the 'Status: Captive Portal Vouchers' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:871
+msgid "WebCfg - Status: CARP"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:872
+msgid "Allow access to the 'Status: CARP' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:877
+msgid "WebCfg - Status: DHCP leases"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:878
+msgid "Allow access to the 'Status: DHCP leases' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:883
+msgid "WebCfg - Status: DHCPv6 leases"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:884
+msgid "Allow access to the 'Status: DHCPv6 leases' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:889
+msgid "WebCfg - Status: Filter Reload Status"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:890
+msgid "Allow access to the 'Status: Filter Reload Status' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:895
+msgid "WebCfg - Status: Gateway Groups"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:896
+msgid "Allow access to the 'Status: Gateway Groups' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:901
+msgid "WebCfg - Status: Gateways"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:902
+msgid "Allow access to the 'Status: Gateways' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:907
+msgid "WebCfg - Status: Traffic Graph"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:908
+msgid "Allow access to the 'Status: Traffic Graph' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:916
+msgid "WebCfg - Status: CPU load"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:917
+msgid "Allow access to the 'Status: CPU load' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:922
+msgid "WebCfg - Status: Interfaces"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:923
+msgid "Allow access to the 'Status: Interfaces' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:928
+msgid "WebCfg - Status: IPsec"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:929
+msgid "Allow access to the 'Status: IPsec' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:934
+msgid "WebCfg - Status: IPsec: Leases"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:935
+msgid "Allow access to the 'Status: IPsec: Leases' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:940
+msgid "WebCfg - Status: IPsec: SADs"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:941
+msgid "Allow access to the 'Status: IPsec: SADs' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:946
+msgid "WebCfg - Status: IPsec: SPD"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:947
+msgid "Allow access to the 'Status: IPsec: SPD' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:952
+msgid "WebCfg - Status: Load Balancer: Pool"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:953
+msgid "Allow access to the 'Status: Load Balancer: Pool' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:958
+msgid "WebCfg - Status: Load Balancer: Virtual Server"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:959
+msgid "Allow access to the 'Status: Load Balancer: Virtual Server' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:964
+msgid "WebCfg - Status: Logs: System"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:965
+msgid "Allow access to the 'Status: System Logs: General' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:970
+msgid "WebCfg - Status: Logs: Firewall"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:971
+msgid "Allow access to the 'Status: Logs: Firewall' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:976
+msgid "WebCfg - Status: System Logs: Firewall (Dynamic View)"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:977
+msgid ""
+"Allow access to the 'Status: System Logs: Firewall (Dynamic View)' page"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:982
+msgid "WebCfg - Status: System Logs: Firewall Log Summary"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:983
+msgid "Allow access to the 'Status: System Logs: Firewall Log Summary' page"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:988
+msgid "WebCfg - Status: Logs: Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:989
+msgid "Allow access to the 'Status: Logs: Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:994
+msgid "WebCfg - Status: Logs: VPN"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:995
+msgid "Allow access to the 'Status: Logs: VPN' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1000
+msgid "WebCfg - Status: NTP"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1001
+msgid "Allow access to the 'Status: NTP' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1006
+msgid "WebCfg - Status: OpenVPN"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1007
+msgid "Allow access to the 'Status: OpenVPN' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1012
+msgid "WebCfg - Status: Package logs"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1013
+msgid "Allow access to the 'Status: Package logs' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1018
+msgid "WebCfg - Status: Traffic Shaper: Queues"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1019
+msgid "Allow access to the 'Status: Traffic Shaper: Queues' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1024
+msgid "WebCfg - Status: Services"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1025
+msgid "Allow access to the 'Status: Services' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1030
+msgid "WebCfg - Status: UPnP Status"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1031
+msgid "Allow access to the 'Status: UPnP Status' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1036
+msgid "WebCfg - Status: Wireless"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1037
+msgid "Allow access to the 'Status: Wireless' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1042
+msgid "WebCfg - System: General Setup"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1043
+msgid "Allow access to the 'System: General Setup' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1048
+msgid "WebCfg - System: Advanced: Admin Access Page"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1049
+msgid "Allow access to the 'System: Advanced: Admin Access' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1054
+msgid "WebCfg - System: Advanced: Firewall & NAT"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1055
+msgid "Allow access to the 'System: Advanced: Firewall & NAT' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1060
+msgid "WebCfg - System: Advanced: Miscellaneous"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1061
+msgid "Allow access to the 'System: Advanced: Miscellaneous' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1066
+msgid "WebCfg - System: Advanced: Networking"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1067
+msgid "Allow access to the 'System: Advanced: Networking' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1072
+msgid "WebCfg - System: Advanced: Notifications"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1073
+msgid "Allow access to the 'System: Advanced: Notifications' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1078
+msgid "WebCfg - System: Advanced: Tunables"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1079
+msgid "Allow access to the 'System: Advanced: Tunables' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1084
+msgid "WebCfg - System: Authentication Servers"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1085
+msgid "Allow access to the 'System: Authentication Servers' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1091
+msgid "WebCfg - System: CA Manager"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1092
+msgid "Allow access to the 'System: CA Manager' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1097
+msgid "WebCfg - System: Certificate Manager"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1098
+msgid "Allow access to the 'System: Certificate Manager' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1103
+msgid "WebCfg - System: CRL Manager"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1104
+msgid "Allow access to the 'System: CRL Manager' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1109
+msgid "WebCfg - System: Gateway Groups"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1110
+msgid "Allow access to the 'System: Gateway Groups' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1115
+msgid "WebCfg - System: Gateways: Edit Gateway Groups"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1116
+msgid "Allow access to the 'System: Gateways: Edit Gateway Groups' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1121
+msgid "WebCfg - System: Gateways"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1122
+msgid "Allow access to the 'System: Gateways' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1127
+msgid "WebCfg - System: Gateways: Edit Gateway"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1128
+msgid "Allow access to the 'System: Gateways: Edit Gateway' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1133
+msgid "WebCfg - System: Group Manager"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1134
+msgid "Allow access to the 'System: Group Manager' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1140
+msgid "WebCfg - System: Group Manager: Add Privileges"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1141
+msgid "Allow access to the 'System: Group Manager: Add Privileges' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1147
+msgid "WebCfg - System: High Availability Sync"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1148
+msgid "Allow access to the 'System: High Availability Sync' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1153
+msgid "WebCfg - System: Static Routes"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1154
+msgid "Allow access to the 'System: Static Routes' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1159
+msgid "WebCfg - System: Static Routes: Edit route"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1160
+msgid "Allow access to the 'System: Static Routes: Edit route' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1165
+msgid "WebCfg - System: Update: Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1166
+msgid "Allow access to the 'System: Update: Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1171
+msgid "WebCfg - System: User Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1172
+msgid "Allow access to the 'System: User Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1177
+msgid "WebCfg - System: User Manager"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1178
+msgid "Allow access to the 'System: User Manager' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1184
+msgid "WebCfg - System: User Manager: Add Privileges"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1185
+msgid "Allow access to the 'System: User Manager: Add Privileges' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1191
+msgid "WebCfg - System: User Password Manager"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1192
+msgid "Allow access to the 'System: User Password Manager' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1197
+msgid "WebCfg - System: User Manager: Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1198
+msgid "Allow access to the 'System: User Manager: Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1204
+msgid "WebCfg - Hidden: Upload Configuration"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1205
+msgid "Allow access to the 'Hidden: Upload Configuration' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1210
+msgid "WebCfg - VPN: IPsec"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1211
+msgid "Allow access to the 'VPN: IPsec' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1216
+msgid "WebCfg - VPN: IPsec: Pre-Shared Keys List"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1217
+msgid "Allow access to the 'VPN: IPsec: Pre-Shared Keys List' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1222
+msgid "WebCfg - VPN: IPsec: Edit Pre-Shared Keys"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1223
+msgid "Allow access to the 'VPN: IPsec: Edit Pre-Shared Keys' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1228
+msgid "WebCfg - VPN: IPsec: Mobile"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1229
+msgid "Allow access to the 'VPN: IPsec: Mobile' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1234
+msgid "WebCfg - VPN: IPsec: Edit Phase 1"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1235
+msgid "Allow access to the 'VPN: IPsec: Edit Phase 1' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1240
+msgid "WebCfg - VPN: IPsec: Edit Phase 2"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1241
+msgid "Allow access to the 'VPN: IPsec: Edit Phase 2' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1246
+msgid "WebCfg - VPN: IPsec: Settings"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1247
+msgid "Allow access to the 'VPN: IPsec: Settings' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1252
+msgid "WebCfg - VPN: L2TP"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1253
+msgid "Allow access to the 'VPN: L2TP' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1258
+msgid "WebCfg - VPN: L2TP: Users"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1259
+msgid "Allow access to the 'VPN: L2TP: Users' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1264
+msgid "WebCfg - VPN: L2TP: Users: Edit"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1265
+msgid "Allow access to the 'VPN: L2TP: Users: Edit' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1270
+msgid "WebCfg - OpenVPN: Clients"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1271
+msgid "Allow access to the 'OpenVPN: Clients' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1276
+msgid "WebCfg - OpenVPN: Client Specific Override"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1277
+msgid "Allow access to the 'OpenVPN: Client Specific Override' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1282
+msgid "WebCfg - OpenVPN: Servers"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1283
+msgid "Allow access to the 'OpenVPN: Servers' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1288
+msgid "WebCfg - pfSense wizard subsystem"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1289
+msgid "Allow access to the 'pfSense wizard subsystem' page."
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1294
+msgid "WebCfg - XMLRPC Library"
+msgstr ""
+
+#: src/etc/inc/priv.defs.inc:1295
+msgid "Allow access to the 'XMLRPC Library' page."
+msgstr ""
+
+#: src/etc/inc/radius.inc:416
+msgid "Error sending request:"
+msgstr ""
+
+#: src/etc/inc/radius.inc:422
+msgid "RADIUS_ACCESS_ACCEPT is unexpected for accounting"
+msgstr ""
+
+#: src/etc/inc/radius.inc:431
+msgid "RADIUS_ACCOUNTING_RESPONSE is unexpected for authentication"
+msgstr ""
+
+#: src/etc/inc/radius.inc:436
+#, php-format
+msgid "Unexpected return value: %s"
+msgstr ""
+
+#: src/etc/inc/rrd.inc:32
+#, php-format
+msgid "RRD dump failed exited with %1$s, the error is: %2$s"
+msgstr ""
+
+#: src/etc/inc/rrd.inc:43
+#, php-format
+msgid "RRD create failed exited with %1$s, the error is: %2$s"
+msgstr ""
+
+#: src/etc/inc/rrd.inc:58
+#, php-format
+msgid ""
+"Import RRD has %1$s DS values and %2$s RRA databases, new format RRD has "
+"%3$s DS values and %4$s RRA databases"
+msgstr ""
+
+#: src/etc/inc/rrd.inc:142
+#, php-format
+msgid "The new RRD now has %1$s DS values and %2$s RRA databases"
+msgstr ""
+
+#: src/etc/inc/rrd.inc:150
+msgid "Generating RRD graphs..."
+msgstr ""
+
+#: src/etc/inc/rrd.inc:942
+msgid "Creating rrd update script"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:241
+msgid "Router Advertisement Daemon"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:248 src/usr/local/www/diag_backup.php:468
+#: src/usr/local/www/head.inc:291 src/usr/local/www/services_dnsmasq.php:226
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:120
+#: src/usr/local/www/services_dnsmasq_edit.php:185
+msgid "DNS Forwarder"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:255 src/usr/local/www/diag_backup.php:469
+#: src/usr/local/www/head.inc:292 src/usr/local/www/services_unbound.php:238
+#: src/usr/local/www/services_unbound_acls.php:176
+#: src/usr/local/www/services_unbound_advanced.php:187
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:112
+#: src/usr/local/www/services_unbound_host_edit.php:200
+#: src/usr/local/www/status_logs.php:61
+#: src/usr/local/www/status_logs_common.inc:106
+msgid "DNS Resolver"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:261
+msgid "NTP clock sync"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:270 src/usr/local/www/diag_backup.php:466
+#: src/usr/local/www/head.inc:290 src/usr/local/www/head.inc:328
+#: src/usr/local/www/services_captiveportal.php:64
+#: src/usr/local/www/services_captiveportal_filemanager.php:67
+#: src/usr/local/www/services_captiveportal_hostname.php:63
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:64
+#: src/usr/local/www/services_captiveportal_ip.php:62
+#: src/usr/local/www/services_captiveportal_ip_edit.php:66
+#: src/usr/local/www/services_captiveportal_mac.php:59
+#: src/usr/local/www/services_captiveportal_mac_edit.php:69
+#: src/usr/local/www/services_captiveportal_vouchers.php:78
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:53
+#: src/usr/local/www/services_captiveportal_zones.php:59
+#: src/usr/local/www/services_captiveportal_zones_edit.php:35
+#: src/usr/local/www/status_captiveportal.php:130
+#: src/usr/local/www/status_captiveportal_expire.php:57
+#: src/usr/local/www/status_captiveportal_test.php:57
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
+#: src/usr/local/www/status_captiveportal_vouchers.php:57
+#: src/usr/local/www/system_certmanager.php:1036
+msgid "Captive Portal"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:288 src/usr/local/www/head.inc:293
+#: src/usr/local/www/services_dhcp_relay.php:124
+msgid "DHCP Relay"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:295 src/usr/local/www/head.inc:294
+#: src/usr/local/www/services_dhcpv6_relay.php:124
+msgid "DHCPv6 Relay"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:302
+msgid "DHCP Service"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:310
+msgid "Gateway Monitoring Daemon"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:317
+msgid "SNMP Service"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:324
+msgid "IGMP proxy"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:331
+msgid "UPnP Service"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:338
+msgid "IPsec VPN"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:345
+msgid "Secure Shell Daemon"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:368
+msgid "Server load balancing daemon"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:427
+msgid "Not available."
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:461
+msgid "Running"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:468
+msgid "Stopped"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:472
+#: src/usr/local/www/firewall_nat_1to1_edit.php:420
+#: src/usr/local/www/firewall_nat_edit.php:652
+#: src/usr/local/www/firewall_nat_npt_edit.php:192
+#: src/usr/local/www/firewall_nat_out_edit.php:461
+#: src/usr/local/www/firewall_rules_edit.php:1176
+#: src/usr/local/www/interfaces.php:2639
+#: src/usr/local/www/interfaces_ppps_edit.php:751
+#: src/usr/local/www/load_balancer_pool_edit.php:406
+#: src/usr/local/www/services_router_advertisements.php:107
+#: src/usr/local/www/services_router_advertisements.php:129
+#: src/usr/local/www/system_gateways_edit.php:593
+#: src/usr/local/www/system_routes_edit.php:267
+#: src/usr/local/www/system_usermanager.php:583
+#: src/usr/local/www/system_usermanager.php:705
+#: src/usr/local/www/vpn_ipsec_phase1.php:655
+#: src/usr/local/www/vpn_ipsec_phase2.php:499
+#: src/usr/local/www/vpn_openvpn_client.php:488
+#: src/usr/local/www/vpn_openvpn_csc.php:662
+#: src/usr/local/www/vpn_openvpn_server.php:673
+msgid "Disabled"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:485 src/etc/inc/service-utils.inc:487
+#, php-format
+msgid "%1$s Service is %2$s"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:489
+#, php-format
+msgid "%1$s, %2$s Service is %3$s"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:532
+#, php-format
+msgid "Restart %sService"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:545
+#, php-format
+msgid "Stop %sService"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:551
+#, php-format
+msgid "Start %sService"
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:623
+#, php-format
+msgid "%s has been started."
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:693
+#, php-format
+msgid "%s has been stopped."
+msgstr ""
+
+#: src/etc/inc/service-utils.inc:762
+#, php-format
+msgid "%s has been restarted."
+msgstr ""
+
+#: src/etc/inc/services.inc:382
+msgid "Error: cannot open radvd.conf in services_radvd_configure()."
+msgstr ""
+
+#: src/etc/inc/services.inc:399
+msgid "Shutting down Router Advertisment daemon cleanly"
+msgstr ""
+
+#: src/etc/inc/services.inc:501
+msgid "Starting DHCP service..."
+msgstr ""
+
+#: src/etc/inc/services.inc:607
+msgid "Warning!  DHCP Failover setup and no CARP virtual IPs defined!"
+msgstr ""
+
+#: src/etc/inc/services.inc:774
+#, php-format
+msgid ""
+"Invalid DHCP pool %1$s - %2$s for %3$s subnet %4$s/%5$s detected. Please "
+"correct the settings in Services, DHCP Server"
+msgstr ""
+
+#: src/etc/inc/services.inc:1145
+#, php-format
+msgid "Error: cannot open dhcpd.conf in services_dhcpdv4_configure().%s"
+msgstr ""
+
+#: src/etc/inc/services.inc:1648
+msgid "Could not write Igmpproxy configuration file!"
+msgstr ""
+
+#: src/etc/inc/services.inc:1661
+msgid "Started IGMP proxy service."
+msgstr ""
+
+#: src/etc/inc/services.inc:1685
+msgid "Starting DHCP relay service..."
+msgstr ""
+
+#: src/etc/inc/services.inc:1710
+msgid "No destination IP has been configured!"
+msgstr ""
+
+#: src/etc/inc/services.inc:1784
+msgid "No suitable interface found for running dhcrelay!"
+msgstr ""
+
+#: src/etc/inc/services.inc:1820
+msgid "Starting DHCPv6 relay service..."
+msgstr ""
+
+#: src/etc/inc/services.inc:1911
+msgid "No suitable interface found for running dhcrelay -6!"
+msgstr ""
+
+#: src/etc/inc/services.inc:1972
+msgid "Starting DynDNS clients..."
+msgstr ""
+
+#: src/etc/inc/services.inc:2078
+msgid "Starting DNS forwarder..."
+msgstr ""
+
+#: src/etc/inc/services.inc:2244
+msgid "Starting DNS Resolver..."
+msgstr ""
+
+#: src/etc/inc/services.inc:2289
+msgid "Starting SNMP daemon... "
+msgstr ""
+
+#: src/etc/inc/services.inc:2300
+#, php-format
+msgid "Error: cannot open snmpd.conf in services_snmpd_configure().%s"
+msgstr ""
+
+#: src/etc/inc/services.inc:2623
+#, php-format
+msgid ""
+"phpDynDNS: Not updating %s A record because the IP address has not changed."
+msgstr ""
+
+#: src/etc/inc/services.inc:2642
+#, php-format
+msgid ""
+"phpDynDNS: Not updating %s AAAA record because the IPv6 address has not "
+"changed."
+msgstr ""
+
+#: src/etc/inc/services.inc:2677
+#, php-format
+msgid "DynDNS updated IP Address (A) for %1$s on %2$s (%3$s) to %4$s"
+msgstr ""
+
+#: src/etc/inc/services.inc:2689
+#, php-format
+msgid "DynDNS updated IPv6 Address (AAAA) for %1$s on %2$s (%3$s) to %4$s"
+msgstr ""
+
+#: src/etc/inc/services.inc:2697
+#, php-format
+msgid "phpDynDNS: ERROR while updating IP Address (A) for %1$s (%2$s)"
+msgstr ""
+
+#: src/etc/inc/services.inc:2702
+#, php-format
+msgid "phpDynDNS: ERROR while updating IP Address (AAAA) for %1$s (%2$s)"
+msgstr ""
+
+#: src/etc/inc/services.inc:2736
+msgid "Created:"
+msgstr ""
+
+#: src/etc/inc/services.inc:2762
+msgid "If possible do not add items to this file manually."
+msgstr ""
+
+#: src/etc/inc/services.inc:2763
+msgid ""
+"If done so, this file must be terminated with a blank line (e.g. new line)"
+msgstr ""
+
+#: src/etc/inc/services.inc:2813
+msgid "Starting UPnP service... "
+msgstr ""
+
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
+#, php-format
+msgid "The field '%s' contains invalid characters."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:269
+#, php-format
+msgid "The field '%s' is required."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:436 src/etc/inc/shaper.inc:1901
+#: src/etc/inc/shaper.inc:2264 src/etc/inc/shaper.inc:2650
+#: src/etc/inc/shaper.inc:2778 src/etc/inc/shaper.inc:2932
+#: src/etc/inc/shaper.inc:3051 src/etc/inc/shaper.inc:3277
+#: src/etc/inc/shaper.inc:3855 src/usr/local/www/interfaces_ppps_edit.php:913
+#: src/usr/local/www/status_queues.php:163
+#: src/usr/local/www/status_queues.php:167
+msgid "Bandwidth"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:438 src/etc/inc/shaper.inc:1903
+#: src/etc/inc/shaper.inc:2652 src/etc/inc/shaper.inc:2934
+#: src/etc/inc/shaper.inc:3281
+msgid "Bandwidthtype"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:443
+msgid "Bandwidth must be set.  This is usually the interface speed."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:446 src/etc/inc/shaper.inc:1205
+#: src/etc/inc/shaper.inc:1909
+msgid "Bandwidth must be an integer."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:449 src/etc/inc/shaper.inc:1208
+#: src/etc/inc/shaper.inc:1913
+msgid "Bandwidth cannot be negative."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:453 src/etc/inc/shaper.inc:1212
+#: src/etc/inc/shaper.inc:1918
+msgid "Bandwidth in percentage should be between 1 and 100."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:460
+msgid "Qlimit must be an integer."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:463
+msgid "Qlimit must be positive."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:466
+msgid "Tbrsize must be an integer."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:469
+msgid "Tbrsize must be positive."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:688
+#, php-format
+msgid "SHAPER: no default queue specified for interface %s."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:688
+msgid "The interface queue will be enforced as default."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:774
+msgid "Remove shaper from this interface"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:798 src/etc/inc/shaper.inc:1406
+msgid "Enable/Disable"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:805 src/etc/inc/shaper.inc:1414
+#: src/etc/inc/shaper.inc:3830 src/etc/inc/shaper.inc:4143
+#: src/usr/local/www/firewall_aliases_edit.php:662
+#: src/usr/local/www/load_balancer_monitor_edit.php:271
+#: src/usr/local/www/load_balancer_pool_edit.php:306
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:177
+#: src/usr/local/www/services_checkip_edit.php:127
+#: src/usr/local/www/system_gateways_edit.php:617
+msgid "*Name"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:811
+msgid "Scheduler Type"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:818
+msgid ""
+"Changing this changes all child queues! Beware information can be lost."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:844 src/etc/inc/shaper.inc:1436
+msgid "Queue Limit"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:851
+msgid "TBR Size"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:854
+msgid ""
+"Adjusts the size, in bytes, of the token bucket regulator. If not specified, "
+"heuristics based on the interface bandwidth are used to determine the size."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1219
+msgid "The priority must be an integer between 1 and 15."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1222 src/etc/inc/shaper.inc:3296
+msgid "Queue limit must be an integer"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1225
+msgid "Queue limit must be positive"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1228 src/etc/inc/shaper.inc:1231
+#: src/etc/inc/shaper.inc:3299 src/etc/inc/shaper.inc:3302
+msgid "Queue names must be alphanumeric and _ or - only."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1235
+msgid "Only one default queue per interface is allowed."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1417
+msgid ""
+"Enter the name of the queue here. Do not use spaces and limit the size to 15 "
+"characters."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1428 src/usr/local/www/interfaces_bridge_edit.php:584
+#: src/usr/local/www/interfaces_vlan.php:109
+#: src/usr/local/www/system_gateway_groups.php:132
+msgid "Priority"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1432
+msgid ""
+"For hfsc, the range is 0 to 7. The default is 1. Hfsc queues with a higher "
+"priority are preferred in the case of overload."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1439
+msgid "Queue limit in packets."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1441
+msgid "Scheduler options"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1450 src/usr/local/www/firewall_rules_edit.php:1719
+msgid "Default Queue"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1458
+#, php-format
+msgid "%1$sRandom Early Detection%2$s"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1465
+#, php-format
+msgid "%1$sRandom Early Detection In and Out%2$s"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1472
+#, php-format
+msgid "%1$sExplicit Congestion Notification%2$s"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1479
+#, php-format
+msgid "%1$sCodel Active Queue%2$s"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1481
+msgid "Select options for this queue"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1487 src/etc/inc/shaper.inc:3891
+#: src/etc/inc/shaper.inc:4195 src/usr/local/www/firewall_aliases.php:194
+#: src/usr/local/www/firewall_aliases_edit.php:670
+#: src/usr/local/www/firewall_aliases_edit.php:728
+#: src/usr/local/www/firewall_aliases_import.php:262
+#: src/usr/local/www/firewall_nat.php:234
+#: src/usr/local/www/firewall_nat_1to1.php:154
+#: src/usr/local/www/firewall_nat_1to1_edit.php:530
+#: src/usr/local/www/firewall_nat_edit.php:884
+#: src/usr/local/www/firewall_nat_npt.php:153
+#: src/usr/local/www/firewall_nat_npt_edit.php:236
+#: src/usr/local/www/firewall_nat_out.php:285
+#: src/usr/local/www/firewall_nat_out.php:538
+#: src/usr/local/www/firewall_nat_out_edit.php:662
+#: src/usr/local/www/firewall_rules.php:393
+#: src/usr/local/www/firewall_rules_edit.php:1457
+#: src/usr/local/www/firewall_schedule.php:95
+#: src/usr/local/www/firewall_schedule_edit.php:375
+#: src/usr/local/www/firewall_schedule_edit.php:619
+#: src/usr/local/www/firewall_virtual_ip.php:264
+#: src/usr/local/www/firewall_virtual_ip_edit.php:425
+#: src/usr/local/www/guiconfig.inc:1139 src/usr/local/www/interfaces.php:494
+#: src/usr/local/www/interfaces.php:1899 src/usr/local/www/interfaces.php:3222
+#: src/usr/local/www/interfaces_bridge.php:104
+#: src/usr/local/www/interfaces_bridge_edit.php:409
+#: src/usr/local/www/interfaces_gif.php:99
+#: src/usr/local/www/interfaces_gif_edit.php:226
+#: src/usr/local/www/interfaces_gre.php:99
+#: src/usr/local/www/interfaces_gre_edit.php:213
+#: src/usr/local/www/interfaces_groups.php:81
+#: src/usr/local/www/interfaces_lagg.php:106
+#: src/usr/local/www/interfaces_lagg_edit.php:255
+#: src/usr/local/www/interfaces_ppps.php:99
+#: src/usr/local/www/interfaces_ppps_edit.php:587
+#: src/usr/local/www/interfaces_qinq.php:112
+#: src/usr/local/www/interfaces_qinq_edit.php:268
+#: src/usr/local/www/interfaces_vlan.php:110
+#: src/usr/local/www/interfaces_vlan_edit.php:209
+#: src/usr/local/www/interfaces_wireless.php:101
+#: src/usr/local/www/interfaces_wireless_edit.php:197
+#: src/usr/local/www/load_balancer_monitor.php:108
+#: src/usr/local/www/load_balancer_monitor_edit.php:86
+#: src/usr/local/www/load_balancer_pool.php:125
+#: src/usr/local/www/load_balancer_pool_edit.php:323
+#: src/usr/local/www/load_balancer_virtual_server.php:146
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:184
+#: src/usr/local/www/pkg_mgr.php:68 src/usr/local/www/pkg_mgr.php:159
+#: src/usr/local/www/pkg_mgr_installed.php:79
+#: src/usr/local/www/services_captiveportal_hostname.php:117
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:192
+#: src/usr/local/www/services_captiveportal_ip.php:111
+#: src/usr/local/www/services_captiveportal_ip_edit.php:230
+#: src/usr/local/www/services_captiveportal_mac.php:178
+#: src/usr/local/www/services_captiveportal_mac_edit.php:233
+#: src/usr/local/www/services_captiveportal_zones.php:77
+#: src/usr/local/www/services_checkip.php:91
+#: src/usr/local/www/services_checkip_edit.php:162
+#: src/usr/local/www/services_dhcp.php:686
+#: src/usr/local/www/services_dhcp.php:1404
+#: src/usr/local/www/services_dhcp_edit.php:474
+#: src/usr/local/www/services_dhcpv6.php:1010
+#: src/usr/local/www/services_dhcpv6_edit.php:242
+#: src/usr/local/www/services_dnsmasq.php:366
+#: src/usr/local/www/services_dnsmasq.php:440
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:159
+#: src/usr/local/www/services_dnsmasq_edit.php:223
+#: src/usr/local/www/services_dnsmasq_edit.php:272
+#: src/usr/local/www/services_dyndns.php:93
+#: src/usr/local/www/services_dyndns_edit.php:407
+#: src/usr/local/www/services_igmpproxy.php:86
+#: src/usr/local/www/services_igmpproxy_edit.php:163
+#: src/usr/local/www/services_pppoe.php:105
+#: src/usr/local/www/services_pppoe_edit.php:346
+#: src/usr/local/www/services_rfc2136.php:85
+#: src/usr/local/www/services_rfc2136_edit.php:285
+#: src/usr/local/www/services_unbound.php:439
+#: src/usr/local/www/services_unbound.php:515
+#: src/usr/local/www/services_unbound_acls.php:239
+#: src/usr/local/www/services_unbound_acls.php:265
+#: src/usr/local/www/services_unbound_acls.php:301
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:141
+#: src/usr/local/www/services_unbound_host_edit.php:238
+#: src/usr/local/www/services_unbound_host_edit.php:287
+#: src/usr/local/www/services_wol.php:177
+#: src/usr/local/www/services_wol_edit.php:148
+#: src/usr/local/www/status_dhcp_leases.php:363
+#: src/usr/local/www/status_gateway_groups.php:66
+#: src/usr/local/www/status_gateways.php:67
+#: src/usr/local/www/status_graph.php:171
+#: src/usr/local/www/status_ipsec.php:479
+#: src/usr/local/www/status_lb_pool.php:137
+#: src/usr/local/www/status_lb_vs.php:67
+#: src/usr/local/www/status_services.php:87
+#: src/usr/local/www/status_upnp.php:73
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
+#: src/usr/local/www/system_gateway_groups.php:133
+#: src/usr/local/www/system_gateway_groups_edit.php:309
+#: src/usr/local/www/system_gateway_groups_edit.php:338
+#: src/usr/local/www/system_gateways.php:261
+#: src/usr/local/www/system_gateways_edit.php:684
+#: src/usr/local/www/system_groupmanager.php:232
+#: src/usr/local/www/system_groupmanager.php:311
+#: src/usr/local/www/system_groupmanager.php:416
+#: src/usr/local/www/system_routes.php:246
+#: src/usr/local/www/system_routes_edit.php:275
+#: src/usr/local/www/system_usermanager.php:437
+#: src/usr/local/www/vpn_ipsec_phase1.php:692
+#: src/usr/local/www/vpn_ipsec_phase2.php:583
+#: src/usr/local/www/vpn_openvpn_client.php:590
+#: src/usr/local/www/vpn_openvpn_client.php:907
+#: src/usr/local/www/vpn_openvpn_csc.php:349
+#: src/usr/local/www/vpn_openvpn_csc.php:664
+#: src/usr/local/www/vpn_openvpn_server.php:744
+#: src/usr/local/www/vpn_openvpn_server.php:1342
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
+#: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:76
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:137
+msgid "Description"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1566
+msgid "Delete Queue from this Interface"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1924
+msgid "upperlimit service curve defined but missing (d) value"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1927
+msgid ""
+"upperlimit service curve defined but missing initial bandwidth (m1) value"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1930
+msgid "upperlimit m1 value needs to be Kb, Mb, Gb, or %"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1933
+msgid "upperlimit d value needs to be numeric"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1936
+msgid "upperlimit m2 value needs to be Kb, Mb, Gb, or %"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1953
+msgid "linkshare service curve defined but missing (d) value"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1956
+msgid ""
+"linkshare service curve defined but missing initial bandwidth (m1) value"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1959
+msgid "linkshare m1 value needs to be Kb, Mb, Gb, or %"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1962
+msgid "linkshare d value needs to be numeric"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1965
+msgid "linkshare m2 value needs to be Kb, Mb, Gb, or %"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1968
+msgid "realtime service curve defined but missing (d) value"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1971
+msgid ""
+"realtime service curve defined but missing initial bandwidth (m1) value"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1989
+msgid "realtime m1 value needs to be Kb, Mb, Gb, or %"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1992
+msgid "realtime d value needs to be numeric"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:1995
+msgid "realtime m2 value needs to be Kb, Mb, Gb, or %"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2262
+msgid "Service Curve (sc)"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2285 src/etc/inc/shaper.inc:2798
+#: src/etc/inc/shaper.inc:3071
+msgid "Choose the amount of bandwidth for this queue"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2289
+msgid "Max bandwidth for queue."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2303 src/etc/inc/shaper.inc:2336
+#: src/etc/inc/shaper.inc:2368
+msgid "m1"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2310 src/etc/inc/shaper.inc:2343
+#: src/etc/inc/shaper.inc:2375
+msgid "d"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2317 src/etc/inc/shaper.inc:2350
+#: src/etc/inc/shaper.inc:2382
+msgid "m2"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2322
+msgid "Min bandwidth for queue."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2354
+msgid "B/W share of a backlogged queue."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2647
+msgid "Priority must be an integer between 1 and 7."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2776
+msgid "NOTITLE"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2804
+msgid "Scheduler option"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2929
+msgid "Priority must be an integer between 1 and 255."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3077
+msgid "Scheduler specific options"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3080
+msgid "Number of buckets available"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3087
+msgid "Bandwidth limit for hosts to not saturate link"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3289
+msgid "Packet Loss Rate must be a value between 0 and 1."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3293
+msgid "Buckets must be an integer between 16 and 65535."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3306
+msgid "IPv4 bit mask must be blank or numeric value between 1 and 32."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3311
+msgid "IPv6 bit mask must be blank or numeric value between 1 and 128."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3407
+#, php-format
+msgid "SHAPER: Could not create queue %1$s on interface %2$s because: %3$s"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3465
+#, php-format
+msgid "Bandwidth for schedule %s must be an integer."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3467
+#, php-format
+msgid "Burst for schedule %s must be an integer."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3474
+msgid "A schedule needs to be specified for every additional entry."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3477
+msgid ""
+"If more than one bandwidth configured all schedules need to be selected."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3480
+msgid "At least one bw specification is necessary."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3483
+msgid "Delay must be an integer."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3787 src/usr/local/www/firewall_aliases_edit.php:735
+#: src/usr/local/www/firewall_nat.php:471
+#: src/usr/local/www/firewall_nat_1to1.php:245
+#: src/usr/local/www/firewall_nat_npt.php:234
+#: src/usr/local/www/firewall_nat_out.php:502
+#: src/usr/local/www/firewall_rules.php:832
+#: src/usr/local/www/firewall_schedule_edit.php:623
+#: src/usr/local/www/firewall_schedule_edit.php:1120
+#: src/usr/local/www/interfaces_assign.php:538
+#: src/usr/local/www/interfaces_qinq_edit.php:312
+#: src/usr/local/www/interfaces_vlan.php:133
+#: src/usr/local/www/pkg_edit.php:1441 src/usr/local/www/services_dhcp.php:1325
+#: src/usr/local/www/services_dhcp_relay.php:186
+#: src/usr/local/www/services_dhcpv6.php:951
+#: src/usr/local/www/services_dnsmasq_edit.php:276
+#: src/usr/local/www/services_igmpproxy_edit.php:232
+#: src/usr/local/www/services_ntpd.php:266
+#: src/usr/local/www/services_ntpd_acls.php:290
+#: src/usr/local/www/services_pppoe_edit.php:520
+#: src/usr/local/www/services_router_advertisements.php:424
+#: src/usr/local/www/services_unbound_acls.php:269
+#: src/usr/local/www/services_unbound_host_edit.php:291
+#: src/usr/local/www/system.php:504
+#: src/usr/local/www/system_certmanager.php:750
+#: src/usr/local/www/system_usermanager.php:631
+msgid "Delete"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3795
+msgid "Add Schedule"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3818 src/etc/inc/shaper.inc:4131
+#: src/usr/local/www/firewall_shaper.php:372
+#: src/usr/local/www/firewall_shaper_queues.php:205
+#: src/usr/local/www/firewall_shaper_vinterface.php:39
+#: src/usr/local/www/firewall_shaper_vinterface.php:372
+#: src/usr/local/www/firewall_shaper_wizards.php:75
+msgid "Limiters"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3822 src/etc/inc/shaper.inc:4135
+#: src/usr/local/www/firewall_nat_1to1_edit.php:541
+#: src/usr/local/www/firewall_rules.php:783
+#: src/usr/local/www/interfaces.php:1728 src/usr/local/www/interfaces.php:3019
+#: src/usr/local/www/services_captiveportal.php:536
+#: src/usr/local/www/services_captiveportal_vouchers.php:443
+#: src/usr/local/www/services_checkip_edit.php:120
+#: src/usr/local/www/services_dhcp.php:796
+#: src/usr/local/www/services_dhcp.php:803
+#: src/usr/local/www/services_dhcp.php:1211
+#: src/usr/local/www/services_dhcp_relay.php:148
+#: src/usr/local/www/services_dhcpv6_relay.php:148
+#: src/usr/local/www/services_dnsmasq.php:248
+#: src/usr/local/www/services_pppoe_edit.php:295
+#: src/usr/local/www/services_rfc2136_edit.php:162
+#: src/usr/local/www/services_snmp.php:215
+#: src/usr/local/www/services_snmp.php:258
+#: src/usr/local/www/services_unbound.php:268
+#: src/usr/local/www/vpn_ipsec_phase1.php:857
+#: src/usr/local/www/vpn_l2tp.php:192 src/usr/local/www/vpn_l2tp.php:278
+#: src/usr/local/www/diag_routes.php:82
+msgid "Enable"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3866 src/etc/inc/shaper.inc:4170
+msgid "Source addresses"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3866 src/etc/inc/shaper.inc:4170
+msgid "Destination addresses"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3864 src/etc/inc/shaper.inc:4168
+msgid "Mask"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3867 src/etc/inc/shaper.inc:4171
+msgid ""
+"If \"source\" or \"destination\" slots is chosen a dynamic pipe with the "
+"bandwidth, delay, packet loss and queue size given above will be created for "
+"each source/destination IP address encountered, respectively. This makes it "
+"possible to easily specify bandwidth limits per host."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3878 src/etc/inc/shaper.inc:4182
+#, php-format
+msgid "IPv4 mask bits%1$s%2$s"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3885 src/etc/inc/shaper.inc:4189
+#, php-format
+msgid "IPv6 mask bits%1$s%2$s"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3894 src/etc/inc/shaper.inc:4198
+#: src/usr/local/www/firewall_aliases_edit.php:673
+#: src/usr/local/www/firewall_aliases_import.php:265
+#: src/usr/local/www/firewall_nat_1to1_edit.php:533
+#: src/usr/local/www/firewall_nat_edit.php:887
+#: src/usr/local/www/firewall_nat_npt_edit.php:239
+#: src/usr/local/www/firewall_nat_out_edit.php:665
+#: src/usr/local/www/firewall_virtual_ip_edit.php:428
+#: src/usr/local/www/interfaces_gif_edit.php:229
+#: src/usr/local/www/interfaces_gre_edit.php:216
+#: src/usr/local/www/interfaces_qinq_edit.php:271
+#: src/usr/local/www/interfaces_wireless_edit.php:200
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:195
+#: src/usr/local/www/services_captiveportal_zones_edit.php:96
+#: src/usr/local/www/services_checkip_edit.php:165
+#: src/usr/local/www/services_dhcp_edit.php:477
+#: src/usr/local/www/services_dhcpv6_edit.php:245
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:162
+#: src/usr/local/www/services_dnsmasq_edit.php:226
+#: src/usr/local/www/services_dyndns_edit.php:410
+#: src/usr/local/www/services_igmpproxy_edit.php:166
+#: src/usr/local/www/services_rfc2136_edit.php:288
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:144
+#: src/usr/local/www/services_unbound_host_edit.php:241
+#: src/usr/local/www/services_wol_edit.php:151
+#: src/usr/local/www/system_gateway_groups_edit.php:341
+#: src/usr/local/www/system_routes_edit.php:278
+#: src/usr/local/www/vpn_ipsec_phase1.php:695
+#: src/usr/local/www/vpn_ipsec_phase2.php:586
+#: src/usr/local/www/vpn_openvpn_client.php:593
+#: src/usr/local/www/vpn_openvpn_server.php:747
+msgid ""
+"A description may be entered here for administrative reference (not parsed)."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3898 src/etc/inc/shaper.inc:4202
+#: src/usr/local/www/firewall_rules_edit.php:1472
+#: src/usr/local/www/firewall_rules_edit.php:1478
+#: src/usr/local/www/interfaces_bridge_edit.php:425
+#: src/usr/local/www/vpn_ipsec_phase1.php:822
+msgid "Advanced Options"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3902
+msgid "Delay (ms)"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3905
+msgid ""
+"In most cases, zero (0) should specified here (or leave the field empty)."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3909 src/etc/inc/shaper.inc:4215
+msgid "Packet Loss Rate"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3913
+msgid ""
+"In most cases, zero (0) should be specified here (or leave the field empty). "
+"A value of 0.001 means one packet in 1000 gets dropped."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3918 src/etc/inc/shaper.inc:4224
+msgid "Queue size (slots)"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3921 src/etc/inc/shaper.inc:4227
+msgid ""
+"In most cases, the field should be left empty. All packets in this pipe are "
+"placed into a fixed-size queue first, then they are delayed by value "
+"specified in the Delay field, and then they are delivered to their "
+"destination."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3926 src/etc/inc/shaper.inc:4232
+msgid "Bucket size (slots)"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3929
+msgid ""
+"In most cases, this field should be left empty. It increases the hash size "
+"set."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4000
+msgid "Weight must be an integer between 1 and 100."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4206 src/usr/local/www/system_gateways_edit.php:711
+msgid "Weight"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4210
+msgid ""
+"For queues under the same parent this specifies the share that a queue "
+"gets(values range from 1 to 100), it can be left blank otherwise."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4219
+msgid ""
+"In most cases, zero (0) should be specified here (or leave the field empty). "
+"A value of 0.001 means one packet in 1000 gets dropped"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4235
+msgid ""
+"In most cases, this field should be left empty. It increases the hash size "
+"set"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4630
+msgid "Clone Shaper to this Interface"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4639
+#, php-format
+msgid "Welcome to the %s Traffic Shaper."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4642
+#, php-format
+msgid "The tree on the left navigates through the %s."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4643
+msgid "queues"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4644
+msgid "limiters"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4646
+#, php-format
+msgid ""
+"Buttons at the bottom represent %s actions and are activated accordingly."
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4647 src/usr/local/www/diag_pftop.php:97
+msgid "queue"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4648
+msgid "limiter"
+msgstr ""
+
+#: src/etc/inc/system.inc:541
+msgid "Error: cannot open hosts file in system_hosts_generate()."
+msgstr ""
+
+#: src/etc/inc/system.inc:708
+msgid "Not adding default route because OLSR dynamic gateway is enabled."
+msgstr ""
+
+#: src/etc/inc/system.inc:732
+#, php-format
+msgid "ROUTING: setting default route to %s"
+msgstr ""
+
+#: src/etc/inc/system.inc:743
+#, php-format
+msgid "ROUTING: setting IPv6 default route to %s"
+msgstr ""
+
+#: src/etc/inc/system.inc:764
+#, php-format
+msgid "Static Routes: Gateway IP could not be found for %s"
+msgstr ""
+
+#: src/etc/inc/system.inc:980
+msgid "Starting syslog..."
+msgstr ""
+
+#: src/etc/inc/system.inc:1153
+#, php-format
+msgid "Error: cannot open syslog.conf in system_syslogd_start().%s"
+msgstr ""
+
+#: src/etc/inc/system.inc:1230
+msgid "Creating SSL Certificate for this host"
+msgstr ""
+
+#: src/etc/inc/system.inc:1234
+#, php-format
+msgid "webConfigurator default (%s)"
+msgstr ""
+
+#: src/etc/inc/system.inc:1246
+#, php-format
+msgid "Error creating WebGUI Certificate: openssl library returns: %s"
+msgstr ""
+
+#: src/etc/inc/system.inc:1255
+#, php-format
+msgid "Generated new self-signed HTTPS certificate (%s)"
+msgstr ""
+
+#: src/etc/inc/system.inc:1263
+msgid "Starting webConfigurator..."
+msgstr ""
+
+#: src/etc/inc/system.inc:1313 src/etc/inc/system.inc:2189
+#: src/etc/inc/system.inc:2192
+msgid "failed!"
+msgstr ""
+
+#: src/etc/inc/system.inc:1515
+#, php-format
+msgid "Error: cannot open certificate file in system_webgui_start().%s"
+msgstr ""
+
+#: src/etc/inc/system.inc:1528
+#, php-format
+msgid "Error: cannot open certificate key file in system_webgui_start().%s"
+msgstr ""
+
+#: src/etc/inc/system.inc:1555
+#, php-format
+msgid "Error: cannot open %1$s in system_generate_nginx_config().%2$s"
+msgstr ""
+
+#: src/etc/inc/system.inc:1604
+msgid "Setting timezone..."
+msgstr ""
+
+#: src/etc/inc/system.inc:2021
+#, php-format
+msgid "Could not open %s/ntpd.conf for writing"
+msgstr ""
+
+#: src/etc/inc/system.inc:2141
+#, php-format
+msgid "Error: cannot open dmesg.boot in system_dmesg_save().%s"
+msgstr ""
+
+#: src/etc/inc/system.inc:2168
+msgid "Setting hard disk standby... "
+msgstr ""
+
+#: src/etc/inc/system.inc:2383
+msgid "PC Engines WRAP"
+msgstr ""
+
+#: src/etc/inc/system.inc:2387 src/etc/inc/system.inc:2406
+msgid "PC Engines ALIX"
+msgstr ""
+
+#: src/etc/inc/unbound.inc:741 src/usr/local/www/services_dhcpv6.php:803
+#: src/usr/local/www/services_unbound_acls.php:234
+msgid "Deny"
+msgstr ""
+
+#: src/etc/inc/unbound.inc:742 src/usr/local/www/services_unbound_acls.php:234
+msgid "Refuse"
+msgstr ""
+
+#: src/etc/inc/unbound.inc:743
+msgid "Static"
+msgstr ""
+
+#: src/etc/inc/unbound.inc:744
+msgid "Transparent"
+msgstr ""
+
+#: src/etc/inc/unbound.inc:745
+msgid "Type Transparent"
+msgstr ""
+
+#: src/etc/inc/unbound.inc:747
+msgid "Inform"
+msgstr ""
+
+#: src/etc/inc/unbound.inc:748
+msgid "Inform Deny"
+msgstr ""
+
+#: src/etc/inc/unbound.inc:749
+msgid "No Default"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:102
+#, php-format
+msgid ""
+"%sWarning: filter rule removed (interface '%s' does not exist anymore)."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:114
+#, php-format
+msgid ""
+"%sWarning: filter rule removed (source network '%s' does not exist anymore)."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:127
+#, php-format
+msgid ""
+"%sWarning: filter rule removed (destination network '%s' does not exist "
+"anymore)."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:147
+#, php-format
+msgid ""
+"%sWarning: traffic shaper rule removed (interface '%s' does not exist "
+"anymore)."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:159
+#, php-format
+msgid ""
+"%sWarning: traffic shaper rule removed (source network '%s' does not exist "
+"anymore)."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:172
+#, php-format
+msgid ""
+"%sWarning: traffic shaper rule removed (destination network '%s' does not "
+"exist anymore)."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:343
+#, php-format
+msgid "CARP vhid %s"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:523
+msgid "Permit IPsec traffic."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:598
+msgid "System Administrators"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:617
+msgid ""
+"Indicates whether this user will lock access to the webConfigurator for "
+"other users."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:620
+msgid ""
+"Indicates whether this user will lock individual HTML pages after having "
+"accessed a particular page (the lock will be freed if the user leaves or "
+"saves the page form)."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:623
+msgid "Indicates whether this user is able to login for example via SSH."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:626
+#, php-format
+msgid ""
+"Indicates whether this user is allowed to copy files onto the %s appliance "
+"via SCP/SFTP."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:629
+msgid ""
+"This user is associated with the UNIX root user (this privilege should only "
+"be associated with one single user)."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:648
+msgid "Drop packets to closed TCP ports without returning a RST"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:652
+msgid "Do not send ICMP port unreachable messages for closed UDP ports"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:656
+msgid "Randomize the ID field in IP packets (default is 0: sequential IP IDs)"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:660
+msgid "Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:664
+msgid "Sending of IPv4 ICMP redirects"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:668
+msgid "Sending of IPv6 ICMP redirects"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:672
+msgid "Generate SYN cookies for outbound SYN-ACK packets"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:676
+msgid "Maximum incoming TCP datagram size"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:680
+msgid "Maximum outgoing TCP datagram size"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:684
+msgid "Do not delay ACK to try and piggyback it onto a data packet"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:688
+msgid "Maximum outgoing UDP datagram size"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:692
+msgid ""
+"Handling of non-IP packets which are not passed to pfil (see if_bridge(4))"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:696
+msgid "Allow unprivileged access to tap(4) device nodes"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:700
+msgid ""
+"Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:704
+msgid ""
+"The system will attempt to calculate the bandwidth delay product for each "
+"connection and limit the amount of data queued to the network to just the "
+"amount required to maintain optimum throughput. "
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:708
+msgid "Set ICMP Limits"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:712
+msgid "TCP Offload engine"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:755
+#, php-format
+msgid "Interface %s Static Gateway"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:758
+#, php-format
+msgid "Interface %s Dynamic Gateway"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:825
+#, php-format
+msgid "Upgraded static route for %s"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:923
+#, php-format
+msgid "Sitedown pool for VS: %s"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:1086
+#, php-format
+msgid "phase2 for %s"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:1323
+#, php-format
+msgid "Upgraded Dyndns %s"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:1377
+msgid "All Users"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:1520
+#, php-format
+msgid "Converted bridged %s"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:1911
+msgid "Auto added OpenVPN rule from config upgrade."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:3972
+#, php-format
+msgid ""
+"WEP is no longer supported. It will be disabled on the %s interface and the "
+"interface will be disabled. Please reconfigure the interface."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:4229
+#, php-format
+msgid "DES is no longer supported, IPsec phase 1 item '%s' is being disabled."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:4246
+#, php-format
+msgid "DES is no longer supported, IPsec phase 2 item '%s' is being disabled."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:4302
+msgid ""
+"Layer 7 shaping is no longer supported. Its configuration has been removed."
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:5090
+#, php-format
+msgid "RRD restore failed exited with %1$s, the error is: %2$s"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:5099
+#, php-format
+msgid "Could not extract %s RRD xml file from archive!"
+msgstr ""
+
+#: src/etc/inc/upgrade_config.inc:5104
+#, php-format
+msgid "rrdtool restore -f '%1$s' '%2$s' failed returning %3$s."
+msgstr ""
+
+#: src/etc/inc/util.inc:98
+#, php-format
+msgid "WARNING: Could not mark subsystem: %s dirty"
+msgstr ""
+
+#: src/etc/inc/util.inc:119
+msgid "WARNING: A name must be given as parameter to lock() function."
+msgstr ""
+
+#: src/etc/inc/util.inc:137
+msgid "WARNING: A name must be given as parameter to try_lock() function."
+msgstr ""
+
+#: src/etc/inc/util.inc:1042
+#, php-format
+msgid ""
+"The %1$s name must be less than 32 characters long, may not consist of only "
+"numbers, may not consist of only underscores, and may only contain the "
+"following characters: %2$s"
+msgstr ""
+
+#: src/etc/inc/util.inc:1049
+#, php-format
+msgid "The %1$s name must not be either of the reserved words %2$s or %3$s."
+msgstr ""
+
+#: src/etc/inc/util.inc:1056
+#, php-format
+msgid ""
+"The %1$s name must not be a well-known IP protocol name such as TCP, UDP, "
+"ICMP etc."
+msgstr ""
+
+#: src/etc/inc/util.inc:1063
+#, php-format
+msgid ""
+"The %1$s name must not be a well-known TCP or UDP port name such as ssh, "
+"smtp, pop3, tftp, http, openvpn etc."
+msgstr ""
+
+#: src/etc/inc/util.inc:1688
+#, php-format
+msgid "The command '%1$s' returned exit code '%2$d', the output was '%3$s' "
+msgstr ""
+
+#: src/etc/inc/util.inc:2552
+#, php-format
+msgid "%s must be a valid IPv4 address or alias."
+msgstr ""
+
+#: src/etc/inc/util.inc:2556
+#, php-format
+msgid "%s must be a valid IPv4 address."
+msgstr ""
+
+#: src/etc/inc/util.inc:2568
+#, php-format
+msgid "%s must be a valid IPv6 address or alias."
+msgstr ""
+
+#: src/etc/inc/util.inc:2572
+#, php-format
+msgid "%s must be a valid IPv6 address."
+msgstr ""
+
+#: src/etc/inc/util.inc:2586
+#, php-format
+msgid "%s must be a valid IPv4 or IPv6 address or alias."
+msgstr ""
+
+#: src/etc/inc/util.inc:2590
+#, php-format
+msgid "%s must be a valid IPv4 or IPv6 address."
+msgstr ""
+
+#: src/etc/inc/util.inc:2645
+msgid "Error: attempting to write DUID file - Invalid DUID detected"
+msgstr ""
+
+#: src/etc/inc/util.inc:2655
+msgid "Error: attempting to write DUID file - File write error"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:105
+#, php-format
+msgid "Captive Portal Voucher database synchronized with %1$s:%2$s"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:192 src/etc/inc/voucher.inc:334
+#, php-format
+msgid "%1$s (%2$s/%3$s): not found on any registered Roll"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:196
+#, php-format
+msgid "%1$s invalid: %2$s!!"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:283
+#, php-format
+msgid "%s invalid: Too short!"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:309
+#, php-format
+msgid "%1$s (%2$s/%3$s) active and good for %4$d Minutes"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:321
+#, php-format
+msgid "%1$s (%2$s/%3$s) already used and expired"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:329
+#, php-format
+msgid "%1$s (%2$s/%3$s) good for %4$s Minutes"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:340
+#, php-format
+msgid "%1$s invalid: %2$s !!"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:350
+msgid "Access denied!"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:352
+#, php-format
+msgid "Access granted for %d Minutes in total."
+msgstr ""
+
+#: src/etc/inc/voucher.inc:421
+msgid "Enabling voucher support... "
+msgstr ""
+
+#: src/etc/inc/voucher.inc:464
+#, php-format
+msgid "Error: cannot write voucher.cfg"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:519
+#, php-format
+msgid "cant write %1$s/voucher_%2$s_used_%3$s.db"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:605
+#, php-format
+msgid "cant read %1$s/voucher_%2$s_used_%3$s.db"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:622
+#, php-format
+msgid "Voucher: %s"
+msgstr ""
+
+#: src/etc/inc/voucher.inc:677
+msgid "Syncing vouchers"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:233
+msgid "Configuring IPsec VPN... "
+msgstr ""
+
+#: src/etc/inc/vpn.inc:274
+#, php-format
+msgid ""
+"IPsec ERROR: Could not find phase 1 source for connection %s. Omitting from "
+"configuration file."
+msgstr ""
+
+#: src/etc/inc/vpn.inc:303
+#, php-format
+msgid "The remote gateway %s already exists on another phase 1 entry"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:620
+#, php-format
+msgid "Warning: Missing CRL data for %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:625
+#, php-format
+msgid "Error: Cannot write IPsec CRL file for %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:649
+#, php-format
+msgid "Error: Invalid phase1 certificate reference for %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:667
+#, php-format
+msgid "Error: Cannot write phase1 key file for %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:674
+#, php-format
+msgid "Error: Cannot write phase1 certificate file for %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:739
+#, php-format
+msgid "Error: Invalid certificate hash info for %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:744
+#, php-format
+msgid "Error: Cannot write IPsec CA file for %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1363
+#, php-format
+msgid "No phase2 specifications for tunnel with REQID = %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1482
+#, php-format
+msgid "Ignoring IPsec reload since there are no tunnels on interface %s"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1488
+msgid "Forcefully reloading IPsec"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1538
+msgid "Configuring PPPoE Server service... "
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1563
+#, php-format
+msgid "Error: cannot open mpd.conf in vpn_pppoe_configure()."
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1680
+#, php-format
+msgid "Error: cannot open mpd.secret in vpn_pppoe_configure()."
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1714
+msgid "done"
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1736
+msgid "Configuring l2tp VPN service... "
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1775
+#, php-format
+msgid "Error: cannot open mpd.conf in vpn_l2tp_configure()."
+msgstr ""
+
+#: src/etc/inc/vpn.inc:1872
+#, php-format
+msgid "Error: cannot open mpd.secret in vpn_l2tp_configure()."
+msgstr ""
+
+#: src/etc/inc/xmlparse.inc:87 src/etc/inc/xmlparse_attr.inc:72
+#, php-format
+msgid "XML error: %1$s at line %2$d cannot occur more than once"
+msgstr ""
+
+#: src/etc/inc/xmlparse.inc:180 src/etc/inc/xmlparse_attr.inc:188
+msgid "Error: could not open XML input"
+msgstr ""
+
+#: src/etc/inc/xmlparse.inc:186
+#, php-format
+msgid "XML error: %1$s at line %2$d in %3$s"
+msgstr ""
+
+#: src/etc/inc/xmlparse.inc:206 src/etc/inc/xmlparse_attr.inc:211
+#, php-format
+msgid "XML error: no %s object found!"
+msgstr ""
+
+#: src/etc/inc/xmlparse_attr.inc:198
+#, php-format
+msgid "XML error: %1$s at line %2$d"
+msgstr ""
+
+#: src/etc/inc/xmlreader.inc:161
+#, php-format
+msgid "Error returned while trying to parse %s"
+msgstr ""
+
+#: src/etc/inc/xmlrpc_client.inc:91
+#, php-format
+msgid "Beginning XMLRPC sync data to %s."
+msgstr ""
+
+#: src/etc/inc/xmlrpc_client.inc:94
+#, php-format
+msgid ""
+"A communications error occurred while attempting XMLRPC sync with %s "
+"(pfsense.%s)."
+msgstr ""
+
+#: src/etc/inc/xmlrpc_client.inc:125
+msgid "Error code received"
+msgstr ""
+
+#: src/usr/local/bin/dhcpd_gather_stats.php:102
+#: src/usr/local/www/status_dhcp_leases.php:189
+msgid "Never"
+msgstr ""
+
+#: src/usr/local/sbin/gmirror_status_check.php:45
+#, php-format
+msgid "List of mirrors changed. Old: (%s) New: (%s)"
+msgstr ""
+
+#: src/usr/local/sbin/gmirror_status_check.php:53
+#, php-format
+msgid "Mirror %s status changed from %s to %s."
+msgstr ""
+
+#: src/usr/local/sbin/gmirror_status_check.php:58
+#, php-format
+msgid "Mirror %s consumer count changed from %d to %d."
+msgstr ""
+
+#: src/usr/local/sbin/gmirror_status_check.php:65
+#, php-format
+msgid "Mirror %s drive status changed. Old: (%s) New: (%s)"
+msgstr ""
+
+#: src/usr/local/www/bandwidth_by_ip.php:33
+msgid "Wrong Interface"
+msgstr ""
+
+#: src/usr/local/www/bandwidth_by_ip.php:159
+msgid "no info"
+msgstr ""
+
+#: src/usr/local/www/classes/Form/Section.class.php:78
+#: src/usr/local/www/diag_gmirror.php:54 src/usr/local/www/diag_gmirror.php:198
+#: src/usr/local/www/diag_gmirror.php:200 src/usr/local/www/easyrule.php:107
+#: src/usr/local/www/easyrule.php:109 src/usr/local/www/pkg_mgr_install.php:340
+#: src/usr/local/www/pkg_mgr_install.php:342
+#: src/usr/local/www/pkg_mgr_install.php:352
+#: src/usr/local/www/pkg_mgr_install.php:354
+msgid "Confirm"
+msgstr ""
+
+#: src/usr/local/www/classes/Form.class.php:38
+#: src/usr/local/www/diag_confbak.php:172 src/usr/local/www/diag_edit.php:122
+#: src/usr/local/www/diag_edit.php:124 src/usr/local/www/firewall_nat.php:475
+#: src/usr/local/www/firewall_nat.php:489
+#: src/usr/local/www/firewall_nat_1to1.php:249
+#: src/usr/local/www/firewall_nat_npt.php:238
+#: src/usr/local/www/firewall_nat_out.php:506
+#: src/usr/local/www/firewall_rules.php:836
+#: src/usr/local/www/firewall_rules.php:887
+#: src/usr/local/www/interfaces_assign.php:571 src/usr/local/www/pkg.php:598
+#: src/usr/local/www/pkg_edit.php:594
+#: src/usr/local/www/services_igmpproxy.php:134
+#: src/usr/local/www/services_igmpproxy.php:136
+#: src/usr/local/www/status_lb_pool.php:244
+#: src/usr/local/www/status_lb_pool.php:246
+#: src/usr/local/www/status_logs_common.inc:940
+#: src/usr/local/www/system_advanced_sysctl.php:87
+#: src/usr/local/www/system_authservers.php:81
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
+#: src/usr/local/www/system_crlmanager.php:261
+#: src/usr/local/www/system_crlmanager.php:346
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:164
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:154
+#: src/usr/local/www/widgets/widgets/interfaces.widget.php:166
+#: src/usr/local/www/widgets/widgets/log.widget.php:262
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:427
+#: src/usr/local/www/widgets/widgets/rss.widget.php:156
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:151
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:145
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:418
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:239
+#: src/usr/local/www/widgets/widgets/traffic_graphs.widget.php:475
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:167
+msgid "Save"
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:56 src/usr/local/www/diag_arp.php:269
+#: src/usr/local/www/diag_authentication.php:69
+#: src/usr/local/www/diag_backup.php:505 src/usr/local/www/diag_command.php:91
+#: src/usr/local/www/diag_confbak.php:99 src/usr/local/www/diag_defaults.php:41
+#: src/usr/local/www/diag_dns.php:29 src/usr/local/www/diag_dump_states.php:75
+#: src/usr/local/www/diag_dump_states_sources.php:53
+#: src/usr/local/www/diag_edit.php:32 src/usr/local/www/diag_gmirror.php:33
+#: src/usr/local/www/diag_halt.php:45
+#: src/usr/local/www/diag_limiter_info.php:31 src/usr/local/www/diag_ndp.php:96
+#: src/usr/local/www/diag_packet_capture.php:86
+#: src/usr/local/www/diag_pf_info.php:31 src/usr/local/www/diag_pftop.php:31
+#: src/usr/local/www/diag_ping.php:35 src/usr/local/www/diag_reboot.php:43
+#: src/usr/local/www/diag_resetstate.php:56
+#: src/usr/local/www/diag_routes.php:65 src/usr/local/www/diag_smart.php:36
+#: src/usr/local/www/diag_sockets.php:31
+#: src/usr/local/www/diag_states_summary.php:192
+#: src/usr/local/www/diag_system_activity.php:31
+#: src/usr/local/www/diag_tables.php:29 src/usr/local/www/diag_testport.php:38
+#: src/usr/local/www/diag_traceroute.php:37 src/usr/local/www/head.inc:645
+msgid "Diagnostics"
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:56
+msgid "Crash Reporter"
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:68
+msgid "Processing..."
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:80
+msgid "Uploading..."
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:91
+msgid "Deleted crash report files from local disk."
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:95
+msgid "Could not find any crash files."
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:124
+msgid "Unfortunately a Programming Bug has been detected"
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:128
+msgid ""
+"The programming debug logs can be submitted to the pfSense developers for "
+"inspection."
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:129
+msgid ""
+"Please double check the contents to ensure this information is acceptable to "
+"disclose before submitting."
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:138
+#: src/usr/local/www/diag_defaults.php:45
+#: src/usr/local/www/diag_defaults.php:73 src/usr/local/www/pkg.php:484
+msgid "Yes"
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:138
+msgid "Submit this to the developers for inspection"
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:142
+#: src/usr/local/www/diag_defaults.php:36
+#: src/usr/local/www/diag_defaults.php:77 src/usr/local/www/diag_pf_info.php:33
+#: src/usr/local/www/pkg.php:482
+msgid "No"
+msgstr ""
+
+#: src/usr/local/www/crash_reporter.php:142
+msgid "Just delete the crash report and return to the Dashboard"
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:47
+#, php-format
+msgid "%s is not a valid IPv4 address or could not be deleted."
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:50
+#, php-format
+msgid "The ARP cache entry for %s has been deleted."
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:269 src/usr/local/www/diag_arp.php:325
+#: src/usr/local/www/head.inc:366
+msgid "ARP Table"
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:280
+msgid " Loading, please wait..."
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:332
+#: src/usr/local/www/diag_dump_states.php:132
+#: src/usr/local/www/diag_dump_states.php:181
+#: src/usr/local/www/diag_ndp.php:111 src/usr/local/www/easyrule.php:80
+#: src/usr/local/www/easyrule.php:88 src/usr/local/www/firewall_nat.php:226
+#: src/usr/local/www/firewall_nat_1to1.php:150
+#: src/usr/local/www/firewall_nat_1to1_edit.php:122
+#: src/usr/local/www/firewall_nat_1to1_edit.php:125
+#: src/usr/local/www/firewall_nat_edit.php:212
+#: src/usr/local/www/firewall_nat_edit.php:215
+#: src/usr/local/www/firewall_nat_npt.php:150
+#: src/usr/local/www/firewall_nat_npt_edit.php:99
+#: src/usr/local/www/firewall_nat_out.php:277
+#: src/usr/local/www/firewall_nat_out.php:530
+#: src/usr/local/www/firewall_nat_out_edit.php:166
+#: src/usr/local/www/firewall_virtual_ip.php:262
+#: src/usr/local/www/interfaces_assign.php:509
+#: src/usr/local/www/interfaces_bridge.php:102
+#: src/usr/local/www/interfaces_gif.php:97
+#: src/usr/local/www/interfaces_gre.php:97
+#: src/usr/local/www/interfaces_lagg.php:104
+#: src/usr/local/www/interfaces_ppps.php:97
+#: src/usr/local/www/interfaces_qinq.php:109
+#: src/usr/local/www/interfaces_vlan.php:107
+#: src/usr/local/www/interfaces_wireless.php:99
+#: src/usr/local/www/services_captiveportal.php:216
+#: src/usr/local/www/services_dhcp_relay.php:78
+#: src/usr/local/www/services_dhcpv6_relay.php:79
+#: src/usr/local/www/services_dyndns.php:89
+#: src/usr/local/www/services_ntpd.php:217
+#: src/usr/local/www/services_pppoe.php:102
+#: src/usr/local/www/services_rfc2136.php:81
+#: src/usr/local/www/services_wol.php:175
+#: src/usr/local/www/services_wol_edit.php:73
+#: src/usr/local/www/status_dhcp_leases.php:495
+#: src/usr/local/www/status_graph.php:141
+#: src/usr/local/www/status_logs_common.inc:470
+#: src/usr/local/www/status_logs_common.inc:502
+#: src/usr/local/www/status_logs_common.inc:505
+#: src/usr/local/www/status_logs_filter.php:151
+#: src/usr/local/www/status_logs_filter_dynamic.php:391
+#: src/usr/local/www/system_gateways.php:258
+#: src/usr/local/www/system_gateways_edit.php:109
+#: src/usr/local/www/system_routes.php:245
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:220
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:128
+#: src/usr/local/www/widgets/widgets/interfaces.widget.php:140
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:63
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:138
+msgid "Interface"
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:334 src/usr/local/www/diag_ndp.php:109
+#: src/usr/local/www/services_captiveportal_mac.php:177
+#: src/usr/local/www/services_captiveportal_mac_edit.php:100
+#: src/usr/local/www/services_dhcp.php:1394
+#: src/usr/local/www/services_wol.php:176
+#: src/usr/local/www/services_wol_edit.php:73
+#: src/usr/local/www/status_captiveportal.php:196
+#: src/usr/local/www/status_dhcp_leases.php:353
+#: src/usr/local/www/status_dhcpv6_leases.php:440
+#: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:83
+msgid "MAC address"
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:335 src/usr/local/www/diag_ndp.php:110
+#: src/usr/local/www/interfaces.php:1953
+#: src/usr/local/www/services_captiveportal_hostname.php:116
+#: src/usr/local/www/services_dhcp.php:1403
+#: src/usr/local/www/services_dhcp_edit.php:451
+#: src/usr/local/www/services_dhcpv6.php:1009
+#: src/usr/local/www/services_dhcpv6_edit.php:235
+#: src/usr/local/www/services_dyndns.php:91
+#: src/usr/local/www/services_dyndns_edit.php:96
+#: src/usr/local/www/services_dyndns_edit.php:290
+#: src/usr/local/www/services_rfc2136.php:83
+#: src/usr/local/www/services_rfc2136_edit.php:78
+#: src/usr/local/www/status_dhcp_leases.php:362
+#: src/usr/local/www/status_dhcpv6_leases.php:441
+#: src/usr/local/www/system.php:150
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:169
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:222
+msgid "Hostname"
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:337
+msgid "Link Type"
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:338 src/usr/local/www/diag_confbak.php:215
+#: src/usr/local/www/firewall_aliases.php:195
+#: src/usr/local/www/firewall_nat.php:235
+#: src/usr/local/www/firewall_nat_1to1.php:155
+#: src/usr/local/www/firewall_nat_npt.php:154
+#: src/usr/local/www/firewall_nat_out.php:286
+#: src/usr/local/www/firewall_rules.php:394
+#: src/usr/local/www/firewall_schedule.php:96
+#: src/usr/local/www/firewall_virtual_ip.php:265
+#: src/usr/local/www/interfaces_bridge.php:105
+#: src/usr/local/www/interfaces_gif.php:100
+#: src/usr/local/www/interfaces_gre.php:100
+#: src/usr/local/www/interfaces_groups.php:82
+#: src/usr/local/www/interfaces_lagg.php:107
+#: src/usr/local/www/interfaces_ppps.php:100
+#: src/usr/local/www/interfaces_qinq.php:113
+#: src/usr/local/www/interfaces_vlan.php:111
+#: src/usr/local/www/interfaces_wireless.php:102
+#: src/usr/local/www/load_balancer_monitor.php:109
+#: src/usr/local/www/load_balancer_pool.php:126
+#: src/usr/local/www/load_balancer_virtual_server.php:147
+#: src/usr/local/www/pkg_mgr_installed.php:80
+#: src/usr/local/www/services_captiveportal_filemanager.php:191
+#: src/usr/local/www/services_captiveportal_hostname.php:118
+#: src/usr/local/www/services_captiveportal_ip.php:112
+#: src/usr/local/www/services_captiveportal_mac.php:179
+#: src/usr/local/www/services_captiveportal_vouchers.php:396
+#: src/usr/local/www/services_captiveportal_zones.php:78
+#: src/usr/local/www/services_checkip.php:92
+#: src/usr/local/www/services_dhcp.php:687
+#: src/usr/local/www/services_dnsmasq.php:367
+#: src/usr/local/www/services_dnsmasq.php:441
+#: src/usr/local/www/services_dyndns.php:94
+#: src/usr/local/www/services_igmpproxy.php:87
+#: src/usr/local/www/services_pppoe.php:106
+#: src/usr/local/www/services_rfc2136.php:86
+#: src/usr/local/www/services_unbound.php:440
+#: src/usr/local/www/services_unbound.php:516
+#: src/usr/local/www/services_unbound_acls.php:302
+#: src/usr/local/www/services_wol.php:178
+#: src/usr/local/www/status_captiveportal.php:209
+#: src/usr/local/www/status_dhcp_leases.php:368
+#: src/usr/local/www/status_dhcpv6_leases.php:446
+#: src/usr/local/www/status_logs_filter_summary.php:83
+#: src/usr/local/www/status_openvpn.php:159
+#: src/usr/local/www/status_services.php:89
+#: src/usr/local/www/system_authservers.php:445
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
+#: src/usr/local/www/system_crlmanager.php:587
+#: src/usr/local/www/system_gateway_groups.php:134
+#: src/usr/local/www/system_gateways.php:262
+#: src/usr/local/www/system_groupmanager.php:313
+#: src/usr/local/www/system_routes.php:247
+#: src/usr/local/www/system_usermanager.php:585
+#: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
+#: src/usr/local/www/vpn_l2tp_users.php:97
+#: src/usr/local/www/vpn_openvpn_client.php:908
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
+msgid "Actions"
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:363
+msgid "Delete arp cache entry"
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:385
+#, php-format
+msgid "Local IPv6 peers use %1$sNDP%2$s instead of ARP."
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:386
+msgid ""
+"Permanent ARP entries are shown for local interfaces or static ARP entries."
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:387
+msgid ""
+"Normal dynamic ARP entries show a countdown timer until they will expire and "
+"then be re-checked."
+msgstr ""
+
+#: src/usr/local/www/diag_arp.php:388
+msgid ""
+"Incomplete ARP entries indicate that the target host has not yet replied to "
+"an ARP request."
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:38
+#, php-format
+msgid "%s is not a valid authentication server"
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:42
+msgid "A username and password must be specified."
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:48
+#, php-format
+msgid "User %s authenticated successfully."
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:50
+msgid "This user is a member of groups"
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:58
+msgid "Authentication failed."
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:69
+#: src/usr/local/www/guiconfig.inc:158 src/usr/local/www/head.inc:367
+#: src/usr/local/www/services_captiveportal.php:686
+msgid "Authentication"
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:83
+msgid "Authentication Test"
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:91
+#: src/usr/local/www/system_usermanager_settings.php:214
+msgid "*Authentication Server"
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:94
+msgid "Select the authentication server to test against."
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:98
+#: src/usr/local/www/interfaces.php:2599 src/usr/local/www/interfaces.php:2724
+#: src/usr/local/www/system_usermanager.php:712
+#: src/usr/local/www/vpn_l2tp_users_edit.php:153
+msgid "*Username"
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:106
+#: src/usr/local/www/interfaces.php:2606 src/usr/local/www/interfaces.php:2731
+#: src/usr/local/www/system_usermanager_passwordmg.php:101
+msgid "*Password"
+msgstr ""
+
+#: src/usr/local/www/diag_authentication.php:116
+#: src/usr/local/www/diag_smart.php:279 src/usr/local/www/diag_testport.php:269
+#: src/usr/local/www/status_captiveportal_test.php:109
+msgid "Test"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:79 src/usr/local/www/diag_backup.php:94
+#, php-format
+msgid "Cannot write %s"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:103 src/usr/local/www/diag_backup.php:109
+#, php-format
+msgid "fwrite %s failed"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:114
+#, php-format
+msgid "fclose %s failed"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:148
+msgid "Restored base_package menus after configuration restore."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:193
+msgid "A password for encryption must be supplied and confirmed."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:268
+msgid "A password for decryption must be supplied and confirmed."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:278
+#, php-format
+msgid "Warning, could not read file %s"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:284
+msgid ""
+"The uploaded file does not appear to contain an encrypted pfsense "
+"configuration."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:291
+msgid "Upgrading m0n0wall configuration to pfsense."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:299 src/usr/local/www/diag_backup.php:302
+msgid ""
+"An area to restore was selected but the correct xml tag could not be located."
+""
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:313
+msgid ""
+"The configuration area has been restored. The firewall may need to be "
+"rebooted."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:318
+#, php-format
+msgid ""
+"A full configuration restore was selected but a %s tag could not be located."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:335
+msgid "Restore serial console enabling in configuration."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:408
+msgid "The m0n0wall configuration has been restored and upgraded to pfSense."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:436
+msgid "The configuration could not be restored."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:441
+msgid "The configuration could not be restored (file upload error)."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:465
+#: src/usr/local/www/firewall_aliases.php:163
+#: src/usr/local/www/firewall_aliases_edit.php:142
+#: src/usr/local/www/firewall_aliases_import.php:55
+#: src/usr/local/www/head.inc:280
+msgid "Aliases"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:467
+msgid "Captive Portal Vouchers"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:470 src/usr/local/www/head.inc:297
+#: src/usr/local/www/services_dhcp.php:722
+#: src/usr/local/www/services_dhcp_edit.php:397
+msgid "DHCP Server"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:471
+#: src/usr/local/www/services_dhcpv6.php:489
+#: src/usr/local/www/services_dhcpv6.php:564
+#: src/usr/local/www/services_dhcpv6.php:575
+#: src/usr/local/www/services_dhcpv6.php:582
+#: src/usr/local/www/services_dhcpv6_edit.php:201
+#: src/usr/local/www/services_router_advertisements.php:305
+msgid "DHCPv6 Server"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:472
+msgid "Firewall Rules"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:473 src/usr/local/www/head.inc:335
+#: src/usr/local/www/interfaces.php:1655
+#: src/usr/local/www/interfaces_assign.php:34
+#: src/usr/local/www/interfaces_bridge.php:75
+#: src/usr/local/www/interfaces_bridge_edit.php:384
+#: src/usr/local/www/interfaces_gif.php:69
+#: src/usr/local/www/interfaces_gif_edit.php:165
+#: src/usr/local/www/interfaces_gre.php:70
+#: src/usr/local/www/interfaces_gre_edit.php:159
+#: src/usr/local/www/interfaces_groups.php:54
+#: src/usr/local/www/interfaces_groups_edit.php:33
+#: src/usr/local/www/interfaces_lagg.php:76
+#: src/usr/local/www/interfaces_lagg_edit.php:223
+#: src/usr/local/www/interfaces_ppps.php:73
+#: src/usr/local/www/interfaces_ppps_edit.php:454
+#: src/usr/local/www/interfaces_qinq.php:80
+#: src/usr/local/www/interfaces_qinq_edit.php:29
+#: src/usr/local/www/interfaces_vlan.php:76
+#: src/usr/local/www/interfaces_vlan_edit.php:172
+#: src/usr/local/www/interfaces_wireless.php:71
+#: src/usr/local/www/interfaces_wireless_edit.php:165
+#: src/usr/local/www/services_captiveportal_zones.php:75
+#: src/usr/local/www/status_interfaces.php:93
+#: src/usr/local/www/status_logs_filter_summary.php:84
+#: src/usr/local/www/widgets/include/interfaces.inc:23
+msgid "Interfaces"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:474
+msgid "IPSEC"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:475 src/usr/local/www/firewall_nat.php:185
+#: src/usr/local/www/firewall_nat_1to1.php:121
+#: src/usr/local/www/firewall_nat_1to1_edit.php:290
+#: src/usr/local/www/firewall_nat_edit.php:638
+#: src/usr/local/www/firewall_nat_npt.php:121
+#: src/usr/local/www/firewall_nat_npt_edit.php:178
+#: src/usr/local/www/firewall_nat_out.php:200
+#: src/usr/local/www/firewall_nat_out_edit.php:397
+#: src/usr/local/www/head.inc:281
+msgid "NAT"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:477 src/usr/local/www/head.inc:231
+#: src/usr/local/www/head.inc:643 src/usr/local/www/pkg_mgr.php:38
+#: src/usr/local/www/pkg_mgr.php:130 src/usr/local/www/pkg_mgr_install.php:249
+#: src/usr/local/www/pkg_mgr_installed.php:34
+#: src/usr/local/www/pkg_mgr_installed.php:204
+msgid "Package Manager"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:478
+msgid "RRD Data"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:479
+msgid "Scheduled Tasks"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:480
+msgid "Syslog"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:481 src/usr/local/www/head.inc:643
+#: src/usr/local/www/pkg_mgr.php:38 src/usr/local/www/pkg_mgr.php:130
+#: src/usr/local/www/pkg_mgr_install.php:244
+#: src/usr/local/www/pkg_mgr_install.php:249
+#: src/usr/local/www/pkg_mgr_installed.php:34
+#: src/usr/local/www/pkg_mgr_installed.php:204
+#: src/usr/local/www/status_logs.php:96
+#: src/usr/local/www/status_logs_common.inc:88
+#: src/usr/local/www/status_logs_settings.php:216
+#: src/usr/local/www/system.php:88 src/usr/local/www/system.php:412
+#: src/usr/local/www/system.php:427
+#: src/usr/local/www/system_advanced_admin.php:284
+#: src/usr/local/www/system_advanced_firewall.php:365
+#: src/usr/local/www/system_advanced_misc.php:293
+#: src/usr/local/www/system_advanced_network.php:141
+#: src/usr/local/www/system_advanced_notifications.php:194
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_authservers.php:408
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_crlmanager.php:258
+#: src/usr/local/www/system_gateway_groups.php:103
+#: src/usr/local/www/system_gateway_groups_edit.php:147
+#: src/usr/local/www/system_gateways.php:224
+#: src/usr/local/www/system_gateways_edit.php:551
+#: src/usr/local/www/system_groupmanager.php:276
+#: src/usr/local/www/system_groupmanager_addprivs.php:44
+#: src/usr/local/www/system_hasync.php:102
+#: src/usr/local/www/system_routes.php:212
+#: src/usr/local/www/system_routes_edit.php:224
+#: src/usr/local/www/system_update_settings.php:107
+#: src/usr/local/www/system_user_settings.php:32
+#: src/usr/local/www/system_usermanager.php:542
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_passwordmg.php:33
+#: src/usr/local/www/system_usermanager_settings.php:109
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:35
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:143
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
+msgid "System"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:482
+msgid "Static routes"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:483
+msgid "System tunables"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:484
+msgid "SNMP Server"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:485
+#: src/usr/local/www/firewall_shaper.php:41
+#: src/usr/local/www/firewall_shaper_queues.php:180
+#: src/usr/local/www/firewall_shaper_vinterface.php:39
+#: src/usr/local/www/firewall_shaper_wizards.php:57
+#: src/usr/local/www/head.inc:284
+msgid "Traffic Shaper"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:486
+msgid "VLANS"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:487 src/usr/local/www/head.inc:315
+#: src/usr/local/www/services_wol.php:113
+#: src/usr/local/www/services_wol.php:136
+#: src/usr/local/www/services_wol_edit.php:111
+msgid "Wake-on-LAN"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:490
+#: src/usr/local/www/firewall_aliases.php:154
+#: src/usr/local/www/pkg_edit.php:1191
+#: src/usr/local/www/services_ntpd_gps.php:290
+#: src/usr/local/www/services_snmp.php:176
+#: src/usr/local/www/services_unbound.php:220
+#: src/usr/local/www/status_graph.php:160
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:249
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:165
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:155
+#: src/usr/local/www/widgets/widgets/interfaces.widget.php:167
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:428
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:152
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:146
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:419
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:168
+#: src/usr/local/www/diag_smart.php:252
+msgid "All"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:505 src/usr/local/www/diag_backup.php:529
+#: src/usr/local/www/diag_confbak.php:99 src/usr/local/www/diag_confbak.php:108
+#: src/usr/local/www/head.inc:368 src/usr/local/www/head.inc:645
+msgid "Backup & Restore"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:522
+msgid "The firewall configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:522
+msgid "The firewall is now rebooting."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:530 src/usr/local/www/diag_confbak.php:99
+#: src/usr/local/www/diag_confbak.php:109
+msgid "Config History"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:536
+msgid "Backup Configuration"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:540
+msgid "Backup area"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:547
+msgid "Skip packages"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:554
+msgid "Skip RRD data"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:561 src/usr/local/www/diag_backup.php:608
+msgid "Encryption"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:577
+msgid "Download configuration as XML"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:585
+msgid "Restore Backup"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:589
+#, php-format
+msgid ""
+"Open a %s configuration XML file and click the button below to restore the "
+"configuration."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:594
+msgid "Restore area"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:601
+msgid "Configuration file"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:625
+msgid "Restore Configuration"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:628
+msgid "The firewall will reboot after restoring the configuration."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:635
+msgid "Package Functions"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:642
+msgid "Reinstall Packages"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:645
+msgid ""
+"Click this button to reinstall all system packages.  This may take a while."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:655
+msgid "Clear Package Lock"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:658
+msgid ""
+"Click this button to clear the package lock if a package fails to reinstall "
+"properly after an upgrade."
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:61
+#, php-format
+msgid "Uploaded file to %s."
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:91 src/usr/local/www/head.inc:369
+msgid "Command Prompt"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:152
+msgid "Nothing to recall"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:187 src/usr/local/www/diag_edit.php:98
+msgid ""
+"The capabilities offered here can be dangerous. No support is available. Use "
+"them at your own risk!"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:187 src/usr/local/www/diag_edit.php:98
+msgid "Advanced Users Only"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:192
+#, php-format
+msgid "Shell Output - %s"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:211
+msgid "Execute Shell Command"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:219
+msgid "Recall Previous Command"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:222
+msgid "Execute the entered command"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:224
+#: src/usr/local/www/diag_command.php:315
+msgid "Execute"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:226
+msgid "Recall Next Command"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:229
+msgid "Clear command entry"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
+#: src/usr/local/www/system_groupmanager_addprivs.php:206
+#: src/usr/local/www/system_usermanager_addprivs.php:190
+#: src/usr/local/www/interfaces.php:2035
+msgid "Clear"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:239
+msgid "Download File"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:246
+#: src/usr/local/www/services_captiveportal.php:1092
+#: src/usr/local/www/services_captiveportal.php:1126
+#: src/usr/local/www/services_captiveportal.php:1158
+msgid "Download"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:258
+msgid "Upload File"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:265
+#: src/usr/local/www/services_captiveportal_filemanager.php:172
+#: src/usr/local/www/widgets/widgets/picture.widget.php:77
+msgid "Upload"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:308
+msgid "Execute PHP Commands"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:313
+msgid "Execute this PHP Code"
+msgstr ""
+
+#: src/usr/local/www/diag_command.php:317
+msgid "Example"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:38
+msgid "(platform default)"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:40
+#, php-format
+msgid "Changed backup revision count to %s"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:51
+#, php-format
+msgid "Successfully reverted to timestamp %1$s with description \"%2$s\"."
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:51 src/usr/local/www/diag_confbak.php:58
+#: src/usr/local/www/diag_confbak.php:117
+#: src/usr/local/www/diag_confbak.php:225
+#: src/usr/local/www/diag_confbak.php:236
+#: src/usr/local/www/firewall_nat_edit.php:966
+#: src/usr/local/www/firewall_nat_edit.php:976
+#: src/usr/local/www/firewall_nat_out_edit.php:696
+#: src/usr/local/www/firewall_nat_out_edit.php:706
+#: src/usr/local/www/firewall_rules_edit.php:1741
+#: src/usr/local/www/firewall_rules_edit.php:1751
+msgid "n/j/y H:i:s"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:53
+msgid "Unable to revert to the selected configuration."
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:58
+#, php-format
+msgid "Deleted backup with timestamp %1$s and description \"%2$s\"."
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:117
+#, php-format
+msgid "Configuration Diff from %1$s to %2$s"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:154
+msgid "Configuration Backup Cache Settings"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:158
+msgid "Backup Count"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:161
+#, php-format
+msgid ""
+"Maximum number of old configurations to keep in the cache, 0 for no backups, "
+"or leave blank for the default value (%s for the current platform)."
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:166
+msgid "Current space used by backups"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:187
+msgid ""
+"To view the differences between an older configuration and a newer "
+"configuration, select the older configuration using the left column of radio "
+"options and select the newer configuration in the right column, then press "
+"the \"Diff\" button."
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:206
+#: src/usr/local/www/diag_confbak.php:208
+#: src/usr/local/www/diag_confbak.php:270
+#: src/usr/local/www/diag_confbak.php:272
+#: src/usr/local/www/system_update_settings.php:235
+msgid "Diff"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:211
+msgid "Date"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:212 src/usr/local/www/pkg_mgr.php:67
+#: src/usr/local/www/pkg_mgr_installed.php:78
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:51
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:36
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:162
+msgid "Version"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:213
+#: src/usr/local/www/diag_gmirror.php:303 src/usr/local/www/diag_pftop.php:125
+#: src/usr/local/www/services_captiveportal_filemanager.php:190
+msgid "Size"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:214
+msgid "Configuration Change"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:229
+msgid "Current configuration"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:238
+#: src/usr/local/www/pkg_mgr_installed.php:121
+#: src/usr/local/www/status_ipsec.php:113
+#: src/usr/local/www/status_ipsec.php:122
+#: src/usr/local/www/status_ipsec.php:155
+#: src/usr/local/www/status_ipsec.php:167
+#: src/usr/local/www/status_ipsec.php:275
+#: src/usr/local/www/status_ipsec.php:297
+#: src/usr/local/www/status_ipsec.php:388
+#: src/usr/local/www/status_ipsec.php:398
+#: src/usr/local/www/status_ipsec.php:409
+#: src/usr/local/www/status_ipsec.php:418
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:309
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:96
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:89
+msgid "Unknown"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:260
+msgid "Revert config"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:260
+msgid ""
+"Confirmation Required to replace the current configuration with this backup."
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:261
+msgid "Download config"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:262
+msgid "Delete config"
+msgstr ""
+
+#: src/usr/local/www/diag_confbak.php:279
+msgid "No backups found."
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:41 src/usr/local/www/head.inc:372
+msgid "Factory Defaults"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:46
+msgid ""
+"The system has been reset to factory defaults and is now rebooting. This may "
+"take a few minutes, depending on the hardware."
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:56
+msgid "Factory Defaults Reset"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:61
+msgid ""
+"Resetting the system to factory defaults will remove all user configuration "
+"and apply the following settings:"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:63
+msgid "Reset to factory defaults"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:64
+msgid "LAN IP address will be reset to 192.168.1.1"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:65
+msgid ""
+"System will be configured as a DHCP server on the default LAN interface"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:66
+msgid "Reboot after changes are installed"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:67
+msgid ""
+"WAN interface will be set to obtain an address automatically from a DHCP "
+"server"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:68
+msgid "webConfigurator admin username will be reset to 'admin'"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:69
+#, php-format
+msgid "webConfigurator admin password will be reset to '%s'"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:71
+msgid "Are you sure you want to proceed?"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:73
+msgid "Perform a factory reset"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:75
+msgid "Factory Reset"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:77
+msgid "Return to the dashboard"
+msgstr ""
+
+#: src/usr/local/www/diag_defaults.php:79
+msgid "Keep Configuration"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:29 src/usr/local/www/diag_dns.php:218
+#: src/usr/local/www/head.inc:370
+msgid "DNS Lookup"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:114
+msgid "Created from Diagnostics-> DNS Lookup"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:134
+msgid "Host must be a valid hostname or IP address."
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:143
+msgid "No response"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:184 src/usr/local/www/diag_tables.php:261
+#: src/usr/local/www/interfaces.php:3093 src/usr/local/www/interfaces.php:3117
+#: src/usr/local/www/load_balancer_pool_edit.php:371
+#: src/usr/local/www/load_balancer_virtual_server.php:142
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:70
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:75
+#: src/usr/local/www/services_dhcp_edit.php:443
+#: src/usr/local/www/services_pppoe_edit.php:412
+#: src/usr/local/www/services_pppoe_edit.php:445
+#: src/usr/local/www/services_pppoe_edit.php:516
+#: src/usr/local/www/status_graph.php:169
+#: src/usr/local/www/status_logs_vpn.php:141
+#: src/usr/local/www/status_logs_vpn.php:392
+#: src/usr/local/www/system_advanced_notifications.php:349
+#: src/usr/local/www/vpn_ipsec_phase2.php:680
+#: src/usr/local/www/vpn_l2tp_users_edit.php:173
+#: src/usr/local/www/widgets/widgets/carp_status.widget.php:38
+msgid "IP Address"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:185 src/usr/local/www/status_graph.php:170
+#: src/usr/local/www/system_authservers.php:444
+msgid "Host Name"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
+#: src/usr/local/www/services_rfc2136_edit.php:236
+#: src/usr/local/www/status_ntpd.php:296
+#: src/usr/local/www/system_certmanager.php:1003
+#: src/usr/local/www/vpn_openvpn_client.php:906
+#: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
+msgid "Server"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:188
+msgid "Query Time"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:206
+#, php-format
+msgid "Host \"%s\" could not be resolved."
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:211
+msgid "Alias was updated successfully."
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:213
+msgid "Alias was created successfully."
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:222 src/usr/local/www/diag_ping.php:131
+#: src/usr/local/www/diag_testport.php:221
+#: src/usr/local/www/diag_traceroute.php:125
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:185
+#: src/usr/local/www/services_dyndns_edit.php:286
+#: src/usr/local/www/services_rfc2136_edit.php:180
+#: src/usr/local/www/system.php:430
+msgid "*Hostname"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:232
+#: src/usr/local/www/status_logs_filter_summary.php:176
+msgid "Lookup"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:239
+msgid "Update alias"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:241
+msgid "Add alias"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:257 src/usr/local/www/diag_ping.php:173
+#: src/usr/local/www/diag_traceroute.php:181
+msgid "Results"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:263
+msgid "Result"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:264
+msgid "Record type"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:281
+msgid "Timings"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:286
+msgid "Name server"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:287
+msgid "Query time"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:304
+msgid "More Information"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:307 src/usr/local/www/diag_ping.php:35
+#: src/usr/local/www/diag_ping.php:127 src/usr/local/www/diag_ping.php:162
+#: src/usr/local/www/head.inc:382
+msgid "Ping"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:310
+msgid ""
+"NOTE: The following links are to external services, so their reliability "
+"cannot be guaranteed."
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:312
+msgid "IP WHOIS @ DNS Stuff"
+msgstr ""
+
+#: src/usr/local/www/diag_dns.php:313
+msgid "IP Info @ DNS Stuff"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:55
+#: src/usr/local/www/diag_dump_states_sources.php:39
+#: src/usr/local/www/status_openvpn.php:47
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:36
+msgid "invalid input"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:75
+#: src/usr/local/www/diag_dump_states.php:107
+#: src/usr/local/www/diag_dump_states.php:175
+#: src/usr/local/www/diag_dump_states_sources.php:53
+#: src/usr/local/www/diag_dump_states_sources.php:58
+#: src/usr/local/www/diag_resetstate.php:56
+#: src/usr/local/www/diag_resetstate.php:81
+#: src/usr/local/www/diag_states_summary.php:152
+#: src/usr/local/www/diag_states_summary.php:154
+#: src/usr/local/www/firewall_rules.php:384 src/usr/local/www/head.inc:390
+msgid "States"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:109
+#: src/usr/local/www/diag_dump_states_sources.php:53
+#: src/usr/local/www/diag_dump_states_sources.php:59
+#: src/usr/local/www/diag_resetstate.php:84
+#: src/usr/local/www/diag_resetstate.php:104
+msgid "Source Tracking"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:111
+#: src/usr/local/www/diag_dump_states_sources.php:60
+#: src/usr/local/www/diag_resetstate.php:56
+#: src/usr/local/www/diag_resetstate.php:87
+msgid "Reset States"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:119
+msgid "State Filter"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:139
+#: src/usr/local/www/diag_dump_states_sources.php:97
+msgid "Filter expression"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:147
+#: src/usr/local/www/diag_dump_states_sources.php:106
+#: src/usr/local/www/diag_routes.php:97 src/usr/local/www/pkg.php:352
+#: src/usr/local/www/status_graph.php:162
+#: src/usr/local/www/system_groupmanager_addprivs.php:175
+#: src/usr/local/www/system_groupmanager_addprivs.php:195
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
+msgid "Filter"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:160
+msgid "Kill States"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:166
+msgid "Kill filtered states"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:168
+msgid "Remove all states to and from the filtered address"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:182
+#: src/usr/local/www/diag_states_summary.php:153
+#: src/usr/local/www/easyrule.php:90 src/usr/local/www/firewall_nat.php:227
+#: src/usr/local/www/firewall_nat_edit.php:212
+#: src/usr/local/www/firewall_nat_edit.php:215
+#: src/usr/local/www/firewall_nat_out_edit.php:166
+#: src/usr/local/www/firewall_rules.php:385
+#: src/usr/local/www/firewall_rules_edit.php:438
+#: src/usr/local/www/interfaces_bridge_edit.php:540
+#: src/usr/local/www/load_balancer_virtual_server.php:141
+#: src/usr/local/www/services_rfc2136_edit.php:243
+#: src/usr/local/www/status_ipsec_sad.php:68
+#: src/usr/local/www/status_ipsec_spd.php:62
+#: src/usr/local/www/status_logs_common.inc:443
+#: src/usr/local/www/status_logs_filter.php:163
+#: src/usr/local/www/status_logs_filter_dynamic.php:394
+#: src/usr/local/www/status_upnp.php:70
+#: src/usr/local/www/system_advanced_admin.php:309
+#: src/usr/local/www/system_advanced_admin.php:313
+#: src/usr/local/www/system_advanced_admin.php:321
+#: src/usr/local/www/vpn_openvpn_client.php:905
+msgid "Protocol"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:183
+msgid "Source (Original Source) -> Destination (Original Destination)"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:184
+#: src/usr/local/www/status_dhcpv6_leases.php:539
+msgid "State"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:185
+msgid "Packets"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:186
+#: src/usr/local/www/diag_pftop.php:118
+msgid "Bytes"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:254
+#, php-format
+msgid "Remove all state entries from %1$s to %2$s"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:269
+msgid "No states were found that match the current filter."
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:271
+msgid ""
+"State display suppressed without filter submission. See System > General "
+"Setup, Require State Filter."
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states.php:274
+msgid "No states were found."
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:93
+msgid "Filters"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:115
+msgid "Current Source Tracking Entries"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:120
+msgid "Source -> Destination"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:121
+msgid "# States"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:122
+msgid "# Connections"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:123
+#: src/usr/local/www/diag_pftop.php:124
+#: src/usr/local/www/status_interfaces.php:165
+msgid "Rate"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:154
+#, php-format
+msgid "Remove all source tracking entries from %1$s to %2$s"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:154
+#: src/usr/local/www/diag_gmirror.php:250
+#: src/usr/local/www/diag_gmirror.php:268
+#: src/usr/local/www/load_balancer_pool_edit.php:422
+#: src/usr/local/www/load_balancer_pool_edit.php:429
+#: src/usr/local/www/pkg_mgr_installed.php:194
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:117
+msgid "Remove"
+msgstr ""
+
+#: src/usr/local/www/diag_dump_states_sources.php:168
+msgid "No source tracking entries were found."
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:32 src/usr/local/www/head.inc:371
+msgid "Edit File"
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:40 src/usr/local/www/diag_edit.php:66
+msgid "No file name specified."
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:44
+msgid "Loading a directory is not supported."
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:48
+msgid "File does not exist or is not a regular file."
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:54
+msgid "Failed to read file."
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:79
+msgid "Failed to write file."
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:83
+msgid "Error while writing file."
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:87
+msgid "File saved successfully."
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:107
+msgid "Save / Load a File from the Filesystem"
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:111
+msgid "Path to file to be edited"
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:114 src/usr/local/www/diag_edit.php:116
+msgid "Load"
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:118 src/usr/local/www/diag_edit.php:120
+msgid "Browse"
+msgstr ""
+
+#: src/usr/local/www/diag_edit.php:129
+msgid "GoTo Line #"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:33 src/usr/local/www/head.inc:375
+msgid "GEOM Mirrors"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:38
+msgid "Forget all formerly connected consumers"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:39
+msgid "Remove metadata from disk"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:40
+msgid "Insert consumer into mirror"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:41
+msgid "Remove consumer from mirror"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:42
+msgid "Reactivate consumer on mirror"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:43
+msgid "Deactivate consumer from mirror"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:44
+msgid "Force rebuild of mirror consumer"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:62
+msgid "A valid mirror name must be supplied."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:66
+msgid "A valid consumer name must be supplied"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:73
+msgid ""
+"Consumer is already in use and cannot be inserted. Remove consumer from "
+"existing mirror first."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:76
+msgid ""
+"Consumer has metadata from an existing mirror. Clear metadata before "
+"inserting consumer."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:80
+msgid ""
+"Mirror is not in a COMPLETE state, cannot insert consumer. Forget "
+"disconnected disks or wait for rebuild to finish."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:86
+msgid "Consumer is in use and cannot be cleared. Deactivate disk first."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:89
+msgid "Consumer has no metadata to clear."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:95
+msgid "Consumer is already present on specified mirror."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:98
+msgid "Consumer has no metadata and cannot be reactivated."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:107
+msgid "Consumer must be present on the specified mirror."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:166
+msgid ""
+"There was an error performing the chosen mirror operation. Check the System "
+"Log for details."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:176
+msgid "Confirm Action"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:178
+msgid "Please confirm the selected action: "
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:183
+msgid "Mirror: "
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:191
+msgid "Consumer"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:207
+msgid ""
+"The options on this page are intended for use by advanced users only. This "
+"page is for managing existing mirrors, not creating new mirrors."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:212
+msgid "GEOM Mirror Information - Mirror Status"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:239
+msgid "Forget Disconnected Disks"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:248
+#: src/usr/local/www/diag_gmirror.php:266
+msgid "Rebuild"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:249
+#: src/usr/local/www/diag_gmirror.php:267
+msgid "Deactivate"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:283
+msgid "No Mirrors Found"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:291
+msgid ""
+"Some disk operations may only be performed when there are multiple consumers "
+"present in a mirror."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:295
+msgid "Consumer Information - Available Consumers"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:304
+msgid "Add to Mirror"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:326
+#, php-format
+msgid "Reactivate on %s"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:331
+msgid "Clear Metadata"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:360
+msgid "No unused consumers found"
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:366
+msgid ""
+"Consumers may only be added to a mirror if they are larger than the size of "
+"the mirror."
+msgstr ""
+
+#: src/usr/local/www/diag_gmirror.php:367
+msgid ""
+"To repair a failed mirror, first perform a 'Forget' command on the mirror, "
+"followed by an 'insert' action on the new consumer."
+msgstr ""
+
+#: src/usr/local/www/diag_halt.php:45 src/usr/local/www/head.inc:378
+msgid "Halt System"
+msgstr ""
+
+#: src/usr/local/www/diag_halt.php:52
+msgid "The system is halting now. This may take one minute or so."
+msgstr ""
+
+#: src/usr/local/www/diag_halt.php:55
+#, php-format
+msgid "Not actually halting (DEBUG is set true)%s"
+msgstr ""
+
+#: src/usr/local/www/diag_halt.php:66
+msgid "System Halt Confirmation"
+msgstr ""
+
+#: src/usr/local/www/diag_halt.php:70
+msgid ""
+"Click \"Halt\" to halt the system immediately, or \"Cancel\" to go to the "
+"system dashboard. (There will be a brief delay before the dashboard appears."
+")"
+msgstr ""
+
+#: src/usr/local/www/diag_halt.php:72 src/usr/local/www/diag_halt.php:74
+msgid "Halt"
+msgstr ""
+
+#: src/usr/local/www/diag_halt.php:72
+msgid "Halt the system and power off"
+msgstr ""
+
+#: src/usr/local/www/diag_halt.php:78 src/usr/local/www/diag_reboot.php:119
+#: src/usr/local/www/firewall_nat.php:488
+#: src/usr/local/www/firewall_rules.php:886
+#: src/usr/local/www/interfaces.php:1914 src/usr/local/www/interfaces.php:3237
+msgid "Cancel"
+msgstr ""
+
+#: src/usr/local/www/diag_limiter_info.php:31 src/usr/local/www/head.inc:379
+msgid "Limiter Info"
+msgstr ""
+
+#: src/usr/local/www/diag_limiter_info.php:37
+msgid "No limiters were found on this system."
+msgstr ""
+
+#: src/usr/local/www/diag_limiter_info.php:39
+msgid "Limiters:"
+msgstr ""
+
+#: src/usr/local/www/diag_limiter_info.php:43 src/usr/local/www/head.inc:341
+#: src/usr/local/www/status_queues.php:110
+msgid "Queues"
+msgstr ""
+
+#: src/usr/local/www/diag_limiter_info.php:80
+msgid "Limiter Information"
+msgstr ""
+
+#: src/usr/local/www/diag_limiter_info.php:82
+msgid "Gathering Limiter information, please wait..."
+msgstr ""
+
+#: src/usr/local/www/diag_ndp.php:96 src/usr/local/www/diag_ndp.php:101
+#: src/usr/local/www/head.inc:380
+msgid "NDP Table"
+msgstr ""
+
+#: src/usr/local/www/diag_ndp.php:108 src/usr/local/www/interfaces.php:611
+#: src/usr/local/www/services_dhcpv6.php:1008
+#: src/usr/local/www/services_dhcpv6_edit.php:227
+#: src/usr/local/www/status_dhcpv6_leases.php:437
+msgid "IPv6 address"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:82
+#: src/usr/local/www/diag_packet_capture.php:405
+msgid "Download Capture"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:86 src/usr/local/www/head.inc:394
+msgid "Packet Capture"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:107
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
+msgid "OpenVPN Server"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:107
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
+msgid "OpenVPN Client"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:129
+msgid "Invalid interface."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:133
+msgid "Invalid address family."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:138
+msgid "IPv4 with ICMPv6 is not valid."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:141
+msgid "IPv6 with ICMP is not valid."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:144
+msgid "IPv6 with ARP is not valid."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:149
+msgid "Invalid protocol."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:163
+#, php-format
+msgid "A valid IP address, CIDR block, or MAC address must be specified. [%s]"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:170
+msgid "Invalid value specified for port."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:178
+msgid "Invalid value specified for packet length."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:186
+msgid "Invalid value specified for packet count."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:211
+#: src/usr/local/www/diag_packet_capture.php:382
+#: src/usr/local/www/diag_packet_capture.php:458
+#: src/usr/local/www/status_dhcp_leases.php:364
+#: src/usr/local/www/status_dhcpv6_leases.php:442
+#: src/usr/local/www/status_dhcpv6_leases.php:537
+msgid "Start"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:219
+#: src/usr/local/www/diag_packet_capture.php:379
+#: src/usr/local/www/diag_packet_capture.php:389
+msgid "Stop"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:246
+msgid "Exclude"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:276
+msgid "Packet Capture Options"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:280
+#: src/usr/local/www/firewall_nat_1to1_edit.php:462
+#: src/usr/local/www/firewall_nat_edit.php:694
+#: src/usr/local/www/firewall_nat_npt_edit.php:199
+#: src/usr/local/www/firewall_nat_out_edit.php:503
+#: src/usr/local/www/firewall_rules_edit.php:1231
+#: src/usr/local/www/firewall_rules_edit.php:1239
+#: src/usr/local/www/firewall_virtual_ip_edit.php:362
+#: src/usr/local/www/services_igmpproxy_edit.php:156
+#: src/usr/local/www/services_pppoe_edit.php:303
+#: src/usr/local/www/services_rfc2136_edit.php:173
+#: src/usr/local/www/services_wol.php:140
+#: src/usr/local/www/services_wol_edit.php:134
+#: src/usr/local/www/system_gateways_edit.php:600
+#: src/usr/local/www/vpn_ipsec_phase1.php:676
+#: src/usr/local/www/vpn_l2tp.php:211
+#: src/usr/local/www/vpn_openvpn_client.php:517
+#: src/usr/local/www/vpn_openvpn_server.php:729
+msgid "*Interface"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:283
+msgid "Select the interface on which to capture traffic. "
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:287
+msgid "Promiscuous"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:290
+#, php-format
+msgid ""
+"The packet capture will be performed using promiscuous mode.%1$sNote: Some "
+"network adapters do not support or work well in promiscuous mode.%1$sMore: "
+"%2$sPacket capture%3$s"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:302
+msgid "IPv4 Only"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:303
+msgid "IPv6 Only"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:299
+#: src/usr/local/www/firewall_rules_edit.php:1267
+#: src/usr/local/www/system_gateways_edit.php:607
+msgid "*Address Family"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:305
+msgid "Select the type of traffic to be captured."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:309
+#: src/usr/local/www/firewall_nat_edit.php:703
+#: src/usr/local/www/firewall_nat_out_edit.php:512
+#: src/usr/local/www/firewall_rules_edit.php:1278
+#: src/usr/local/www/system_authservers.php:736
+#: src/usr/local/www/vpn_ipsec_phase2.php:594
+#: src/usr/local/www/vpn_openvpn_client.php:502
+#: src/usr/local/www/vpn_openvpn_server.php:714
+msgid "*Protocol"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:312
+msgid "Select the protocol to capture, or \"Any\". "
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:316
+msgid "Host Address"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:319
+#, php-format
+msgid ""
+"This value is either the Source or Destination IP address or subnet in CIDR "
+"notation. The packet capture will look for this address in either field."
+"%1$sMatching can be negated by preceding the value with \"!\". Multiple IP "
+"addresses or CIDR subnets may be specified. Comma (\",\") separated values "
+"perform a boolean \"AND\". Separating with a pipe (\"|\") performs a boolean "
+"\"OR\".%1$sIf this field is left blank, all packets on the specified "
+"interface will be captured."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:327
+#: src/usr/local/www/diag_testport.php:52
+#: src/usr/local/www/firewall_aliases_edit.php:580
+#: src/usr/local/www/firewall_nat_edit.php:867
+#: src/usr/local/www/firewall_rules.php:387
+#: src/usr/local/www/firewall_rules.php:389
+#: src/usr/local/www/interfaces.php:3099 src/usr/local/www/interfaces.php:3123
+#: src/usr/local/www/load_balancer_pool.php:123
+#: src/usr/local/www/load_balancer_pool_edit.php:73
+#: src/usr/local/www/load_balancer_virtual_server.php:143
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:200
+#: src/usr/local/www/status_upnp.php:69
+msgid "Port"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:330
+msgid ""
+"The port can be either the source or destination port. The packet capture "
+"will look for this port in either field. Leave blank if not filtering by "
+"port."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:335
+msgid "Packet Length"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:338
+msgid ""
+"The Packet length is the number of bytes of each packet that will be "
+"captured. Default value is 0, which will capture the entire frame regardless "
+"of its size."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:343
+#: src/usr/local/www/diag_ping.php:50
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:92
+msgid "Count"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:346
+#, php-format
+msgid ""
+"This is the number of packets the packet capture will grab. Default value is "
+"100.%sEnter 0 (zero) for no count limit."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:354
+#: src/usr/local/www/services_router_advertisements.php:115
+msgid "Normal"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:355
+msgid "Medium"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:356
+#: src/usr/local/www/services_router_advertisements.php:116
+msgid "High"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:357
+msgid "Full"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:352
+msgid "Level of detail"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:359
+#, php-format
+msgid ""
+"This is the level of detail that will be displayed after hitting \"Stop\" "
+"when the packets have been captured.%sThis option does not affect the level "
+"of detail when downloading the packet capture. "
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:365
+msgid "Reverse DNS Lookup"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:368
+#, php-format
+msgid ""
+"The packet capture will perform a reverse DNS lookup associated with all IP "
+"addresses.%sThis option can cause delays for large packet captures."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:398
+msgid "View Capture"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:411
+msgid "Last capture"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:461
+msgid "Packet capture is running."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:471
+msgid "Packets Captured"
+msgstr ""
+
+#: src/usr/local/www/diag_pf_info.php:31 src/usr/local/www/head.inc:384
+msgid "pfInfo"
+msgstr ""
+
+#: src/usr/local/www/diag_pf_info.php:63
+msgid "Auto Update Page"
+msgstr ""
+
+#: src/usr/local/www/diag_pf_info.php:67
+msgid "Refresh"
+msgstr ""
+
+#: src/usr/local/www/diag_pf_info.php:102 src/usr/local/www/diag_pftop.php:167
+msgid "Output"
+msgstr ""
+
+#: src/usr/local/www/diag_pf_info.php:104
+msgid "Gathering PF information, please wait..."
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:31 src/usr/local/www/head.inc:385
+msgid "pfTop"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:91
+msgid "pfTop Configuration"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:95
+msgid "label"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:96
+msgid "long"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:98
+msgid "rules"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:99
+msgid "size"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:100
+msgid "speed"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:101
+msgid "state"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:102
+msgid "time"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:106 src/usr/local/www/diag_smart.php:199
+#: src/usr/local/www/diag_smart.php:352
+#: src/usr/local/www/services_captiveportal.php:1085
+#: src/usr/local/www/services_captiveportal.php:1119
+#: src/usr/local/www/services_captiveportal.php:1151
+msgid "View"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:117
+msgid "Age"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:119
+msgid "Destination Address"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:120 src/usr/local/www/easyrule.php:96
+#: src/usr/local/www/firewall_nat_out.php:281
+#: src/usr/local/www/firewall_nat_out.php:534
+#: src/usr/local/www/status_logs_common.inc:477
+msgid "Destination Port"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:121
+msgid "Expiry"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:122
+msgid "Peak"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:123
+msgid "Packet"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:126 src/usr/local/www/diag_testport.php:237
+#: src/usr/local/www/firewall_nat_out.php:279
+#: src/usr/local/www/firewall_nat_out.php:532
+#: src/usr/local/www/status_logs_common.inc:436
+msgid "Source Port"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:127 src/usr/local/www/firewall_nat.php:228
+#: src/usr/local/www/status_logs_settings.php:345
+msgid "Source Address"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:113 src/usr/local/www/status_graph.php:151
+msgid "Sort by"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:134
+msgid "Maximum # of States"
+msgstr ""
+
+#: src/usr/local/www/diag_pftop.php:169
+msgid "Gathering pfTOP activity, please wait..."
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:50 src/usr/local/www/diag_testport.php:52
+#: src/usr/local/www/diag_traceroute.php:58
+#: src/usr/local/www/load_balancer_monitor_edit.php:304
+#: src/usr/local/www/load_balancer_monitor_edit.php:330
+#: src/usr/local/www/services_dnsmasq.php:363
+#: src/usr/local/www/services_dnsmasq_edit.php:200
+#: src/usr/local/www/services_unbound.php:436
+#: src/usr/local/www/services_unbound_host_edit.php:215
+#: src/usr/local/www/status_ipsec_leases.php:56
+#: src/usr/local/www/services_rfc2136_edit.php:212
+msgid "Host"
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:54
+#, php-format
+msgid "Count must be between 1 and %s"
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:60 src/usr/local/www/diag_traceroute.php:67
+msgid "When using IPv4, the target host must be an IPv4 address or hostname."
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:63 src/usr/local/www/diag_traceroute.php:70
+msgid "When using IPv6, the target host must be an IPv6 address or hostname."
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:114
+#, php-format
+msgid "Host \"%s\" did not respond or could not be resolved."
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:139 src/usr/local/www/diag_testport.php:259
+#: src/usr/local/www/diag_traceroute.php:133
+msgid "*IP Protocol"
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:148
+msgid "Automatically selected (default)"
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:146
+msgid "*Source address"
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:149
+msgid "Select source address for the ping."
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:153
+msgid "Maximum number of pings"
+msgstr ""
+
+#: src/usr/local/www/diag_ping.php:156
+msgid "Select the maximum number of pings."
+msgstr ""
+
+#: src/usr/local/www/diag_reboot.php:43 src/usr/local/www/diag_reboot.php:113
+#: src/usr/local/www/diag_reboot.php:115 src/usr/local/www/head.inc:386
+#: src/usr/local/www/interfaces.php:2003
+msgid "Reboot"
+msgstr ""
+
+#: src/usr/local/www/diag_reboot.php:49
+msgid "Not actually rebooting (DEBUG is set true)."
+msgstr ""
+
+#: src/usr/local/www/diag_reboot.php:79
+#: src/usr/local/www/pkg_mgr_install.php:704
+#, php-format
+msgid "Rebooting%1$sPage will automatically reload in %2$s seconds"
+msgstr ""
+
+#: src/usr/local/www/diag_reboot.php:87
+#: src/usr/local/www/pkg_mgr_install.php:712
+#, php-format
+msgid "Not yet ready%1$s Retrying in another %2$s seconds"
+msgstr ""
+
+#: src/usr/local/www/diag_reboot.php:107
+msgid "System Reboot Confirmation"
+msgstr ""
+
+#: src/usr/local/www/diag_reboot.php:111
+msgid ""
+"Click \"Reboot\" to reboot the system immediately, or \"Cancel\" to go to "
+"the system dashboard without rebooting. (There will be a brief delay before "
+"the dashboard appears.)"
+msgstr ""
+
+#: src/usr/local/www/diag_reboot.php:113
+msgid "Reboot the system"
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:44
+msgid "The state table has been flushed successfully."
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:52
+msgid "The source tracking table has been flushed successfully."
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:68
+#, php-format
+msgid ""
+"Resetting the state tables will remove all entries from the corresponding "
+"tables. This means that all open connections will be broken and will have to "
+"be re-established. This may be necessary after making substantial changes to "
+"the firewall and/or NAT rules, especially if there are IP protocol mappings "
+"(e.g. for PPTP or IPv6) with open connections.%1$sThe firewall will normally "
+"leave the state tables intact when changing rules.%2$s%3$sNOTE:%4$s "
+"Resetting the firewall state table may cause the browser session to appear "
+"hung after clicking &quot;Reset&quot;. Simply refresh the page to continue."
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:75
+#, php-format
+msgid ""
+"Resetting the source tracking table will remove all source/destination "
+"associations. This means that the \"sticky\" source/destination association "
+"will be cleared for all clients.%sThis does not clear active connection "
+"states, only source tracking."
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:92
+msgid "State reset options"
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:96
+msgid "State Table"
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:114
+#: src/usr/local/www/status_lb_pool.php:249
+#: src/usr/local/www/status_lb_pool.php:251
+msgid "Reset"
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:121
+msgid "Please select at least one reset option"
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:122
+msgid "Do you really want to reset the selected states?"
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:65 src/usr/local/www/head.inc:387
+msgid "Routes"
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:77
+msgid "Routing Table Display Options"
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:81
+msgid "Resolve names"
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:84
+msgid ""
+"Enabling name resolution may cause the query to take longer. It can be "
+"stopped at any time by clicking the Stop button in the browser."
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:90
+msgid "Rows to display"
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:100
+msgid "Use a regular expression to filter the tables."
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
+#: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
+#: src/usr/local/www/pkg_mgr_installed.php:190
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
+#: src/usr/local/www/system_update_settings.php:107
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
+msgid "Update"
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:191
+msgid "IPv4 Routes"
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:201 src/usr/local/www/diag_routes.php:219
+msgid "Gathering data, please wait..."
+msgstr ""
+
+#: src/usr/local/www/diag_routes.php:209
+msgid "IPv6 Routes"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:36 src/usr/local/www/head.inc:388
+#: src/usr/local/www/widgets/include/smart_status.inc:23
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:66
+msgid "S.M.A.R.T. Status"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:40
+msgid "Information & Tests"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:42
+msgid "Config"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:58
+msgid "PASSED"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:59
+msgid "FAILED"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:60
+msgid "Warning"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:69
+msgid "Device does not exist, bailing."
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:75
+#, php-format
+msgid "S.M.A.R.T. is not supported on this system (%s)."
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:86
+msgid "Invalid test type, bailing."
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:93
+msgid "Test Results"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:103 src/usr/local/www/diag_smart.php:181
+#: src/usr/local/www/diag_smart.php:406 src/usr/local/www/diag_smart.php:415
+msgid "Abort"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:105
+msgid "Abort Test"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:109 src/usr/local/www/diag_smart.php:140
+#: src/usr/local/www/diag_smart.php:168
+msgid "Back"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:124
+msgid "Invalid info type, bailing."
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:131 src/usr/local/www/diag_smart.php:206
+#: src/usr/local/www/pkg_mgr_installed.php:195
+msgid "Information"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:152
+msgid "Invalid log type, bailing."
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:159
+msgid "Logs"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:215
+msgid "Info type"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:261 src/usr/local/www/diag_smart.php:334
+#: src/usr/local/www/diag_smart.php:390 src/usr/local/www/diag_smart.php:426
+msgid "Device: /dev/"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:286
+msgid "Perform self-tests"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:295
+msgid "Test type"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:329
+msgid "Select \"Conveyance\" for ATA disks only."
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:359
+msgid "View Logs"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:368
+msgid "Log type"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:31 src/usr/local/www/head.inc:389
+msgid "Sockets"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:36
+msgid "Show only listening sockets"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:36
+msgid "Show all socket connections"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:62
+msgid "System Socket Information"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:108
+msgid "Socket Information"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:110
+#, php-format
+msgid ""
+"This page shows all listening sockets by default, and shows both listening "
+"and outbound connection sockets when %1$sShow all socket connections%2$s is "
+"clicked."
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:112
+msgid "The information listed for each socket is:"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:115
+#, php-format
+msgid "%1$sUSER%2$s\t%3$sThe user who owns the socket.%4$s"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:116
+#, php-format
+msgid "%1$sCOMMAND%2$s\t%3$sThe command which holds the socket.%4$s"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:117
+#, php-format
+msgid ""
+"%1$sPID%2$s\t%3$sThe process ID of the command which holds the socket.%4$s"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:118
+#, php-format
+msgid "%1$sFD%2$s\t%3$sThe file descriptor number of the socket.%4$s"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:119
+#, php-format
+msgid ""
+"%1$sPROTO%2$s\t%3$sThe transport protocol associated with the socket.%4$s"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:120
+#, php-format
+msgid ""
+"%1$sLOCAL ADDRESS%2$s\t%3$sThe address the local end of the socket is bound "
+"to.%4$s"
+msgstr ""
+
+#: src/usr/local/www/diag_sockets.php:121
+#, php-format
+msgid ""
+"%1$sFOREIGN ADDRESS%2$s\t%3$sThe address the foreign end of the socket is "
+"bound to.%4$s"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:147
+msgid "Protocol counts"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:151
+#: src/usr/local/www/firewall_aliases.php:151
+#: src/usr/local/www/services_dnsmasq.php:365
+#: src/usr/local/www/services_dnsmasq.php:439
+#: src/usr/local/www/services_unbound.php:438
+#: src/usr/local/www/services_unbound.php:514
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:222
+msgid "IP"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:155
+#: src/usr/local/www/firewall_nat.php:229
+#: src/usr/local/www/status_logs_filter_summary.php:88
+msgid "Source Ports"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:156
+#: src/usr/local/www/firewall_nat.php:231
+msgid "Dest. Ports"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:192 src/usr/local/www/head.inc:391
+msgid "States Summary"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:196
+msgid "By Source IP"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:197
+msgid "By Destination IP"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:198
+msgid "Total per IP"
+msgstr ""
+
+#: src/usr/local/www/diag_states_summary.php:199
+msgid "By IP Pair"
+msgstr ""
+
+#: src/usr/local/www/diag_system_activity.php:31 src/usr/local/www/head.inc:392
+msgid "System Activity"
+msgstr ""
+
+#: src/usr/local/www/diag_system_activity.php:86
+msgid "CPU Activity"
+msgstr ""
+
+#: src/usr/local/www/diag_system_activity.php:88
+msgid "Gathering CPU activity, please wait..."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:29 src/usr/local/www/head.inc:381
+msgid "Tables"
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:110
+#, php-format
+msgid "The %s file contents have been updated."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:124
+msgid "webConfigurator Lockout Table"
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:126
+#, php-format
+msgid "%s Table"
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:131
+msgid "Table to Display"
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:132
+msgid "Table"
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:139
+#, php-format
+msgid ""
+"Select a user-defined alias name or system table name to view its contents. "
+"%sAliases become Tables when loaded into the active firewall ruleset. The "
+"contents displayed on this page reflect the current addresses inside tables "
+"used by the firewall."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:154
+msgid "Empty Table"
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:184
+#, php-format
+msgid "Table last updated on %s."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:186
+msgid "Date of last update of table is unknown."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:189
+#, php-format
+msgid "%s records."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:189
+msgid "."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:189
+msgid ","
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:201
+msgid "Hide table comments."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:202
+msgid "Show table comments."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:251
+msgid "No entries exist in this table."
+msgstr ""
+
+#: src/usr/local/www/diag_tables.php:288
+msgid "Remove this entry"
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:38
+#: src/usr/local/www/diag_testport.php:217 src/usr/local/www/head.inc:383
+msgid "Test Port"
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:56
+msgid "Please enter a valid IP or hostname."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:60
+msgid "Please enter a valid port number."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:64
+msgid "Please enter a valid source port number, or leave the field blank."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:68
+msgid "Cannot connect to an IPv4 address using IPv6."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:71
+msgid "Cannot connect to an IPv6 address using IPv4."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:195
+#, php-format
+msgid "Port test to host: %1$s Port: %2$s successful."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:197
+msgid "Any text received from the host will be shown below the form."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:203
+msgid ""
+"No output received, or connection failed. Try with \"Show Remote Text\" "
+"unchecked first."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:205
+msgid "Connection failed."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:211
+msgid ""
+"This page performs a simple TCP connection test to determine if a host is up "
+"and accepting connections on a given port."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:212
+msgid ""
+"This test does not function for UDP since there is no way to reliably "
+"determine if a UDP port accepts connections in this manner."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:229
+#: src/usr/local/www/load_balancer_pool_edit.php:330
+msgid "*Port"
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:245
+msgid "Remote text"
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:248
+msgid ""
+"Shows the text given by the server when connecting to the port. If checked "
+"it will take 10+ seconds to display in a panel below this form."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:252
+#: src/usr/local/www/diag_traceroute.php:140
+msgid "*Source Address"
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:255
+#: src/usr/local/www/diag_traceroute.php:143
+msgid "Select source address for the trace."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:262
+msgid ""
+"If IPv4 or IPv6 is forced and a hostname is used that does not contain a "
+"result using that protocol, it will result in an error. For example if IPv4 "
+"is forced and a hostname is used that only returns an AAAA IPv6 IP address, "
+"it will not work."
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:281
+msgid "Received Remote Text"
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:58
+msgid "ttl"
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:62
+#, php-format
+msgid "Maximum number of hops must be between 1 and %s"
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:115
+#, php-format
+msgid "Error: %s could not be traced/resolved"
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:136
+msgid "Select the protocol to use."
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:147
+msgid "Maximum number of hops"
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:150
+msgid "Select the maximum number of network hops to trace."
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:154
+msgid "Reverse Address Lookup"
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:157
+msgid ""
+"When checked, traceroute will attempt to perform a PTR lookup to locate "
+"hostnames for hops along the path. This will slow down the process as it has "
+"to wait for DNS replies."
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:161
+msgid "Use ICMP"
+msgstr ""
+
+#: src/usr/local/www/diag_traceroute.php:164
+msgid ""
+"By default, traceroute uses UDP but that may be blocked by some routers. "
+"Check this box to use ICMP instead, which may succeed. "
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:53 src/usr/local/www/easyrule.php:101
+msgid "Invalid action specified."
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:61 src/usr/local/www/firewall_aliases.php:163
+#: src/usr/local/www/firewall_aliases_edit.php:142
+#: src/usr/local/www/firewall_aliases_import.php:55
+#: src/usr/local/www/firewall_nat.php:185
+#: src/usr/local/www/firewall_nat_1to1.php:121
+#: src/usr/local/www/firewall_nat_1to1_edit.php:290
+#: src/usr/local/www/firewall_nat_edit.php:638
+#: src/usr/local/www/firewall_nat_npt.php:121
+#: src/usr/local/www/firewall_nat_npt_edit.php:178
+#: src/usr/local/www/firewall_nat_out.php:200
+#: src/usr/local/www/firewall_nat_out_edit.php:397
+#: src/usr/local/www/firewall_rules.php:320
+#: src/usr/local/www/firewall_rules_edit.php:1091
+#: src/usr/local/www/firewall_schedule.php:42
+#: src/usr/local/www/firewall_schedule_edit.php:52
+#: src/usr/local/www/firewall_shaper.php:41
+#: src/usr/local/www/firewall_shaper_queues.php:180
+#: src/usr/local/www/firewall_shaper_vinterface.php:39
+#: src/usr/local/www/firewall_shaper_wizards.php:57
+#: src/usr/local/www/firewall_virtual_ip.php:237
+#: src/usr/local/www/firewall_virtual_ip_edit.php:289
+#: src/usr/local/www/status_logs_common.inc:89
+#: src/usr/local/www/status_logs_settings.php:217
+msgid "Firewall"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:61
+msgid "Easy Rule"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:71
+msgid "Confirmation Required to Add Easy Rule"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:79 src/usr/local/www/easyrule.php:87
+msgid "Rule Type"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:82 src/usr/local/www/easyrule.php:92
+#: src/usr/local/www/firewall_nat_edit.php:718
+#: src/usr/local/www/firewall_nat_edit.php:722
+#: src/usr/local/www/firewall_nat_out.php:278
+#: src/usr/local/www/firewall_nat_out.php:531
+#: src/usr/local/www/firewall_nat_out_edit.php:166
+#: src/usr/local/www/firewall_rules.php:386
+#: src/usr/local/www/firewall_rules_edit.php:440
+#: src/usr/local/www/firewall_rules_edit.php:1315
+#: src/usr/local/www/status_ipsec_sad.php:66
+#: src/usr/local/www/status_ipsec_spd.php:59
+#: src/usr/local/www/status_logs_filter.php:161
+#: src/usr/local/www/status_logs_filter_dynamic.php:392
+#: src/usr/local/www/vpn_ipsec_mobile.php:455
+#: src/usr/local/www/vpn_ipsec_mobile.php:465
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:204
+#: src/usr/local/www/widgets/widgets/log.widget.php:104
+msgid "Source"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:84 src/usr/local/www/easyrule.php:98
+#: src/usr/local/www/status_logs_settings.php:352
+msgid "IP Protocol"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:94 src/usr/local/www/firewall_nat_out.php:280
+#: src/usr/local/www/firewall_nat_out.php:533
+#: src/usr/local/www/firewall_nat_out_edit.php:166
+#: src/usr/local/www/firewall_rules.php:388
+#: src/usr/local/www/firewall_rules_edit.php:441
+#: src/usr/local/www/firewall_rules_edit.php:1315
+#: src/usr/local/www/status_ipsec_sad.php:67
+#: src/usr/local/www/status_ipsec_spd.php:60
+#: src/usr/local/www/status_logs_filter.php:162
+#: src/usr/local/www/status_logs_filter_dynamic.php:393
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:205
+#: src/usr/local/www/widgets/widgets/log.widget.php:105
+msgid "Destination"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:118
+msgid ""
+"This is the Easy Rule status page, mainly used to display errors when adding "
+"rules."
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:119
+msgid ""
+"There apparently was not an error, and this page was navigated to directly "
+"without any instructions for what it should do."
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:121
+msgid ""
+"This page is meant to be called from the block/pass buttons on the Firewall "
+"Logs page"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:122 src/usr/local/www/head.inc:343
+#: src/usr/local/www/status_logs.php:96 src/usr/local/www/status_logs.php:99
+#: src/usr/local/www/status_logs_filter.php:102
+#: src/usr/local/www/status_logs_filter_dynamic.php:82
+#: src/usr/local/www/status_logs_filter_summary.php:67
+#: src/usr/local/www/status_logs_settings.php:187
+#: src/usr/local/www/status_logs_vpn.php:84
+msgid "System Logs"
+msgstr ""
+
+#: src/usr/local/www/easyrule.php:122
+msgid "Firewall Tab"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:95
+#, php-format
+msgid "Cannot delete alias. Currently in use by %s."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:152
+msgid "Ports"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:153
+msgid "URLs"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:177
+msgid "The alias list has been changed."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:177
+#: src/usr/local/www/firewall_nat.php:195
+#: src/usr/local/www/firewall_nat_1to1.php:131
+#: src/usr/local/www/firewall_nat_npt.php:131
+#: src/usr/local/www/firewall_nat_out.php:214
+#: src/usr/local/www/firewall_rules.php:336
+#: src/usr/local/www/firewall_shaper.php:366
+#: src/usr/local/www/firewall_shaper_queues.php:199
+#: src/usr/local/www/firewall_shaper_vinterface.php:366
+#: src/usr/local/www/firewall_shaper_wizards.php:84
+#: src/usr/local/www/firewall_virtual_ip.php:245
+#: src/usr/local/www/interfaces_assign.php:475
+#: src/usr/local/www/load_balancer_monitor.php:87
+#: src/usr/local/www/load_balancer_pool.php:101
+#: src/usr/local/www/load_balancer_setting.php:100
+#: src/usr/local/www/load_balancer_virtual_server.php:121
+#: src/usr/local/www/services_captiveportal_mac.php:160
+#: src/usr/local/www/services_captiveportal_zones.php:64
+#: src/usr/local/www/services_dhcp.php:742
+#: src/usr/local/www/services_dhcpv6.php:505
+#: src/usr/local/www/services_dnsmasq.php:239
+#: src/usr/local/www/services_igmpproxy.php:71
+#: src/usr/local/www/services_pppoe.php:90
+#: src/usr/local/www/services_unbound.php:253
+#: src/usr/local/www/services_unbound_acls.php:194
+#: src/usr/local/www/services_unbound_advanced.php:201
+#: src/usr/local/www/status_lb_pool.php:110
+#: src/usr/local/www/system_advanced_sysctl.php:132
+#: src/usr/local/www/system_gateway_groups.php:114
+#: src/usr/local/www/system_gateways.php:239
+#: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
+#: src/usr/local/www/vpn_ipsec_keys.php:83
+#: src/usr/local/www/vpn_ipsec_mobile.php:407
+msgid "The changes must be applied for them to take effect."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:185
+#, php-format
+msgid "Firewall Aliases %s"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:193
+#: src/usr/local/www/services_igmpproxy.php:85
+msgid "Values"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:257
+msgid "Edit alias"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:258
+msgid "Delete alias"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:273
+#: src/usr/local/www/firewall_nat.php:463
+#: src/usr/local/www/firewall_nat.php:467
+#: src/usr/local/www/firewall_nat_1to1.php:237
+#: src/usr/local/www/firewall_nat_1to1.php:241
+#: src/usr/local/www/firewall_nat_npt.php:226
+#: src/usr/local/www/firewall_nat_npt.php:230
+#: src/usr/local/www/firewall_nat_out.php:494
+#: src/usr/local/www/firewall_nat_out.php:498
+#: src/usr/local/www/firewall_rules.php:824
+#: src/usr/local/www/firewall_rules.php:828
+#: src/usr/local/www/firewall_schedule.php:245
+#: src/usr/local/www/firewall_virtual_ip.php:337
+#: src/usr/local/www/interfaces.php:1905 src/usr/local/www/interfaces.php:3228
+#: src/usr/local/www/interfaces_assign.php:562
+#: src/usr/local/www/interfaces_bridge.php:156
+#: src/usr/local/www/interfaces_gif.php:130
+#: src/usr/local/www/interfaces_gre.php:136
+#: src/usr/local/www/interfaces_groups.php:126
+#: src/usr/local/www/interfaces_lagg.php:145
+#: src/usr/local/www/interfaces_ppps.php:146
+#: src/usr/local/www/interfaces_qinq.php:152
+#: src/usr/local/www/interfaces_vlan.php:150
+#: src/usr/local/www/interfaces_wireless.php:140
+#: src/usr/local/www/load_balancer_monitor.php:146
+#: src/usr/local/www/load_balancer_pool.php:181
+#: src/usr/local/www/load_balancer_virtual_server.php:203
+#: src/usr/local/www/pkg.php:580 src/usr/local/www/pkg_edit.php:1453
+#: src/usr/local/www/services_captiveportal_filemanager.php:235
+#: src/usr/local/www/services_captiveportal_hostname.php:161
+#: src/usr/local/www/services_captiveportal_ip.php:157
+#: src/usr/local/www/services_captiveportal_mac.php:222
+#: src/usr/local/www/services_captiveportal_vouchers.php:431
+#: src/usr/local/www/services_captiveportal_zones.php:118
+#: src/usr/local/www/services_checkip.php:156
+#: src/usr/local/www/services_dhcp.php:922
+#: src/usr/local/www/services_dhcp.php:1337
+#: src/usr/local/www/services_dhcp.php:1463
+#: src/usr/local/www/services_dhcpv6.php:1053
+#: src/usr/local/www/services_dnsmasq.php:428
+#: src/usr/local/www/services_dnsmasq.php:475
+#: src/usr/local/www/services_dyndns.php:214
+#: src/usr/local/www/services_igmpproxy.php:140
+#: src/usr/local/www/services_ntpd.php:276
+#: src/usr/local/www/services_ntpd_acls.php:304
+#: src/usr/local/www/services_pppoe.php:146
+#: src/usr/local/www/services_rfc2136.php:202
+#: src/usr/local/www/services_router_advertisements.php:438
+#: src/usr/local/www/services_unbound.php:503
+#: src/usr/local/www/services_unbound.php:552
+#: src/usr/local/www/services_unbound_acls.php:338
+#: src/usr/local/www/services_wol.php:207
+#: src/usr/local/www/system_authservers.php:471
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
+#: src/usr/local/www/system_crlmanager.php:542
+#: src/usr/local/www/system_gateway_groups.php:188
+#: src/usr/local/www/system_gateways.php:332
+#: src/usr/local/www/system_groupmanager.php:270
+#: src/usr/local/www/system_groupmanager.php:354
+#: src/usr/local/www/system_routes.php:299
+#: src/usr/local/www/system_usermanager.php:490
+#: src/usr/local/www/system_usermanager.php:536
+#: src/usr/local/www/system_usermanager.php:626
+#: src/usr/local/www/vpn_ipsec_keys.php:169
+#: src/usr/local/www/vpn_l2tp_users.php:124
+#: src/usr/local/www/vpn_openvpn_client.php:945
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
+msgid "Add"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:280
+msgid "Import"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:291
+msgid ""
+"Aliases act as placeholders for real hosts, networks or ports. They can be "
+"used to minimize the number of changes that have to be made if a host, "
+"network or port changes."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:293
+msgid ""
+"The name of an alias can be entered instead of the host, network or port "
+"where indicated. The alias will be resolved according to the list above."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases.php:294
+msgid ""
+"If an alias cannot be resolved (e.g. because it was deleted), the "
+"corresponding element (e.g. filter/NAT/shaper rule) will be considered "
+"invalid and skipped."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:73
+msgid "host"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:74
+msgid "network"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:75
+#: src/usr/local/www/firewall_aliases_edit.php:721
+msgid "port"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:76
+msgid "URL (IP)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:77
+msgid "URL (Port)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:78
+msgid "URL Table (IP)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:79
+msgid "URL Table (Port)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:142
+#: src/usr/local/www/firewall_nat_1to1_edit.php:290
+#: src/usr/local/www/firewall_nat_edit.php:638
+#: src/usr/local/www/firewall_nat_npt_edit.php:178
+#: src/usr/local/www/firewall_nat_out_edit.php:397
+#: src/usr/local/www/firewall_rules.php:779
+#: src/usr/local/www/firewall_rules_edit.php:1104
+#: src/usr/local/www/firewall_schedule_edit.php:52
+#: src/usr/local/www/firewall_virtual_ip_edit.php:289
+#: src/usr/local/www/interfaces_bridge_edit.php:384
+#: src/usr/local/www/interfaces_gif_edit.php:165
+#: src/usr/local/www/interfaces_gre_edit.php:159
+#: src/usr/local/www/interfaces_groups_edit.php:33
+#: src/usr/local/www/interfaces_lagg_edit.php:223
+#: src/usr/local/www/interfaces_ppps_edit.php:454
+#: src/usr/local/www/interfaces_qinq_edit.php:29
+#: src/usr/local/www/interfaces_vlan_edit.php:172
+#: src/usr/local/www/interfaces_wireless_edit.php:165
+#: src/usr/local/www/load_balancer_monitor_edit.php:202
+#: src/usr/local/www/load_balancer_pool_edit.php:185
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:159
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:64
+#: src/usr/local/www/services_captiveportal_ip_edit.php:66
+#: src/usr/local/www/services_captiveportal_mac_edit.php:69
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:53
+#: src/usr/local/www/services_checkip_edit.php:106
+#: src/usr/local/www/services_dyndns_edit.php:242
+#: src/usr/local/www/services_igmpproxy_edit.php:33
+#: src/usr/local/www/services_pppoe_edit.php:280
+#: src/usr/local/www/services_rfc2136_edit.php:148
+#: src/usr/local/www/services_unbound_acls.php:180
+#: src/usr/local/www/services_wol_edit.php:111
+#: src/usr/local/www/system_advanced_sysctl.php:118
+#: src/usr/local/www/system_authservers.php:412
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
+#: src/usr/local/www/system_crlmanager.php:262
+#: src/usr/local/www/system_gateway_groups_edit.php:147
+#: src/usr/local/www/system_gateways_edit.php:551
+#: src/usr/local/www/system_groupmanager.php:280
+#: src/usr/local/www/system_groupmanager_addprivs.php:44
+#: src/usr/local/www/system_routes_edit.php:224
+#: src/usr/local/www/system_usermanager.php:546
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:122
+#: src/usr/local/www/vpn_l2tp_users_edit.php:29
+#: src/usr/local/www/vpn_openvpn_client.php:454
+#: src/usr/local/www/vpn_openvpn_csc.php:287
+#: src/usr/local/www/vpn_openvpn_server.php:637
+msgid "Edit"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:148
+msgid ""
+"Vertical bars (|) at start or end, or double in the middle of descriptions "
+"not allowed. Descriptions have been cleaned. Check and save again."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:164
+#: src/usr/local/www/firewall_aliases_import.php:75
+#: src/usr/local/www/interfaces_groups_edit.php:108
+msgid "An alias with this name already exists."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:172
+#: src/usr/local/www/firewall_aliases_import.php:82
+#, php-format
+msgid "Cannot use a reserved keyword as an alias name: %s"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:182
+msgid "The alias name cannot start with pkg_"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:188
+#: src/usr/local/www/firewall_aliases_import.php:89
+msgid "An interface description with this name already exists."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:197
+#: src/usr/local/www/firewall_aliases_import.php:98
+msgid "Sorry, an interface group with this name already exists."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:219
+msgid "A valid URL must be provided."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:221
+#, php-format
+msgid "Unable to fetch usable data from URL %s"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:233
+#: src/usr/local/www/firewall_aliases_edit.php:276
+#: src/usr/local/www/firewall_aliases_edit.php:321
+#, php-format
+msgid "Entry added %s"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:249
+#, php-format
+msgid "Could not fetch the URL '%s'."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:283
+#, php-format
+msgid "A valid URL must be provided. Could not fetch usable data from '%s'."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:287
+#, php-format
+msgid "URL '%s' is not valid."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:352
+#, php-format
+msgid "Range is too large to expand into individual host IP addresses (%s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:353
+#: src/usr/local/www/firewall_aliases_edit.php:383
+#, php-format
+msgid "The maximum number of entries in an alias is %s"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:361
+#: src/usr/local/www/firewall_aliases_import.php:141
+#, php-format
+msgid "IPv6 address ranges are not supported (%s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:382
+#, php-format
+msgid "Subnet is too large to expand into individual host IP addresses (%s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:390
+#, php-format
+msgid "IPv6 subnets are not supported in host aliases (%s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:417
+#, php-format
+msgid "The maximum number of entries in an alias has been exceeded (%s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:436
+#, php-format
+msgid "%s is not a valid port or alias."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:441
+#, php-format
+msgid "%1$s is not a valid %2$s address, FQDN or alias."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:447
+#, php-format
+msgid "%1$s/%2$s is not a valid subnet."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:456
+#, php-format
+msgid ""
+"The alias(es): %s cannot be nested because they are not of the same type."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:558
+#: src/usr/local/www/firewall_aliases_edit.php:619
+msgid "Network(s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:559
+#: src/usr/local/www/firewall_aliases_edit.php:618
+msgid "Host(s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:560
+#: src/usr/local/www/firewall_aliases_edit.php:620
+msgid "Port(s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:561
+#: src/usr/local/www/firewall_aliases_edit.php:581
+#: src/usr/local/www/firewall_aliases_edit.php:621
+msgid "URL (IPs)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:562
+#: src/usr/local/www/firewall_aliases_edit.php:582
+#: src/usr/local/www/firewall_aliases_edit.php:622
+msgid "URL (Ports)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:563
+#: src/usr/local/www/firewall_aliases_edit.php:583
+#: src/usr/local/www/firewall_aliases_edit.php:623
+msgid "URL Table (IPs)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:564
+#: src/usr/local/www/firewall_aliases_edit.php:584
+#: src/usr/local/www/firewall_aliases_edit.php:624
+msgid "URL Table (Ports)"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:568
+#: src/usr/local/www/services_unbound_acls.php:282
+msgid "Add Network"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:569
+msgid "Add Host"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:570
+msgid "Add Port"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:571
+#: src/usr/local/www/firewall_aliases_edit.php:572
+msgid "Add URL"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:573
+#: src/usr/local/www/firewall_aliases_edit.php:574
+msgid "Add URL Table"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:578
+msgid "Network or FQDN"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:579
+msgid "IP or FQDN"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:587
+msgid "The value after the \"/\" is the update frequency in days."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:590
+msgid ""
+"Networks are specified in CIDR format. Select the CIDR mask that pertains to "
+"each entry. /32 specifies a single IPv4 host, /128 specifies a single IPv6 "
+"host, /24 specifies 255.255.255.0, /64 specifies a normal IPv6 network, etc. "
+"Hostnames (FQDNs) may also be specified, using a /32 mask for IPv4 or /128 "
+"for IPv6. An IP range such as 192.168.1.1-192.168.1.254 may also be entered "
+"and a list of CIDR networks will be derived to fill the range."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:591
+msgid ""
+"Enter as many hosts as desired. Hosts must be specified by their IP address "
+"or fully qualified domain name (FQDN). FQDN hostnames are periodically re-"
+"resolved and updated. If multiple IPs are returned by a DNS query, all are "
+"used. An IP range such as 192.168.1.1-192.168.1.10 or a small subnet such as "
+"192.168.1.16/28 may also be entered and a list of individual IP addresses "
+"will be generated."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:592
+msgid ""
+"Enter ports as desired, with a single port or port range per entry. Port "
+"ranges can be expressed by separating with a colon."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:593
+msgid ""
+"Enter as many URLs as desired. After saving, the URLs will be downloaded and "
+"the items imported into the alias. Use only with small sets of IP addresses "
+"(less than 3000)."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:594
+msgid ""
+"Enter as many URLs as desired. After saving, the URLs will be downloaded and "
+"the items imported into the alias. Use only with small sets of Ports (less "
+"than 3000)."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:595
+msgid ""
+"Enter a single URL containing a large number of IPs and/or Subnets. After "
+"saving, the URLs will be downloaded and a table file containing these "
+"addresses will be created. This will work with large numbers of addresses "
+"(30,000+) or small numbers."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:597
+msgid ""
+"Enter a single URL containing a list of Port numbers and/or Port ranges. "
+"After saving, the URL will be downloaded."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:656
+msgid "Properties"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:665
+#: src/usr/local/www/firewall_aliases_import.php:257
+msgid ""
+"The name of the alias may only consist of the characters \"a-z, A-Z, 0-9 and "
+"_\"."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:677
+#: src/usr/local/www/firewall_nat_1to1_edit.php:488
+#: src/usr/local/www/firewall_nat_1to1_edit.php:515
+#: src/usr/local/www/firewall_nat_edit.php:737
+#: src/usr/local/www/firewall_nat_edit.php:805
+#: src/usr/local/www/firewall_nat_out_edit.php:524
+#: src/usr/local/www/firewall_nat_out_edit.php:549
+#: src/usr/local/www/firewall_rules_edit.php:438
+#: src/usr/local/www/firewall_virtual_ip.php:263
+#: src/usr/local/www/firewall_virtual_ip_edit.php:95
+#: src/usr/local/www/load_balancer_monitor.php:107
+#: src/usr/local/www/load_balancer_monitor_edit.php:86
+#: src/usr/local/www/load_balancer_monitor_edit.php:285
+#: src/usr/local/www/services_captiveportal.php:965
+#: src/usr/local/www/services_dhcp.php:1314
+#: src/usr/local/www/services_igmpproxy.php:84
+#: src/usr/local/www/status_logs_vpn.php:178
+#: src/usr/local/www/status_logs_vpn.php:408
+#: src/usr/local/www/status_ntpd.php:299
+#: src/usr/local/www/system_authservers.php:233
+#: src/usr/local/www/system_authservers.php:256
+#: src/usr/local/www/system_authservers.php:443
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
+#: src/usr/local/www/vpn_ipsec_keys.php:102
+#: src/usr/local/www/vpn_ipsec_phase2.php:524
+#: src/usr/local/www/vpn_ipsec_phase2.php:550
+#: src/usr/local/www/vpn_ipsec_phase2.php:570
+msgid "Type"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:687
+msgid "Hint"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:55
+msgid "Bulk import"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:65
+msgid "Aliases to import"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:128
+#, php-format
+msgid "%s is not a valid port or port range."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:145
+#, php-format
+msgid "%s is not an IP address. Please correct the error to continue"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:157
+msgid ""
+"Descriptions may not start or end with vertical bar (|) or contain double "
+"vertical bar ||."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:165
+msgid "Descriptions must be less than 200 characters long."
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:215
+msgid "Port Alias Details"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:216
+msgid ""
+"Paste in the ports to import separated by a carriage return. The list may "
+"contain port numbers, port ranges, blank lines (ignored) and an optional "
+"description after each port. e.g.:"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:224
+msgid "443 HTTPS port"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:226
+msgid "4000:4099 Description of a port range"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:229
+msgid "IP Alias Details"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:230
+msgid ""
+"Paste in the aliases to import separated by a carriage return. Common "
+"examples are lists of IPs, networks, blacklists, etc. The list may contain "
+"IP addresses, with or without CIDR prefix, IP ranges, blank lines (ignored) "
+"and an optional description after each IP. e.g.:"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:242
+msgid "192.168.1.254 Home router"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:244
+msgid "10.20.0.0/16 Office network"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:246
+msgid "10.40.1.10-10.40.1.19 Managed switches"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:254
+msgid "*Alias Name"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_import.php:269
+msgid "*Aliases to import"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:177
+msgid "Firewall: NAT: Port forward, enable/disable NAT rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:185
+#: src/usr/local/www/firewall_nat.php:199
+#: src/usr/local/www/firewall_nat_1to1.php:135
+#: src/usr/local/www/firewall_nat_edit.php:638
+#: src/usr/local/www/firewall_nat_npt.php:135
+#: src/usr/local/www/firewall_nat_out.php:218
+msgid "Port Forward"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:194
+#: src/usr/local/www/firewall_nat_1to1.php:130
+#: src/usr/local/www/firewall_nat_npt.php:130
+#: src/usr/local/www/firewall_nat_out.php:213
+msgid "The NAT configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:200
+#: src/usr/local/www/firewall_nat_1to1.php:121
+#: src/usr/local/www/firewall_nat_1to1.php:136
+#: src/usr/local/www/firewall_nat_1to1_edit.php:290
+#: src/usr/local/www/firewall_nat_npt.php:136
+#: src/usr/local/www/firewall_nat_out.php:219
+msgid "1:1"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:201
+#: src/usr/local/www/firewall_nat_1to1.php:137
+#: src/usr/local/www/firewall_nat_npt.php:137
+#: src/usr/local/www/firewall_nat_out.php:200
+#: src/usr/local/www/firewall_nat_out.php:220
+#: src/usr/local/www/firewall_nat_out_edit.php:397
+msgid "Outbound"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:202
+#: src/usr/local/www/firewall_nat_1to1.php:138
+#: src/usr/local/www/firewall_nat_npt.php:121
+#: src/usr/local/www/firewall_nat_npt.php:138
+#: src/usr/local/www/firewall_nat_npt_edit.php:178
+#: src/usr/local/www/firewall_nat_out.php:221
+msgid "NPt"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:218
+#: src/usr/local/www/firewall_rules.php:320
+#: src/usr/local/www/firewall_rules_edit.php:1091
+#: src/usr/local/www/head.inc:282
+msgid "Rules"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:230
+msgid "Dest. Address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:232
+msgid "NAT IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:233
+msgid "NAT Ports"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:293
+#: src/usr/local/www/firewall_nat_1to1.php:178
+#: src/usr/local/www/firewall_nat_npt.php:179
+#: src/usr/local/www/firewall_rules.php:504 src/usr/local/www/vpn_ipsec.php:276
+#: src/usr/local/www/vpn_ipsec.php:426
+msgid "click to toggle enabled/disabled status"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:295
+#: src/usr/local/www/firewall_nat_1to1.php:180
+msgid "Negated: This rule excludes NAT from a later rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:303
+msgid "All traffic matching this NAT entry is passed"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:307
+#, php-format
+msgid "Firewall rule ID %s is managed by this rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:334
+#: src/usr/local/www/firewall_nat.php:351
+#: src/usr/local/www/firewall_nat.php:369
+#: src/usr/local/www/firewall_nat.php:386
+#: src/usr/local/www/firewall_nat.php:403
+#: src/usr/local/www/firewall_nat.php:421
+#: src/usr/local/www/firewall_rules.php:711
+#: src/usr/local/www/firewall_rules.php:720
+#: src/usr/local/www/firewall_rules.php:729
+#: src/usr/local/www/firewall_rules.php:738
+msgid "Alias details"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:439
+msgid "Edit rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:440
+msgid "Add a new NAT based on this one"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:441
+msgid "Delete rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:461
+#: src/usr/local/www/firewall_rules.php:822
+msgid "Add rule to the top of the list"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:465
+#: src/usr/local/www/firewall_rules.php:826
+msgid "Add rule to the end of the list"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:469
+#: src/usr/local/www/firewall_rules.php:830
+msgid "Delete selected rules"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:473
+#: src/usr/local/www/firewall_rules.php:834
+msgid "Save rule order"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:477
+#: src/usr/local/www/firewall_rules.php:838
+msgid "Add separator"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:479
+#: src/usr/local/www/firewall_rules.php:840
+msgid "Separator"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:490
+#: src/usr/local/www/firewall_rules.php:888
+msgid "Enter a description, Save, then drag to final location."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:526
+msgid ""
+"One or more Port Forward rules have been moved but have not yet been saved"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:541
+#: src/usr/local/www/firewall_rules.php:849
+msgid "Legend"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:542
+#: src/usr/local/www/firewall_nat_edit.php:913
+#: src/usr/local/www/firewall_nat_edit.php:948
+#: src/usr/local/www/firewall_rules.php:850
+#: src/usr/local/www/firewall_rules_edit.php:1154
+#: src/usr/local/www/services_captiveportal_mac.php:63
+#: src/usr/local/www/services_captiveportal_mac_edit.php:205
+#: src/usr/local/www/status_logs_common.inc:418
+#: src/usr/local/www/widgets/widgets/log.widget.php:224
+#: src/usr/local/www/status_logs_common.inc:419
+msgid "Pass"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat.php:543
+msgid "Linked rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:113
+msgid "Firewall: NAT: 1:1, enable/disable NAT rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:143
+msgid "NAT 1:1 Mappings"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:151
+msgid "External IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:152
+#: src/usr/local/www/status_upnp.php:71
+msgid "Internal IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:153
+msgid "Destination IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:219
+#: src/usr/local/www/firewall_nat_npt.php:209
+#: src/usr/local/www/firewall_nat_out.php:477
+msgid "Edit mapping"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:220
+#: src/usr/local/www/firewall_nat_npt.php:210
+#: src/usr/local/www/firewall_nat_out.php:478
+msgid "Add a new mapping based on this one"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:221
+#: src/usr/local/www/firewall_nat_npt.php:211
+#: src/usr/local/www/firewall_nat_out.php:479
+msgid "Delete mapping"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:235
+#: src/usr/local/www/firewall_nat_npt.php:224
+msgid "Add mapping to the top of the list"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:239
+#: src/usr/local/www/firewall_nat_npt.php:228
+msgid "Add mapping to the end of the list"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:243
+#: src/usr/local/www/firewall_nat_npt.php:232
+msgid "Delete selected mappings"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:247
+#: src/usr/local/www/firewall_nat_npt.php:236
+#: src/usr/local/www/firewall_nat_out.php:504
+msgid "Save mapping order"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:255
+#, php-format
+msgid ""
+"Depending on the way the WAN connection is setup, this may also need a "
+"%1$sVirtual IP%2$s."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:257
+msgid ""
+"If a 1:1 NAT entry is added for any of the interface IPs on this system, it "
+"will make this system inaccessible on that IP address. i.e. if the WAN IP "
+"address is used, any services on this system (IPsec, OpenVPN server, etc.) "
+"using the WAN IP address will no longer function."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1.php:292
+msgid ""
+"One or more NAT 1:1 mappings have been moved but have not yet been saved"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:42
+msgid "They must be either both IPv4 or both IPv6 addresses."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:115
+#: src/usr/local/www/firewall_nat_out_edit.php:160
+#, php-format
+msgid ""
+"Invalid characters detected (%s).  Please remove invalid characters and save "
+"again."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:125
+msgid "External subnet"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:130
+#: src/usr/local/www/firewall_nat_edit.php:220
+msgid "Source address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:135
+#: src/usr/local/www/firewall_nat_edit.php:225
+msgid "Destination address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:181
+#: src/usr/local/www/firewall_nat_edit.php:283
+msgid "Alias entries must specify a single host or alias."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:193
+#, php-format
+msgid ""
+"The external IP address (%1$s) and internal IP address (%2$s) are of "
+"different address families."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:202
+msgid "A valid internal bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:219
+#, php-format
+msgid ""
+"The external IP address (%1$s) and destination IP address (%2$s) are of "
+"different address families."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:226
+#, php-format
+msgid ""
+"The internal IP address (%1$s) and destination IP address (%2$s) are of "
+"different address families."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:235
+#: src/usr/local/www/firewall_nat_edit.php:306
+#: src/usr/local/www/firewall_nat_out_edit.php:225
+#: src/usr/local/www/firewall_rules_edit.php:548
+msgid "A valid destination bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:297
+msgid "Single host"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:297
+#: src/usr/local/www/firewall_nat_1to1_edit.php:344
+#: src/usr/local/www/firewall_nat_edit.php:536
+#: src/usr/local/www/firewall_nat_edit.php:576
+#: src/usr/local/www/firewall_nat_out_edit.php:523
+#: src/usr/local/www/firewall_nat_out_edit.php:548
+#: src/usr/local/www/firewall_rules_edit.php:1347
+#: src/usr/local/www/firewall_virtual_ip_edit.php:373
+#: src/usr/local/www/system_routes.php:243
+#: src/usr/local/www/vpn_ipsec_mobile.php:488
+#: src/usr/local/www/vpn_ipsec_phase2.php:523
+#: src/usr/local/www/vpn_ipsec_phase2.php:543
+#: src/usr/local/www/vpn_ipsec_phase2.php:569
+msgid "Network"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:302
+#: src/usr/local/www/firewall_nat_1to1_edit.php:347
+#: src/usr/local/www/firewall_nat_edit.php:539
+#: src/usr/local/www/firewall_nat_edit.php:579
+#: src/usr/local/www/firewall_rules_edit.php:1358
+#: src/usr/local/www/guiconfig.inc:226
+msgid "PPPoE clients"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:306
+#: src/usr/local/www/firewall_nat_1to1_edit.php:351
+#: src/usr/local/www/firewall_nat_edit.php:543
+#: src/usr/local/www/firewall_nat_edit.php:583
+#: src/usr/local/www/firewall_rules_edit.php:1361
+#: src/usr/local/www/guiconfig.inc:227
+msgid "L2TP clients"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:344
+#: src/usr/local/www/firewall_nat_edit.php:536
+#: src/usr/local/www/firewall_nat_edit.php:576
+#: src/usr/local/www/firewall_rules_edit.php:1346
+msgid "Single host or alias"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:416
+msgid "Edit NAT 1:1 Entry"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:423
+msgid "When disabled, the rule will not have any effect."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:427
+msgid "No BINAT (NOT)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:430
+msgid "Excludes the address from a later, more general, rule."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:442
+#: src/usr/local/www/firewall_nat_edit.php:674
+#: src/usr/local/www/firewall_nat_npt_edit.php:155
+#: src/usr/local/www/firewall_rules.php:142
+#: src/usr/local/www/firewall_rules_edit.php:1071
+msgid "L2TP VPN"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:447
+#: src/usr/local/www/firewall_nat_edit.php:679
+#: src/usr/local/www/firewall_nat_npt_edit.php:161
+#: src/usr/local/www/firewall_rules.php:149
+#: src/usr/local/www/firewall_rules_edit.php:1075
+#: src/usr/local/www/head.inc:305 src/usr/local/www/services_pppoe.php:81
+#: src/usr/local/www/services_pppoe.php:95
+#: src/usr/local/www/services_pppoe_edit.php:280
+msgid "PPPoE Server"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:452
+#: src/usr/local/www/firewall_nat_edit.php:684
+#: src/usr/local/www/firewall_nat_npt_edit.php:167
+#: src/usr/local/www/firewall_rules.php:156
+#: src/usr/local/www/firewall_rules_edit.php:1080
+#: src/usr/local/www/head.inc:320 src/usr/local/www/head.inc:336
+#: src/usr/local/www/status_graph.php:42 src/usr/local/www/status_graph.php:347
+#: src/usr/local/www/status_ipsec.php:459
+#: src/usr/local/www/status_ipsec_leases.php:32
+#: src/usr/local/www/status_ipsec_sad.php:36
+#: src/usr/local/www/status_ipsec_spd.php:39
+#: src/usr/local/www/status_logs.php:47
+#: src/usr/local/www/status_logs_common.inc:92
+#: src/usr/local/www/status_logs_settings.php:220
+#: src/usr/local/www/vpn_ipsec.php:219 src/usr/local/www/vpn_ipsec_keys.php:72
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:122
+#: src/usr/local/www/vpn_ipsec_mobile.php:305
+#: src/usr/local/www/vpn_ipsec_phase1.php:627
+#: src/usr/local/www/vpn_ipsec_phase1.php:630
+#: src/usr/local/www/vpn_ipsec_phase2.php:403
+#: src/usr/local/www/vpn_ipsec_phase2.php:407
+#: src/usr/local/www/vpn_ipsec_settings.php:186
+#: src/usr/local/www/widgets/include/ipsec.inc:22
+msgid "IPsec"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:465
+#: src/usr/local/www/firewall_nat_edit.php:697
+msgid ""
+"Choose which interface this rule applies to. In most cases \"WAN\" is "
+"specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:469
+msgid "*External subnet IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:471
+msgid ""
+"Enter the external (usually on a WAN) subnet's starting address for the 1:1 "
+"mapping. The subnet mask from the internal address below will be applied to "
+"this IP address."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:474
+msgid "*Internal IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:481
+#: src/usr/local/www/firewall_nat_1to1_edit.php:508
+msgid "Invert the sense of the match."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:494
+#: src/usr/local/www/firewall_nat_1to1_edit.php:522
+#: src/usr/local/www/firewall_nat_edit.php:744
+#: src/usr/local/www/firewall_nat_edit.php:812
+msgid "Address/mask"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:496
+msgid ""
+"Enter the internal (LAN) subnet for the 1:1 mapping. The subnet size "
+"specified for the internal subnet will be applied to the external subnet."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:501
+#: src/usr/local/www/firewall_nat_edit.php:791
+#: src/usr/local/www/firewall_nat_out_edit.php:542
+msgid "*Destination"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:524
+msgid ""
+"The 1:1 mapping will only be used for connections to or from the specified "
+"destination. Hint: this is usually \"Any\"."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:540
+#: src/usr/local/www/firewall_nat_edit.php:903
+msgid "Use system default"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:542
+#: src/usr/local/www/firewall_nat_edit.php:906
+#: src/usr/local/www/firewall_rules.php:786
+#: src/usr/local/www/services_dyndns_edit.php:258
+#: src/usr/local/www/vpn_ipsec_phase1.php:857
+#: src/usr/local/www/vpn_openvpn_csc.php:335
+msgid "Disable"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:537
+#: src/usr/local/www/firewall_nat_edit.php:900
+msgid "NAT reflection"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:126
+#, php-format
+msgid ""
+"Invalid characters detected %s. Please remove invalid characters and save "
+"again."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:212
+msgid "Destination port from"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:212
+msgid "Destination port to"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:230
+msgid "Redirect target IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:256
+#, php-format
+msgid "\"%s\" is not a valid redirect target IP address or host alias."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:260
+#, php-format
+msgid "Redirect target IP must be IPv4."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:264
+#: src/usr/local/www/firewall_rules_edit.php:476
+#, php-format
+msgid ""
+"%s is not a valid start source port. It must be a port alias or integer "
+"between 1 and 65535."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:267
+#: src/usr/local/www/firewall_rules_edit.php:479
+#, php-format
+msgid ""
+"%s is not a valid end source port. It must be a port alias or integer "
+"between 1 and 65535."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:270
+#: src/usr/local/www/firewall_rules_edit.php:482
+#, php-format
+msgid ""
+"%s is not a valid start destination port. It must be a port alias or integer "
+"between 1 and 65535."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:273
+#: src/usr/local/www/firewall_rules_edit.php:485
+#, php-format
+msgid ""
+"%s is not a valid end destination port. It must be a port alias or integer "
+"between 1 and 65535."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:277
+#, php-format
+msgid ""
+"%s is not a valid redirect target port. It must be a port alias or integer "
+"between 1 and 65535."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:288
+#: src/usr/local/www/firewall_rules_edit.php:537
+#, php-format
+msgid "%s is not a valid source IP address or alias."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:291
+#, php-format
+msgid "Source must be IPv4."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:294
+#: src/usr/local/www/firewall_nat_out_edit.php:215
+#: src/usr/local/www/firewall_rules_edit.php:540
+msgid "A valid source bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:300
+#: src/usr/local/www/firewall_rules_edit.php:545
+#, php-format
+msgid "%s is not a valid destination IP address or alias."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:303
+#, php-format
+msgid "Destination must be IPv4."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:326
+msgid "The target port range must be an integer between 1 and 65535."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:352
+msgid "The destination port range overlaps with an existing entry."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:481
+msgid "NAT Port Forward"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:576
+#: src/usr/local/www/firewall_nat_out_edit.php:523
+#: src/usr/local/www/firewall_rules_edit.php:1355
+msgid "This Firewall (self)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:648
+msgid "Edit Redirect Entry"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:659
+msgid "No RDR (NOT)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:662
+msgid ""
+"This option is rarely needed. Don't use this without thorough knowledge of "
+"the implications."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:706
+msgid ""
+"Choose which protocol this rule should match. In most cases \"TCP\" is "
+"specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:710
+#: src/usr/local/www/firewall_nat_edit.php:1169
+#: src/usr/local/www/firewall_rules_edit.php:1464
+#: src/usr/local/www/firewall_rules_edit.php:1790
+#: src/usr/local/www/firewall_rules_edit.php:1862
+#: src/usr/local/www/interfaces_bridge_edit.php:417
+#: src/usr/local/www/interfaces_bridge_edit.php:662
+#: src/usr/local/www/interfaces_ppps_edit.php:825
+#: src/usr/local/www/interfaces_ppps_edit.php:1052
+#: src/usr/local/www/services_dhcp.php:1037
+#: src/usr/local/www/services_dhcp.php:1095
+#: src/usr/local/www/services_dhcp.php:1124
+#: src/usr/local/www/services_dhcp.php:1153
+#: src/usr/local/www/services_dhcp.php:1175
+#: src/usr/local/www/services_dhcp.php:1197
+#: src/usr/local/www/services_dhcp.php:1255
+#: src/usr/local/www/services_dhcp.php:1505
+#: src/usr/local/www/services_dhcp.php:1540
+#: src/usr/local/www/services_dhcp.php:1575
+#: src/usr/local/www/services_dhcp.php:1609
+#: src/usr/local/www/services_dhcp.php:1643
+#: src/usr/local/www/services_dhcp.php:1678
+#: src/usr/local/www/services_dhcp.php:1717
+#: src/usr/local/www/services_dhcp_edit.php:580
+#: src/usr/local/www/services_dhcp_edit.php:636
+#: src/usr/local/www/services_dhcp_edit.php:672
+#: src/usr/local/www/services_dhcp_edit.php:730
+#: src/usr/local/www/services_dhcp_edit.php:765
+#: src/usr/local/www/services_dhcp_edit.php:799
+#: src/usr/local/www/services_dhcpv6.php:743
+#: src/usr/local/www/services_dhcpv6.php:819
+#: src/usr/local/www/services_dhcpv6.php:855
+#: src/usr/local/www/services_dhcpv6.php:876
+#: src/usr/local/www/services_dhcpv6.php:904
+#: src/usr/local/www/services_dhcpv6.php:1100
+#: src/usr/local/www/services_dhcpv6.php:1135
+#: src/usr/local/www/services_dhcpv6.php:1169
+#: src/usr/local/www/services_dhcpv6.php:1204
+#: src/usr/local/www/services_dhcpv6.php:1240
+#: src/usr/local/www/services_ntpd.php:325
+#: src/usr/local/www/services_ntpd.php:361
+#: src/usr/local/www/services_ntpd.php:430
+#: src/usr/local/www/services_ntpd.php:467
+#: src/usr/local/www/services_ntpd_gps.php:481
+#: src/usr/local/www/services_ntpd_gps.php:683
+#: src/usr/local/www/system_gateways_edit.php:692
+#: src/usr/local/www/system_gateways_edit.php:895
+msgid "Display Advanced"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:727
+msgid "Source not"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:748
+#: src/usr/local/www/firewall_virtual_ip.php:233
+#: src/usr/local/www/firewall_virtual_ip_edit.php:353
+msgid "Other"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:754
+msgid "Source port range"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:762
+#: src/usr/local/www/firewall_nat_edit.php:824
+msgid "From port"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:769
+#: src/usr/local/www/firewall_nat_edit.php:783
+#: src/usr/local/www/firewall_nat_edit.php:831
+#: src/usr/local/www/firewall_nat_edit.php:845
+#: src/usr/local/www/firewall_nat_edit.php:878
+#: src/usr/local/www/firewall_rules_edit.php:1422
+#: src/usr/local/www/firewall_rules_edit.php:1436
+#: src/usr/local/www/interfaces.php:2639
+#: src/usr/local/www/interfaces_ppps_edit.php:752
+#: src/usr/local/www/services_ntpd_gps.php:339
+msgid "Custom"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:776
+#: src/usr/local/www/firewall_nat_edit.php:838
+msgid "To port"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:785
+msgid ""
+"Specify the source port or port range for this rule. This is usually random "
+"and almost never equal to the destination port range (and should usually be "
+"'any'). The 'to' field may be left empty if only filtering a single port."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:795
+msgid "Destination not"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:816
+msgid "*Destination port range"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:847
+msgid ""
+"Specify the port or port range for the destination of the packet for this "
+"mapping. The 'to' field may be left empty if only mapping a single port. "
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:854
+msgid "*Redirect target IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:857
+#, php-format
+msgid ""
+"Enter the internal IP address of the server on which to map the ports.%s e.g."
+": 192.168.1.12"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:859
+msgid "*Redirect target port"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:869
+#, php-format
+msgid ""
+"Specify the port on the machine with the IP address entered above. In case "
+"of a port range, specify the beginning port of the range (the end port will "
+"be calculated automatically).%sThis is usually identical to the \"From "
+"port\" above."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:892
+#: src/usr/local/www/firewall_nat_out_edit.php:653
+#: src/usr/local/www/firewall_rules_edit.php:1603
+msgid "No XMLRPC Sync"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:895
+msgid ""
+"This prevents the rule on Master from automatically syncing to other CARP "
+"members. This does NOT prevent the rule from being overwritten on Slave."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:904
+msgid "Enable (NAT + Proxy)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:905
+msgid "Enable (Pure NAT)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:920
+#, php-format
+msgid "Rule %s"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:923
+msgid "View the filter rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:930
+msgid "Create new associated filter rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:935
+#: src/usr/local/www/firewall_nat_edit.php:942
+msgid "Filter rule association"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:946
+msgid "Add associated filter rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:947
+msgid "Add unassociated filter rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:950
+msgid ""
+"The \"pass\" selection does not work properly with Multi-WAN. It will only "
+"work on an interface containing the default gateway."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:959
+#: src/usr/local/www/firewall_nat_out_edit.php:689
+#: src/usr/local/www/firewall_rules_edit.php:1734
+msgid "Rule Information"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:965
+#: src/usr/local/www/firewall_nat_edit.php:975
+#: src/usr/local/www/firewall_nat_out_edit.php:695
+#: src/usr/local/www/firewall_nat_out_edit.php:705
+#: src/usr/local/www/firewall_rules_edit.php:1740
+#: src/usr/local/www/firewall_rules_edit.php:1750
+#, php-format
+msgid "%1$s by %2$s"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:963
+#: src/usr/local/www/firewall_nat_out_edit.php:693
+#: src/usr/local/www/firewall_rules_edit.php:1738
+msgid "Created"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:973
+#: src/usr/local/www/firewall_nat_out_edit.php:703
+#: src/usr/local/www/firewall_rules_edit.php:1748
+msgid "Updated"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:1171
+#: src/usr/local/www/firewall_rules_edit.php:1788
+#: src/usr/local/www/firewall_rules_edit.php:1860
+#: src/usr/local/www/interfaces_bridge_edit.php:660
+#: src/usr/local/www/interfaces_ppps_edit.php:1050
+#: src/usr/local/www/services_dhcp.php:1503
+#: src/usr/local/www/services_dhcp.php:1538
+#: src/usr/local/www/services_dhcp.php:1573
+#: src/usr/local/www/services_dhcp.php:1607
+#: src/usr/local/www/services_dhcp.php:1641
+#: src/usr/local/www/services_dhcp.php:1676
+#: src/usr/local/www/services_dhcp.php:1715
+#: src/usr/local/www/services_dhcp_edit.php:728
+#: src/usr/local/www/services_dhcp_edit.php:763
+#: src/usr/local/www/services_dhcp_edit.php:797
+#: src/usr/local/www/services_dhcpv6.php:1098
+#: src/usr/local/www/services_dhcpv6.php:1133
+#: src/usr/local/www/services_dhcpv6.php:1167
+#: src/usr/local/www/services_dhcpv6.php:1202
+#: src/usr/local/www/services_dhcpv6.php:1238
+#: src/usr/local/www/services_ntpd.php:428
+#: src/usr/local/www/services_ntpd.php:465
+#: src/usr/local/www/services_ntpd_gps.php:681
+#: src/usr/local/www/system_gateways_edit.php:893
+msgid "Hide Advanced"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt.php:113
+msgid "Firewall: NAT: NPt, enable/disable NAT rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt.php:143
+msgid "NPt Mappings"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt.php:151
+msgid "External Prefix"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt.php:152
+msgid "Internal prefix"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt.php:270
+msgid "One or more NPt mappings have been moved but have not yet been saved"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:101
+msgid "Source prefix"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:103
+msgid "Destination prefix"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:188
+msgid "Edit NAT NPt Entry"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:202
+#, php-format
+msgid ""
+"Choose which interface this rule applies to.%sHint: Typically the \"WAN\" is "
+"used here."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:207
+msgid "Internal IPv6 prefix"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:210
+#: src/usr/local/www/firewall_nat_npt_edit.php:225
+msgid "Use this option to invert the sense of the match. "
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:214
+#: src/usr/local/www/firewall_nat_npt_edit.php:229
+#: src/usr/local/www/firewall_nat_out_edit.php:581
+msgid "*Address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:217
+msgid ""
+"Internal (LAN) ULA IPv6 Prefix for the Network Prefix translation. The "
+"prefix size specified for the internal IPv6 prefix will be applied to the "
+"external prefix."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:222
+msgid "Destination IPv6 prefix"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_npt_edit.php:232
+msgid "Global Unicast routable IPv6 prefix"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:113
+#, php-format
+msgid " - %1$s to %2$s"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:116
+msgid "Manual Outbound NAT Switch"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:136
+msgid "Default rules for each interface have been created."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:226
+msgid "Outbound NAT Mode"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:236
+#, php-format
+msgid "Automatic outbound NAT rule generation.%s(IPsec passthrough included)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:244
+#, php-format
+msgid ""
+"Hybrid Outbound NAT rule generation.%s(Automatic Outbound NAT + rules below)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:252
+#, php-format
+msgid "Manual Outbound NAT rule generation.%s(AON - Advanced Outbound NAT)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:260
+#, php-format
+msgid "Disable Outbound NAT rule generation.%s(No Outbound NAT rules)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:270
+msgid "Mappings"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:282
+#: src/usr/local/www/firewall_nat_out.php:535
+msgid "NAT Address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:283
+#: src/usr/local/www/firewall_nat_out.php:536
+msgid "NAT Port"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:284
+#: src/usr/local/www/firewall_nat_out.php:537
+#: src/usr/local/www/firewall_nat_out_edit.php:642
+msgid "Static Port"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:322
+msgid "This rule is being ignored"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:327
+msgid "Click to toggle enabled/disabled status"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:334
+msgid "Negated: Traffic matching this rule is not translated."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:492
+msgid "Add new mapping to the top of the list"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:496
+msgid "Add new mapping to the end of the list"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:500
+msgid "Delete selected map"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:500
+msgid "Delete selected maps"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:524
+msgid "Automatic Rules:"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:548
+msgid "automatic outbound nat"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:636
+msgid ""
+"If automatic outbound NAT is selected, a mapping is automatically generated "
+"for each interface's subnet (except WAN-type connections) and the rules on "
+"the \"Mappings\" section of this page are ignored."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:638
+msgid ""
+"If manual outbound NAT is selected, outbound NAT rules will not be "
+"automatically generated and only the mappings specified on this page will be "
+"used."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:640
+msgid ""
+"If hybrid outbound NAT is selected, mappings specified on this page will be "
+"used, followed by the automatically generated ones."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:642
+msgid "If disable outbound NAT is selected, no rules will be used."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:645
+#, php-format
+msgid ""
+"If a target address other than an interface's IP address is used, then "
+"depending on the way the WAN connection is setup, a %1$sVirtual IP%2$s may "
+"also be required."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out.php:681
+msgid ""
+"One or more NAT outbound mappings have been moved but have not yet been "
+"saved"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:166
+#: src/usr/local/www/firewall_rules_edit.php:456
+msgid "Source bit count"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:166
+#: src/usr/local/www/firewall_rules_edit.php:461
+msgid "Destination bit count"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:197
+msgid "A valid port or port alias must be supplied for the source port entry."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:201
+msgid ""
+"A valid port or port alias must be supplied for the destination port entry."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:205
+msgid "A valid port must be supplied for the NAT port entry."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:210
+msgid "A valid source must be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:220
+msgid "A valid destination must be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:230
+msgid "Negating destination address of \"any\" is invalid."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:235
+msgid "A valid target IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:240
+msgid ""
+"A valid target IP must be specified when using the 'Other Subnet' type."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:244
+msgid ""
+"A valid target bit count must be specified when using the 'Other Subnet' "
+"type."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:258
+msgid "Only Round Robin pool options may be chosen when selecting an alias."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:267
+msgid ""
+"Incorrect format for source-hash key, \"0x\" must be followed by exactly 32 "
+"hexadecimal characters."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:415
+#: src/usr/local/www/system_gateway_groups_edit.php:163
+msgid "Interface Address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:420
+msgid "Subnet: "
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:443
+msgid "Host Alias: "
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:446
+msgid "Other Subnet (Enter Below)"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:457
+msgid "Edit Advanced Outbound NAT Entry"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:468
+msgid "Do not NAT"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:471
+msgid "In most cases this option is not required."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:506
+msgid ""
+"The interface on which traffic is matched as it exits the firewall. In most "
+"cases this is \"WAN\" or another externally-connected interface."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:515
+msgid ""
+"Choose which protocol this rule should match. In most cases \"any\" is "
+"specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:517
+msgid "*Source"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:531
+msgid "Source network for the outbound NAT mapping."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:538
+#: src/usr/local/www/firewall_nat_out_edit.php:563
+#: src/usr/local/www/firewall_nat_out_edit.php:626
+msgid "Port or Range"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:556
+msgid "Destination network for the outbound NAT mapping."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:572
+msgid "Invert the sense of the destination match."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:576
+msgid "Translation"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:584
+#, php-format
+msgid ""
+"Connections matching this rule will be mapped to the specified "
+"%1$sAddress%2$s.%3$sThe %1$sAddress%2$s can be an Interface, a Host-type "
+"Alias, or a %4$sVirtual IP%5$s address."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:590
+msgid "Other subnet"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:593
+#, php-format
+msgid ""
+"This subnet must be routed to the firewall or each address in the subnet "
+"must be defined in one or more %1$sVirtual IP%2$s addresses."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:601
+#: src/usr/local/www/interfaces.php:1878 src/usr/local/www/interfaces.php:2870
+#: src/usr/local/www/interfaces.php:2879 src/usr/local/www/interfaces.php:2888
+#: src/usr/local/www/interfaces.php:2946 src/usr/local/www/interfaces.php:3201
+#: src/usr/local/www/services_ntpd_gps.php:339
+msgid "Default"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:602
+msgid "Round Robin"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:603
+msgid "Round Robin with Sticky Address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:604
+msgid "Random"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:605
+msgid "Random with Sticky Address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:606
+msgid "Source hash"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:607
+msgid "Bit mask"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:598
+msgid "Pool options"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:610
+msgid ""
+"Only Round Robin types work with Host Aliases. Any type can be used with a "
+"Subnet."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:612
+msgid "Round Robin: Loops through the translation addresses."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:613
+msgid ""
+"Random: Selects an address from the translation address pool at random."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:614
+msgid ""
+"Source Hash: Uses a hash of the source address to determine the translation "
+"address, ensuring that the redirection address is always the same for a "
+"given source."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:615
+msgid ""
+"Bitmask: Applies the subnet mask and keeps the last portion identical; 10.0."
+"1.50 -&gt; x.x.x.50."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:616
+msgid ""
+"Sticky Address: The Sticky Address option can be used with the Random and "
+"Round Robin pool types to ensure that a particular source address is always "
+"mapped to the same translation address."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:609
+#: src/usr/local/www/firewall_rules_edit.php:1306
+#: src/usr/local/www/firewall_virtual_ip_edit.php:381
+#: src/usr/local/www/status_pkglogs.php:92
+#: src/usr/local/www/status_pkglogs.php:94
+#, php-format
+msgid "%s"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:621
+msgid "Source Hash Key"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:624
+msgid ""
+"The key that is fed to the hashing algorithm in hex format, preceeded by "
+"\"0x\", or any string. A non-hex string is hashed using md5 to a hexadecimal "
+"key. Defaults to a randomly generated value."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:634
+#, php-format
+msgid ""
+"Enter the external source %1$sPort or Range%2$s used for remapping the "
+"original source port on connections matching the rule. %3$sPort ranges are a "
+"low port and high port number separated by \":\".%4$sLeave blank when "
+"%1$sStatic Port%2$s is checked."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:649
+msgid "Misc"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:657
+msgid ""
+"Prevents the rule on Master from automatically syncing to other CARP members."
+" This does NOT prevent the rule from being overwritten on Slave."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:39
+msgid ""
+"Move checked rules above this one. Shift+Click to move checked rules below."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:40
+msgid ""
+"Move checked rules below this one. Release shift to move checked rules above."
+""
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:87
+msgid "States details"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:307
+#: src/usr/local/www/firewall_rules_edit.php:1096
+#: src/usr/local/www/firewall_rules_edit.php:1259
+msgid "Floating"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:336
+msgid "The firewall rule configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:377
+msgid "Rules (Drag to Change Order)"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:390
+#: src/usr/local/www/firewall_rules_edit.php:1664
+#: src/usr/local/www/interfaces.php:560 src/usr/local/www/interfaces.php:611
+#: src/usr/local/www/services_dhcp.php:967
+#: src/usr/local/www/services_dhcp_edit.php:545
+#: src/usr/local/www/status_gateways.php:61 src/usr/local/www/system.php:458
+#: src/usr/local/www/system.php:496
+#: src/usr/local/www/system_gateway_groups_edit.php:306
+#: src/usr/local/www/system_gateways.php:259
+#: src/usr/local/www/system_gateways_edit.php:624
+#: src/usr/local/www/system_routes.php:244
+#: src/usr/local/www/system_routes_edit.php:82
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:137
+msgid "Gateway"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:391
+#: src/usr/local/www/status_queues.php:159
+msgid "Queue"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:392
+#: src/usr/local/www/firewall_rules_edit.php:1633
+msgid "Schedule"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:408
+#: src/usr/local/www/firewall_rules.php:499
+msgid "traffic is passed"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:418
+msgid "Anti-Lockout Rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:420
+#: src/usr/local/www/firewall_rules.php:439
+#: src/usr/local/www/firewall_rules.php:458 src/usr/local/www/head.inc:577
+#: src/usr/local/www/load_balancer_monitor.php:95
+#: src/usr/local/www/load_balancer_pool.php:109
+#: src/usr/local/www/load_balancer_setting.php:85
+#: src/usr/local/www/load_balancer_setting.php:108
+#: src/usr/local/www/load_balancer_virtual_server.php:129
+#: src/usr/local/www/services_ntpd.php:188
+#: src/usr/local/www/services_ntpd.php:202
+#: src/usr/local/www/services_ntpd_acls.php:175
+#: src/usr/local/www/services_ntpd_gps.php:320
+#: src/usr/local/www/services_ntpd_pps.php:116
+#: src/usr/local/www/services_router_advertisements.php:465
+#: src/usr/local/www/status_logs_common.inc:98
+#: src/usr/local/www/status_logs_settings.php:187
+#: src/usr/local/www/status_logs_settings.php:226
+#: src/usr/local/www/system_authservers.php:429
+#: src/usr/local/www/system_groupmanager.php:297
+#: src/usr/local/www/system_groupmanager_addprivs.php:139
+#: src/usr/local/www/system_usermanager.php:566
+#: src/usr/local/www/system_usermanager_addprivs.php:131
+#: src/usr/local/www/system_usermanager_settings.php:109
+#: src/usr/local/www/system_usermanager_settings.php:184
+#: src/usr/local/www/system_usermanager_settings.php:195
+msgid "Settings"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:427
+#: src/usr/local/www/firewall_rules.php:446
+#: src/usr/local/www/firewall_rules.php:490
+msgid "traffic is blocked"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:430
+msgid "RFC 1918 networks"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:437
+msgid "Block private networks"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:449
+#, php-format
+msgid "Reserved%sNot assigned by IANA"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:456
+#: src/usr/local/www/interfaces.php:3162
+msgid "Block bogon networks"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:493
+msgid "traffic is rejected"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:496
+msgid "traffic is matched"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:508
+#: src/usr/local/www/firewall_rules.php:856
+msgid "&quot;Quick&quot; rule. Applied immediately on match."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:513
+msgid "advanced setting"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:517
+msgid "traffic is logged"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:536
+#: src/usr/local/www/firewall_schedule.php:35
+#: src/usr/local/www/firewall_schedule_edit.php:57
+#: src/usr/local/www/firewall_schedule_edit.php:256
+msgid "Mon"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:536
+#: src/usr/local/www/firewall_schedule.php:35
+#: src/usr/local/www/firewall_schedule_edit.php:57
+msgid "Tues"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:536
+#: src/usr/local/www/firewall_schedule.php:35
+#: src/usr/local/www/firewall_schedule_edit.php:57
+#: src/usr/local/www/firewall_schedule_edit.php:258
+msgid "Wed"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:536
+#: src/usr/local/www/firewall_schedule.php:35
+#: src/usr/local/www/firewall_schedule_edit.php:57
+msgid "Thur"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:536
+#: src/usr/local/www/firewall_schedule.php:35
+#: src/usr/local/www/firewall_schedule_edit.php:57
+#: src/usr/local/www/firewall_schedule_edit.php:260
+msgid "Fri"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:536
+#: src/usr/local/www/firewall_schedule.php:35
+#: src/usr/local/www/firewall_schedule_edit.php:57
+#: src/usr/local/www/firewall_schedule_edit.php:261
+msgid "Sat"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:536
+#: src/usr/local/www/firewall_schedule.php:35
+#: src/usr/local/www/firewall_schedule_edit.php:57
+#: src/usr/local/www/firewall_schedule_edit.php:262
+msgid "Sun"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "January"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "February"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "March"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "April"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "May"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "June"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "July"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "August"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "September"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "October"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "November"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:537
+#: src/usr/local/www/firewall_schedule.php:36
+#: src/usr/local/www/firewall_schedule_edit.php:58
+msgid "December"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:650
+msgid "Traffic matching this rule is currently being denied"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:654
+msgid "Traffic matching this rule is currently being allowed"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:663
+msgid "This rule is not currently active because its period has expired"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:702
+#: src/usr/local/www/firewall_rules_edit.php:1302
+msgid "ICMP subtypes"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:780
+msgid "Copy"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:789
+msgid "Delete this rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:811
+msgid "No floating rules are currently defined."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:813
+msgid "No rules are currently defined for this interface"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:814
+msgid ""
+"All incoming connections on this interface will be blocked until pass rules "
+"are added."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:816
+msgid "Click the button to add a new rule."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:851
+#: src/usr/local/www/firewall_rules_edit.php:1160
+msgid "Match"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:852
+#: src/usr/local/www/firewall_rules_edit.php:1155
+#: src/usr/local/www/services_captiveportal_mac.php:64
+#: src/usr/local/www/services_captiveportal_mac_edit.php:205
+#: src/usr/local/www/status_logs_common.inc:459
+#: src/usr/local/www/widgets/widgets/log.widget.php:228
+#: src/usr/local/www/status_logs_common.inc:460
+msgid "Block"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:853
+#: src/usr/local/www/firewall_rules_edit.php:1156
+#: src/usr/local/www/widgets/widgets/log.widget.php:232
+msgid "Reject"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:854
+#: src/usr/local/www/firewall_rules_edit.php:1448
+msgid "Log"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:855
+msgid "Advanced filter"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:861
+msgid ""
+"Rules are evaluated on a first-match basis (i.e. the action of the first "
+"rule to match a packet will be executed). "
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:863
+msgid ""
+"This means that if block rules are used, it is important to pay attention to "
+"the rule order. Everything that isn't explicitly passed is blocked by "
+"default. "
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:867
+msgid ""
+"Floating rules are evaluated on a first-match basis (i.e. the action of the "
+"first rule to match a packet will be executed) only if the 'quick' option is "
+"checked on a rule. Otherwise they will only match if no other rules match. "
+"Pay close attention to the rule order and options chosen. If no rule here "
+"matches, the per-interface or default rules are used. "
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:874
+#, php-format
+msgid ""
+"%1$sClick the anchor icon %2$s to move checked rules before the clicked row. "
+"Hold down the shift key and click to move the rules after the clicked row."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules.php:992
+msgid "One or more rules have been moved but have not yet been saved"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:39
+#: src/usr/local/www/firewall_rules_edit.php:40
+#: src/usr/local/www/firewall_rules_edit.php:41
+#: src/usr/local/www/firewall_rules_edit.php:1251
+#: src/usr/local/www/firewall_rules_edit.php:1304
+#: src/usr/local/www/firewall_rules_edit.php:1345
+#: src/usr/local/www/firewall_rules_edit.php:1401
+msgid "any"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:54
+msgid ""
+"For ICMP rules on IPv4, one or more of these ICMP subtypes may be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:55
+msgid ""
+"For ICMP rules on IPv6, one or more of these ICMP subtypes may be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:56
+#, php-format
+msgid ""
+"For ICMP rules on IPv4+IPv6, one or more of these ICMP subtypes may be "
+"specified. (Other ICMP subtypes are only valid under IPv4 %1$sor%2$s IPv6, "
+"not both)"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:321
+msgid "The IP protocol is not recognized."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:336
+#: src/usr/local/www/firewall_rules_edit.php:348
+msgid ""
+"Gateways can not be assigned in a rule that applies to both IPv4 and IPv6."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:338
+msgid "An IPv4 gateway group can not be assigned in IPv6 rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:340
+msgid "An IPv6 gateway group can not be assigned in IPv4 rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:351
+msgid "An IPv4 gateway can not be assigned in IPv6 rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:354
+msgid "An IPv6 gateway can not be assigned in IPv4 rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:446
+#, php-format
+msgid "%s is only valid with protocol TCP."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:449
+#, php-format
+msgid "%s is only valid if the gateway is set to 'default'."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:526
+#: src/usr/local/www/firewall_rules_edit.php:531
+msgid "Alias entries must be a single host or alias."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:553
+msgid ""
+"The source and destination IP addresses must have the same family (IPv4 / "
+"IPv6)."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:557
+msgid "IPv6 addresses cannot be used in IPv4 rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:560
+msgid "IPv4 addresses can not be used in IPv6 rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:564
+msgid ""
+"IPv4 and IPv6 addresses can not be used in rules that apply to both IPv4 and "
+"IPv6."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:581
+msgid "OS detection is only valid with protocol TCP."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:584
+msgid "Invalid OS detection selection. Please select a valid OS."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:592
+msgid "ICMP types expected to be a list if present, but is not."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:611
+#, php-format
+msgid "Invalid ICMP subtype: %s can not be used with %s."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:620
+msgid "A queue must be selected when an acknowledge queue is also selected."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:622
+msgid "Acknowledge queue and Queue cannot be the same."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:626
+msgid ""
+"Limiters can not be used in Floating rules without choosing a direction."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:629
+msgid ""
+"Gateways can not be used in Floating rules without choosing a direction."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:633
+msgid ""
+"A queue must be selected for the In direction before selecting one for Out "
+"too."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:635
+msgid "In and Out Queue cannot be the same."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:637
+#: src/usr/local/www/firewall_rules_edit.php:639
+msgid ""
+"A queue and a virtual interface cannot be selected for IN and Out. Both must "
+"be from the same type."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:642
+msgid ""
+"Please select a gateway, normally the interface selected gateway, so the "
+"limiters work correctly"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:646
+msgid "ID must be an integer"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:651
+msgid ""
+"The maximum number of established connections per host (advanced option) can "
+"only be specified for TCP protocol."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:654
+msgid ""
+"The maximum new connections per host / per second(s) (advanced option) can "
+"only be specified for TCP protocol."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:657
+msgid ""
+"The state timeout (advanced option) can only be specified for TCP protocol."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:663
+msgid ""
+"The maximum state entries (advanced option) can only be specified for Pass "
+"type rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:666
+msgid ""
+"The maximum number of unique source hosts (advanced option) can only be "
+"specified for Pass type rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:669
+msgid ""
+"The maximum number of established connections per host (advanced option) can "
+"only be specified for Pass type rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:672
+msgid ""
+"The maximum state entries per host (advanced option) can only be specified "
+"for Pass type rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:675
+msgid ""
+"The maximum new connections per host / per second(s) (advanced option) can "
+"only be specified for Pass type rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:678
+msgid ""
+"The state timeout (advanced option) can only be specified for Pass type "
+"rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:684
+msgid ""
+"The maximum state entries (advanced option) cannot be specified if statetype "
+"is none."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:687
+msgid ""
+"The maximum number of unique source hosts (advanced option) cannot be "
+"specified if statetype is none."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:690
+msgid ""
+"The maximum number of established connections per host (advanced option) "
+"cannot be specified if statetype is none."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:693
+msgid ""
+"The maximum state entries per host (advanced option) cannot be specified if "
+"statetype is none."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:696
+msgid ""
+"The maximum new connections per host / per second(s) (advanced option) "
+"cannot be specified if statetype is none."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:699
+msgid ""
+"The state timeout (advanced option) cannot be specified if statetype is none."
+""
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:704
+msgid "Maximum state entries (advanced option) must be a positive integer"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:708
+msgid ""
+"Maximum number of unique source hosts (advanced option) must be a positive "
+"integer"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:712
+msgid ""
+"Maximum number of established connections per host (advanced option) must be "
+"a positive integer"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:716
+msgid ""
+"Maximum state entries per host (advanced option) must be a positive integer"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:720
+msgid ""
+"Maximum new connections per host / per second(s) (advanced option) must be a "
+"positive integer"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:724
+msgid "State timeout (advanced option) must be a positive integer"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:729
+msgid ""
+"Both maximum new connections per host and the interval (per second(s)) must "
+"be specified"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:744
+msgid ""
+"If TCP flags that should be set is specified, then out of which flags should "
+"be specified as well."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1017
+msgid "set"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1018
+msgid "out of"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1045
+msgid " Any flags."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1116
+msgid "Edit Firewall Rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1121
+#: src/usr/local/www/status_ipsec_leases.php:55
+msgid "ID"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1130
+msgid "Tracker"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1138
+msgid "After"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1145
+msgid "Ruleid"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1165
+#: src/usr/local/www/services_captiveportal_mac_edit.php:203
+#: src/usr/local/www/services_unbound_acls.php:232
+msgid "*Action"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1168
+#, php-format
+msgid ""
+"Choose what to do with packets that match the criteria specified below."
+"%sHint: the difference between block and reject is that with reject, a "
+"packet (TCP RST or ICMP port unreachable for UDP) is returned to the sender, "
+"whereas with block the packet is dropped silently. In either case, the "
+"original packet is discarded."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1179
+msgid ""
+"Set this option to disable this rule without removing it from the list."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1185
+msgid "Quick"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1188
+msgid ""
+"Set this option to apply this action to traffic that matches this rule "
+"immediately."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1198
+msgid "View the NAT rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1203
+msgid "Associated filter rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1235
+msgid "Choose the interface(s) for this rule."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1242
+msgid "Choose the interface from which packets must come to match this rule."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1252
+msgid "in"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1253
+msgid "out"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1248
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:177
+#: src/usr/local/www/services_captiveportal_ip_edit.php:237
+msgid "*Direction"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1274
+msgid "Select the Internet Protocol version this rule applies to."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1297
+msgid "Choose which IP protocol this rule should match."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1299
+msgid "ICMP Subtypes"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1318
+msgid "*"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1321
+msgid " not"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1351
+msgid "This firewall (self)"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1375
+msgid " Type"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1382
+msgid " Address"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1396
+#, php-format
+msgid ""
+"The %1$sSource Port Range%2$s for a connection is typically random and "
+"almost never equal to the destination port. In most cases this setting must "
+"remain at its default value, %1$sany%2$s."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1401
+msgid "(other)"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1406
+msgid "Source Port Range"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1406
+msgid "Destination Port Range"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1406
+msgid "src"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1412
+msgid " port begin"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1415
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:155
+#: src/usr/local/www/services_captiveportal_ip_edit.php:202
+#: src/usr/local/www/services_dhcp.php:897
+#: src/usr/local/www/services_dhcpv6.php:627
+#: src/usr/local/www/services_dhcpv6.php:652
+#: src/usr/local/www/system_gateways_edit.php:727
+#: src/usr/local/www/system_gateways_edit.php:747
+msgid "From"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1426
+msgid " port end"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1429
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:155
+#: src/usr/local/www/services_captiveportal_ip_edit.php:202
+#: src/usr/local/www/services_dhcp.php:904
+#: src/usr/local/www/services_dhcpv6.php:636
+#: src/usr/local/www/services_dhcpv6.php:661
+#: src/usr/local/www/system_gateways_edit.php:734
+#: src/usr/local/www/system_gateways_edit.php:754
+msgid "To"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1438
+#, php-format
+msgid ""
+"Specify the %s port or port range for this rule. The \"To\" field may be "
+"left empty if only filtering a single port."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1445
+msgid "Extra Options"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1451
+#, php-format
+msgid ""
+"Hint: the firewall has limited local log space. Don't turn on logging for "
+"everything. If doing a lot of logging, consider using a remote syslog server "
+"(see the %1$sStatus: System Logs: Settings%2$s page)."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1460
+#: src/usr/local/www/services_unbound_acls.php:242
+msgid "A description may be entered here for administrative reference."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1483
+msgid "Source OS"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1486
+msgid ""
+"Note: this only works for TCP rules. General OS choice matches all subtypes."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1490
+msgid "Diffserv Code Point"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1497
+msgid "Allow IP options"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1505
+#: src/usr/local/www/system_advanced_firewall.php:518
+msgid "Disable reply-to"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1512
+#: src/usr/local/www/interfaces_qinq.php:110
+msgid "Tag"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1515
+#, php-format
+msgid ""
+"A packet matching this rule can be marked and this mark used to match on "
+"other NAT/filter rules. It is called %1$sPolicy filtering%2$s."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1520
+msgid "Tagged"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1523
+msgid "A packet can be matched on a mark placed before on another rule."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1527
+msgid "Max. states"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1530
+msgid "Maximum state entries this rule can create."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1534
+msgid "Max. src nodes"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1537
+msgid "Maximum number of unique source hosts."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1541
+msgid "Max. connections"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1544
+msgid "Maximum number of established connections per host (TCP only)."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1548
+msgid "Max. src. states"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1551
+msgid "Maximum state entries per host."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1555
+msgid "Max. src. conn. Rate"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1558
+msgid "Maximum new connections per host (TCP only)."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1562
+msgid "Max. src. conn. Rates"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1566
+msgid "/ per how many second(s) (TCP only)"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1570
+msgid "State timeout"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1574
+msgid "State Timeout in seconds (TCP only)"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1577
+#: src/usr/local/www/status_logs_filter.php:331
+#: src/usr/local/www/status_logs_filter_dynamic.php:477
+msgid "TCP Flags"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1579
+msgid ""
+"Use this to choose TCP flags that must be set or cleared for this rule to "
+"match."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1583
+msgid "No pfSync"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1593
+msgid "Keep"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1594
+msgid "Sloppy"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1595
+msgid "Synproxy"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1590
+msgid "State type"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1598
+#, php-format
+msgid ""
+"Select which type of state tracking mechanism to use.  If in doubt, use keep "
+"state.%1$s"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1606
+msgid "This does NOT prevent the rule from being overwritten on Slave."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1612
+msgid "VLAN Prio"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1615
+msgid "Choose 802.1p priority to match on."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1619
+msgid "VLAN Prio Set"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1622
+msgid "Choose 802.1p priority to apply."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1636
+msgid "Leave as 'none' to leave the rule enabled all the time."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1667
+msgid ""
+"Leave as 'default' to use the system routing table. Or choose a gateway to "
+"utilize policy based routing."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1670
+msgid "In / Out pipe"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1674
+msgid "DNpipe"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1681
+msgid "PDNpipe"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1686
+#, php-format
+msgid ""
+"Choose the Out queue/Virtual interface only if In is also selected. The Out "
+"selection is applied to traffic leaving the interface where the rule is "
+"created, the In selection is applied to traffic coming into the chosen "
+"interface.%1$sIf creating a floating rule, if the direction is In then the "
+"same rules apply, if the direction is Out the selections are reversed, Out "
+"is for incoming and In is for outgoing."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1695
+msgid "Ackqueue / Queue"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1712
+msgid "Ackqueue"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1724
+msgid "Choose the Acknowledge Queue only if there is a selected Queue."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule.php:42
+#: src/usr/local/www/firewall_schedule.php:87
+#: src/usr/local/www/firewall_schedule_edit.php:52
+#: src/usr/local/www/head.inc:283
+#: src/usr/local/www/system_advanced_misc.php:470
+msgid "Schedules"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule.php:69
+#, php-format
+msgid "Cannot delete schedule. Currently in use by %s."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule.php:94
+msgid "Range: Date / Times / Name"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule.php:107
+msgid "Schedule is currently active"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule.php:226
+msgid "Edit schedule"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule.php:227
+msgid "Delete schedule"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule.php:240
+msgid " Indicates that the schedule is currently active."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule.php:250
+msgid ""
+"Schedules act as placeholders for time ranges to be used in firewall rules."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:85
+msgid "Schedule may not be named LAN."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:89
+msgid "Schedule may not be named WAN."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:93
+msgid "Schedule name cannot be blank."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:97
+msgid "schedule"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:107
+msgid "A Schedule with this name already exists."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:122
+#, php-format
+msgid "Invalid start time - '%s'"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:127
+#, php-format
+msgid "Invalid stop time - '%s'"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:174
+msgid "The schedule must have at least one time range configured."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:257
+msgid "Tue"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:259
+msgid "Thu"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:308
+msgid ""
+"Click individual date to select that date only. Click the appropriate "
+"weekday Header to select all occurrences of that weekday. "
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:352
+msgid "Schedule Information"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:356
+msgid "*Schedule Name"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:362
+msgid ""
+"The name of the schedule may only consist of the characters \"a-z, A-Z, 0-9 "
+"and _\"."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:364
+msgid "This schedule is in use so the name may not be modified!"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:378
+#: src/usr/local/www/firewall_schedule_edit.php:431
+msgid ""
+"A description may be entered here for administrative reference (not parsed). "
+""
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:382
+msgid "Month"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:388
+msgid "*Date"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:392
+msgid "*Time"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:399
+msgid "Start Hrs"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:406
+msgid "Start Mins"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:413
+msgid "Stop Hrs"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:420
+msgid "Stop Mins"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:422
+msgid ""
+"Select the time range for the day(s) selected on the Month(s) above. A full "
+"day is 0:00-23:59."
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:428
+msgid "Time range description"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:437
+msgid "Add Time"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:444
+msgid "Clear selection"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:462
+msgid "Configured Ranges"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:598
+msgid "Day(s)"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:605
+msgid "Start time"
+msgstr ""
+
+#: src/usr/local/www/firewall_schedule_edit.php:612
+msgid "Stop time"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:41
+#: src/usr/local/www/firewall_shaper.php:370
+#: src/usr/local/www/firewall_shaper_queues.php:203
+#: src/usr/local/www/firewall_shaper_vinterface.php:370
+#: src/usr/local/www/firewall_shaper_wizards.php:73
+msgid "By Interface"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:129
+#: src/usr/local/www/firewall_shaper_vinterface.php:142
+msgid "Unable to write config.xml (Access Denied?)."
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:162
+msgid ""
+"Could not create new queue/discipline! Any recent changes may need to be "
+"applied first."
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:184
+#: src/usr/local/www/firewall_shaper.php:195
+#: src/usr/local/www/firewall_shaper.php:206
+#: src/usr/local/www/firewall_shaper_vinterface.php:179
+#: src/usr/local/www/firewall_shaper_vinterface.php:191
+#: src/usr/local/www/firewall_shaper_vinterface.php:203
+msgid "Queue not found!"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:272
+#: src/usr/local/www/firewall_shaper_vinterface.php:261
+msgid "Could not add new queue."
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:366
+#: src/usr/local/www/firewall_shaper_queues.php:199
+#: src/usr/local/www/firewall_shaper_vinterface.php:366
+#: src/usr/local/www/firewall_shaper_wizards.php:84
+msgid "The traffic shaper configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:371
+#: src/usr/local/www/firewall_shaper_queues.php:180
+#: src/usr/local/www/firewall_shaper_queues.php:204
+#: src/usr/local/www/firewall_shaper_vinterface.php:371
+#: src/usr/local/www/firewall_shaper_wizards.php:74
+msgid "By Queue"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:373
+#: src/usr/local/www/firewall_shaper_queues.php:206
+#: src/usr/local/www/firewall_shaper_vinterface.php:373
+#: src/usr/local/www/firewall_shaper_wizards.php:57
+#: src/usr/local/www/firewall_shaper_wizards.php:76
+#: src/usr/local/www/vpn_openvpn_client.php:477
+#: src/usr/local/www/vpn_openvpn_csc.php:306
+#: src/usr/local/www/vpn_openvpn_server.php:660
+msgid "Wizards"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:392
+msgid "Remove Shaper"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:413
+#: src/usr/local/www/firewall_shaper_vinterface.php:402
+msgid "Add new Queue"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:428
+#: src/usr/local/www/firewall_shaper_vinterface.php:417
+msgid "Delete this queue"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper.php:447
+#: src/usr/local/www/firewall_shaper_queues.php:230
+#: src/usr/local/www/firewall_shaper_wizards.php:110
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:44
+msgid ""
+"This firewall does not have any interfaces assigned that are capable of "
+"using ALTQ traffic shaping."
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_queues.php:40
+msgid "No Queue Configured/Selected"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_vinterface.php:98
+msgid ""
+"This pipe/queue is referenced in filter rules, please remove references from "
+"there before deleting."
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_vinterface.php:112
+#, php-format
+msgid "No queue with name %s was found!"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_vinterface.php:156
+msgid "Could not create new queue/discipline!"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_vinterface.php:218
+#: src/usr/local/www/firewall_shaper_vinterface.php:244
+msgid "A child queue cannot be named the same as a parent limiter."
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_vinterface.php:384
+msgid "New Limiter"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_wizards.php:62
+msgid "Multiple Lan/Wan"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_wizards.php:63
+msgid "Dedicated Links"
+msgstr ""
+
+#: src/usr/local/www/firewall_shaper_wizards.php:89
+msgid "Traffic Shaper Wizards"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:94
+msgid ""
+"This entry cannot be deleted because it is still referenced by at least one "
+"NAT mapping."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:102
+#: src/usr/local/www/license.php:112
+msgid "server"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:102
+msgid "client"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:113
+#, php-format
+msgid ""
+"This entry cannot be deleted because it is still referenced by OpenVPN %1$s "
+"%2$s."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:153
+msgid ""
+"This entry cannot be deleted because it is still referenced by at least one "
+"Gateway."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:186
+#, php-format
+msgid ""
+"This entry cannot be deleted because it is still referenced by a CARP IP "
+"with the description %s."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:192
+#, php-format
+msgid ""
+"This entry cannot be deleted because it is still referenced by an IP alias "
+"entry with the description %s."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:231
+#: src/usr/local/www/firewall_virtual_ip_edit.php:345
+msgid "Proxy ARP"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:232
+#: src/usr/local/www/status_carp.php:106
+#: src/usr/local/www/firewall_virtual_ip_edit.php:337
+msgid "CARP"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:234
+#: src/usr/local/www/firewall_virtual_ip_edit.php:329
+msgid "IP Alias"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:237
+#: src/usr/local/www/firewall_virtual_ip_edit.php:289
+#: src/usr/local/www/head.inc:285
+msgid "Virtual IPs"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:245
+msgid "The VIP configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:256
+msgid "Virtual IP Address"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:261
+msgid "Virtual IP address"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:320
+msgid "Edit virtual ip"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:321
+msgid "Delete virtual ip"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:342
+#, php-format
+msgid ""
+"The virtual IP addresses defined on this page may be used in %1$sNAT%2$s "
+"mappings."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip.php:343
+#, php-format
+msgid "Check the status of CARP Virtual IPs and interfaces %1$shere%2$s."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:105
+#: src/usr/local/www/services_dnsmasq_edit.php:82
+#: src/usr/local/www/services_unbound_host_edit.php:97
+msgid "A valid IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:124
+msgid "This IP address is being used by another interface or VIP."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:134
+msgid ""
+"The interface chosen for the VIP has no IPv4 or IPv6 address configured so "
+"it cannot be used as a parent for the VIP."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:149
+msgid "The network address cannot be used for this VIP"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:151
+msgid "The broadcast address cannot be used for this VIP"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:170
+msgid ""
+"A CARP password that is shared between the two VHID members must be "
+"specified."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:174
+msgid "Password and confirm password must match"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:178
+#: src/usr/local/www/firewall_virtual_ip_edit.php:198
+msgid "For this type of vip localhost is not allowed."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:180
+#: src/usr/local/www/firewall_virtual_ip_edit.php:200
+msgid ""
+"A CARP parent interface can only be used with IP Alias type Virtual IPs."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:189
+msgid "An IPv4 Virtual IP cannot have an IPv6 CARP parent."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:192
+msgid "An IPv6 Virtual IP cannot have an IPv4 CARP parent."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:286
+msgid ""
+"The mask must be the network's subnet mask. It does not specify a CIDR range."
+""
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:287
+msgid "Enter a CIDR block of proxy ARP addresses."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:322
+msgid "Edit Virtual IP"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:324
+#: src/usr/local/www/services_igmpproxy_edit.php:170
+#: src/usr/local/www/system_authservers.php:500
+msgid "*Type"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:372
+msgid "Single address"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:369
+msgid "Address type"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:379
+msgid "*Address(es)"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:385
+msgid "Expansion"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:392
+msgid "Virtual IP Password"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:395
+msgid "Enter the VHID group password."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:399
+msgid "VHID Group"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:402
+msgid "Enter the VHID group that the machines will share."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:404
+msgid "Advertising frequency"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:407
+#: src/usr/local/www/firewall_virtual_ip_edit.php:410
+msgid "Base"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:414
+#: src/usr/local/www/firewall_virtual_ip_edit.php:417
+msgid "Skew"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:419
+msgid ""
+"The frequency that this machine will advertise. 0 means usually master. "
+"Otherwise the lowest combination of both values in the cluster determines "
+"the master."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:452
+msgid ""
+"Proxy ARP and Other type Virtual IPs cannot be bound to by anything running "
+"on the firewall, such as IPsec, OpenVPN, etc.  Use a CARP or IP Alias type "
+"address for these types."
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:453
+#, php-format
+msgid ""
+"For more information on CARP and the above values, visit the OpenBSD %s"
+msgstr ""
+
+#: src/usr/local/www/foot.inc:31 src/usr/local/www/foot.inc:35
+msgid "Top of page"
+msgstr ""
+
+#: src/usr/local/www/graph.php:85
+#, php-format
+msgid "Cannot get data about interface %s"
+msgstr ""
+
+#: src/usr/local/www/graph.php:105
+msgid "In"
+msgstr ""
+
+#: src/usr/local/www/graph.php:106
+msgid "Out"
+msgstr ""
+
+#: src/usr/local/www/graph.php:110 src/usr/local/www/graph.php:192
+msgid "Switch to bytes/s"
+msgstr ""
+
+#: src/usr/local/www/graph.php:111 src/usr/local/www/graph.php:199
+msgid "AutoScale"
+msgstr ""
+
+#: src/usr/local/www/graph.php:114
+#, php-format
+msgid "Graph shows last %s seconds"
+msgstr ""
+
+#: src/usr/local/www/graph.php:117 src/usr/local/www/graph_cpu.php:77
+msgid "Collecting initial data, please wait"
+msgstr ""
+
+#: src/usr/local/www/graph.php:129 src/usr/local/www/graph_cpu.php:89
+msgid "No URL for getURL"
+msgstr ""
+
+#: src/usr/local/www/graph.php:138 src/usr/local/www/graph_cpu.php:98
+msgid "No callback function for getURL"
+msgstr ""
+
+#: src/usr/local/www/graph.php:154 src/usr/local/www/graph_cpu.php:114
+msgid "Both getURL and XMLHttpRequest are undefined"
+msgstr ""
+
+#: src/usr/local/www/graph.php:192
+msgid "Switch to bits/s"
+msgstr ""
+
+#: src/usr/local/www/graph.php:198
+msgid "follow"
+msgstr ""
+
+#: src/usr/local/www/graph.php:369
+msgid "Kbps"
+msgstr ""
+
+#: src/usr/local/www/graph.php:372
+msgid "Mbps"
+msgstr ""
+
+#: src/usr/local/www/graph.php:375
+msgid "Gbps"
+msgstr ""
+
+#: src/usr/local/www/graph.php:381
+msgid "KB/s"
+msgstr ""
+
+#: src/usr/local/www/graph.php:384
+msgid "MB/s"
+msgstr ""
+
+#: src/usr/local/www/graph.php:387
+msgid "GB/s"
+msgstr ""
+
+#: src/usr/local/www/graph_cpu.php:76
+msgid "Cannot get CPU load"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:129
+msgid "One Level"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:130
+msgid "Entire Subtree"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:157
+msgid "Authentication and Accounting"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:159
+#: src/usr/local/www/services_captiveportal.php:868
+#: src/usr/local/www/vpn_l2tp.php:285
+msgid "Accounting"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:225
+msgid "This Firewall"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:236
+msgid "autoselect"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:237
+msgid "100BASE-TX full-duplex"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:238
+msgid "100BASE-TX half-duplex"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:239
+msgid "10BASE-T full-duplex"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:240
+msgid "10BASE-T half-duplex"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:243 src/usr/local/www/interfaces.php:2961
+#: src/usr/local/www/interfaces_wireless_edit.php:189
+msgid "Infrastructure (BSS)"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:244 src/usr/local/www/interfaces.php:2961
+#: src/usr/local/www/interfaces_wireless_edit.php:190
+msgid "Ad-hoc (IBSS)"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:245 src/usr/local/www/interfaces.php:2961
+#: src/usr/local/www/interfaces_wireless_edit.php:191
+msgid "Access Point"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:252
+#, php-format
+msgid "The field %s contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:258
+#, php-format
+msgid "The field %s is required."
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:265
+msgid "The following input errors were detected:"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:329
+msgid "Apply Changes"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:385
+msgid "The changes have been applied successfully."
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:388
+#, php-format
+msgid "There was a problem applying the changes. See the %1$sSystem Logs%2$s."
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:396
+msgid "The firewall rules are now reloading in the background."
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:397
+#, php-format
+msgid "%1$sMonitor%2$s the filter reload progress."
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:602 src/usr/local/www/guiconfig.inc:653
+#, php-format
+msgid "File %s is a directory."
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:604 src/usr/local/www/guiconfig.inc:655
+msgid "Log file started."
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:1042
+msgid "Currently viewing: "
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:1129
+msgid "listing only first 10k items"
+msgstr ""
+
+#: src/usr/local/www/guiconfig.inc:1139
+#: src/usr/local/www/services_dhcp.php:1321
+#: src/usr/local/www/services_dhcpv6.php:947
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
+msgid "Value"
+msgstr ""
+
+#: src/usr/local/www/head.inc:227
+#: src/usr/local/www/system_advanced_admin.php:284
+#: src/usr/local/www/system_advanced_firewall.php:365
+#: src/usr/local/www/system_advanced_misc.php:293
+#: src/usr/local/www/system_advanced_network.php:141
+#: src/usr/local/www/system_advanced_notifications.php:194
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_gateways_edit.php:705
+#: src/usr/local/www/vpn_openvpn_csc.php:582
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
+msgid "Advanced"
+msgstr ""
+
+#: src/usr/local/www/head.inc:229 src/usr/local/www/system.php:412
+msgid "General Setup"
+msgstr ""
+
+#: src/usr/local/www/head.inc:230
+msgid "High Avail. Sync"
+msgstr ""
+
+#: src/usr/local/www/head.inc:232
+msgid "Setup Wizard"
+msgstr ""
+
+#: src/usr/local/www/head.inc:233 src/usr/local/www/status_logs.php:59
+#: src/usr/local/www/status_logs_common.inc:105
+#: src/usr/local/www/system_gateway_groups.php:103
+#: src/usr/local/www/system_gateway_groups_edit.php:147
+#: src/usr/local/www/system_gateways.php:224
+#: src/usr/local/www/system_gateways_edit.php:551
+#: src/usr/local/www/system_routes.php:212
+#: src/usr/local/www/system_routes_edit.php:224
+msgid "Routing"
+msgstr ""
+
+#: src/usr/local/www/head.inc:234
+msgid "Cert. Manager"
+msgstr ""
+
+#: src/usr/local/www/head.inc:236 src/usr/local/www/head.inc:238
+#: src/usr/local/www/system_authservers.php:408
+#: src/usr/local/www/system_groupmanager.php:276
+#: src/usr/local/www/system_groupmanager_addprivs.php:44
+#: src/usr/local/www/system_usermanager.php:542
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_settings.php:109
+msgid "User Manager"
+msgstr ""
+
+#: src/usr/local/www/head.inc:242 src/usr/local/www/system_user_settings.php:32
+msgid "User Settings"
+msgstr ""
+
+#: src/usr/local/www/head.inc:252
+msgid "Assignments"
+msgstr ""
+
+#: src/usr/local/www/head.inc:259
+msgid "Switches"
+msgstr ""
+
+#: src/usr/local/www/head.inc:298 src/usr/local/www/services_dhcpv6.php:483
+#: src/usr/local/www/services_dhcpv6_edit.php:201
+#: src/usr/local/www/services_router_advertisements.php:252
+msgid "DHCPv6 Server & RA"
+msgstr ""
+
+#: src/usr/local/www/head.inc:302 src/usr/local/www/services_igmpproxy.php:63
+#: src/usr/local/www/services_igmpproxy.php:77
+#: src/usr/local/www/services_igmpproxy_edit.php:33
+#: src/usr/local/www/status_logs_settings.php:300
+msgid "IGMP Proxy"
+msgstr ""
+
+#: src/usr/local/www/head.inc:303 src/usr/local/www/head.inc:337
+#: src/usr/local/www/load_balancer_monitor.php:72
+#: src/usr/local/www/load_balancer_monitor_edit.php:202
+#: src/usr/local/www/load_balancer_pool.php:86
+#: src/usr/local/www/load_balancer_pool_edit.php:185
+#: src/usr/local/www/load_balancer_setting.php:85
+#: src/usr/local/www/load_balancer_virtual_server.php:106
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:159
+#: src/usr/local/www/status_lb_pool.php:59
+#: src/usr/local/www/status_lb_vs.php:45 src/usr/local/www/status_logs.php:51
+#: src/usr/local/www/status_logs_common.inc:95
+#: src/usr/local/www/status_logs_settings.php:223
+msgid "Load Balancer"
+msgstr ""
+
+#: src/usr/local/www/head.inc:304 src/usr/local/www/head.inc:338
+#: src/usr/local/www/services_dhcp.php:1132
+#: src/usr/local/www/services_ntpd.php:188
+#: src/usr/local/www/services_ntpd_acls.php:161
+#: src/usr/local/www/services_ntpd_gps.php:310
+#: src/usr/local/www/services_ntpd_pps.php:102
+#: src/usr/local/www/status_logs.php:55
+#: src/usr/local/www/status_logs_common.inc:97
+#: src/usr/local/www/status_logs_settings.php:225
+#: src/usr/local/www/status_ntpd.php:283
+msgid "NTP"
+msgstr ""
+
+#: src/usr/local/www/head.inc:306 src/usr/local/www/services_snmp.php:196
+msgid "SNMP"
+msgstr ""
+
+#: src/usr/local/www/head.inc:312 src/usr/local/www/head.inc:347
+#: src/usr/local/www/status_upnp.php:42
+msgid "UPnP &amp; NAT-PMP"
+msgstr ""
+
+#: src/usr/local/www/head.inc:323 src/usr/local/www/interfaces.php:1658
+#: src/usr/local/www/interfaces_ppps_edit.php:459
+#: src/usr/local/www/vpn_l2tp.php:168 src/usr/local/www/vpn_l2tp_users.php:29
+#: src/usr/local/www/vpn_l2tp_users_edit.php:29
+msgid "L2TP"
+msgstr ""
+
+#: src/usr/local/www/head.inc:329
+msgid "CARP (failover)"
+msgstr ""
+
+#: src/usr/local/www/head.inc:330 src/usr/local/www/index.php:294
+msgid "Dashboard"
+msgstr ""
+
+#: src/usr/local/www/head.inc:331
+#: src/usr/local/www/status_gateway_groups.php:47
+#: src/usr/local/www/status_gateway_groups.php:53
+#: src/usr/local/www/status_gateway_groups.php:65
+#: src/usr/local/www/status_gateways.php:41
+#: src/usr/local/www/status_gateways.php:48
+#: src/usr/local/www/status_gateways.php:53
+#: src/usr/local/www/status_logs.php:57
+#: src/usr/local/www/status_logs_common.inc:104
+#: src/usr/local/www/system_gateway_groups.php:118
+#: src/usr/local/www/system_gateway_groups.php:131
+#: src/usr/local/www/system_gateways.php:224
+#: src/usr/local/www/system_gateways.php:243
+#: src/usr/local/www/system_gateways.php:250
+#: src/usr/local/www/system_gateways_edit.php:551
+#: src/usr/local/www/system_routes.php:229
+#: src/usr/local/www/widgets/include/gateways.inc:23
+msgid "Gateways"
+msgstr ""
+
+#: src/usr/local/www/head.inc:332 src/usr/local/www/status_dhcp_leases.php:36
+msgid "DHCP Leases"
+msgstr ""
+
+#: src/usr/local/www/head.inc:333 src/usr/local/www/status_dhcpv6_leases.php:37
+msgid "DHCPv6 Leases"
+msgstr ""
+
+#: src/usr/local/www/head.inc:334 src/usr/local/www/status_filter_reload.php:33
+#: src/usr/local/www/status_filter_reload.php:59
+msgid "Filter Reload"
+msgstr ""
+
+#: src/usr/local/www/head.inc:340 src/usr/local/www/status_pkglogs.php:71
+msgid "Package Logs"
+msgstr ""
+
+#: src/usr/local/www/head.inc:342
+#: src/usr/local/www/load_balancer_monitor.php:72
+#: src/usr/local/www/load_balancer_monitor_edit.php:202
+#: src/usr/local/www/load_balancer_pool.php:86
+#: src/usr/local/www/load_balancer_pool_edit.php:185
+#: src/usr/local/www/load_balancer_setting.php:85
+#: src/usr/local/www/load_balancer_virtual_server.php:106
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:159
+#: src/usr/local/www/services_captiveportal.php:64
+#: src/usr/local/www/services_captiveportal_filemanager.php:67
+#: src/usr/local/www/services_captiveportal_hostname.php:63
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:64
+#: src/usr/local/www/services_captiveportal_ip.php:62
+#: src/usr/local/www/services_captiveportal_ip_edit.php:66
+#: src/usr/local/www/services_captiveportal_mac.php:59
+#: src/usr/local/www/services_captiveportal_mac_edit.php:69
+#: src/usr/local/www/services_captiveportal_vouchers.php:78
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:53
+#: src/usr/local/www/services_captiveportal_zones.php:59
+#: src/usr/local/www/services_captiveportal_zones_edit.php:35
+#: src/usr/local/www/services_checkip.php:65
+#: src/usr/local/www/services_checkip_edit.php:106
+#: src/usr/local/www/services_dhcp.php:722
+#: src/usr/local/www/services_dhcp_edit.php:397
+#: src/usr/local/www/services_dhcp_relay.php:124
+#: src/usr/local/www/services_dhcpv6.php:483
+#: src/usr/local/www/services_dhcpv6_edit.php:201
+#: src/usr/local/www/services_dhcpv6_relay.php:124
+#: src/usr/local/www/services_dnsmasq.php:226
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:120
+#: src/usr/local/www/services_dnsmasq_edit.php:185
+#: src/usr/local/www/services_dyndns.php:67
+#: src/usr/local/www/services_dyndns_edit.php:242
+#: src/usr/local/www/services_igmpproxy.php:63
+#: src/usr/local/www/services_igmpproxy_edit.php:33
+#: src/usr/local/www/services_ntpd.php:188
+#: src/usr/local/www/services_ntpd_acls.php:161
+#: src/usr/local/www/services_ntpd_gps.php:310
+#: src/usr/local/www/services_ntpd_pps.php:102
+#: src/usr/local/www/services_pppoe.php:81
+#: src/usr/local/www/services_pppoe_edit.php:280
+#: src/usr/local/www/services_rfc2136.php:58
+#: src/usr/local/www/services_rfc2136_edit.php:148
+#: src/usr/local/www/services_router_advertisements.php:252
+#: src/usr/local/www/services_snmp.php:196
+#: src/usr/local/www/services_unbound.php:238
+#: src/usr/local/www/services_unbound_acls.php:176
+#: src/usr/local/www/services_unbound_advanced.php:187
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:112
+#: src/usr/local/www/services_unbound_host_edit.php:200
+#: src/usr/local/www/services_wol.php:113
+#: src/usr/local/www/services_wol_edit.php:111
+#: src/usr/local/www/status_services.php:56
+#: src/usr/local/www/status_services.php:78
+#: src/usr/local/www/system_authservers.php:259
+msgid "Services"
+msgstr ""
+
+#: src/usr/local/www/head.inc:344 src/usr/local/www/status_graph.php:125
+#: src/usr/local/www/status_graph.php:353
+msgid "Traffic Graph"
+msgstr ""
+
+#: src/usr/local/www/head.inc:359 src/usr/local/www/interfaces_assign.php:494
+#: src/usr/local/www/interfaces_bridge.php:85
+#: src/usr/local/www/interfaces_gif.php:80
+#: src/usr/local/www/interfaces_gre.php:80
+#: src/usr/local/www/interfaces_groups.php:62
+#: src/usr/local/www/interfaces_lagg.php:87
+#: src/usr/local/www/interfaces_ppps.php:80
+#: src/usr/local/www/interfaces_qinq.php:91
+#: src/usr/local/www/interfaces_vlan.php:85
+#: src/usr/local/www/interfaces_wireless.php:71
+#: src/usr/local/www/interfaces_wireless.php:82
+#: src/usr/local/www/interfaces_wireless_edit.php:165
+#: src/usr/local/www/status_logs.php:63
+#: src/usr/local/www/status_logs_common.inc:107
+#: src/usr/local/www/status_wireless.php:31
+msgid "Wireless"
+msgstr ""
+
+#: src/usr/local/www/head.inc:399
+msgid "pfSense Gold"
+msgstr ""
+
+#: src/usr/local/www/head.inc:404 src/usr/local/www/help.php:383
+msgid "About this Page"
+msgstr ""
+
+#: src/usr/local/www/head.inc:406
+msgid "Bug Database"
+msgstr ""
+
+#: src/usr/local/www/head.inc:409
+msgid "User Forum"
+msgstr ""
+
+#: src/usr/local/www/head.inc:410
+msgid "Documentation"
+msgstr ""
+
+#: src/usr/local/www/head.inc:411
+msgid "Paid Support"
+msgstr ""
+
+#: src/usr/local/www/head.inc:412
+msgid "pfSense Book"
+msgstr ""
+
+#: src/usr/local/www/head.inc:413
+msgid "FreeBSD Handbook"
+msgstr ""
+
+#: src/usr/local/www/head.inc:503 src/usr/local/www/head.inc:675
+msgid "Notices"
+msgstr ""
+
+#: src/usr/local/www/head.inc:540
+msgid "Save dashboard layout"
+msgstr ""
+
+#: src/usr/local/www/head.inc:548
+msgid "Available widgets"
+msgstr ""
+
+#: src/usr/local/www/head.inc:556
+msgid "Log filter"
+msgstr ""
+
+#: src/usr/local/www/head.inc:567
+msgid "Manage log"
+msgstr ""
+
+#: src/usr/local/www/head.inc:585
+msgid "Refresh Graph"
+msgstr ""
+
+#: src/usr/local/www/head.inc:590
+msgid "Export Graph"
+msgstr ""
+
+#: src/usr/local/www/head.inc:630
+msgid "Help for items on this page"
+msgstr ""
+
+#: src/usr/local/www/head.inc:641
+#, php-format
+msgid ""
+"%1$s%3$s is booting, then packages will be reinstalled in the background."
+"%2$s%1$sDo not make changes in the GUI until this is complete.%2$s"
+msgstr ""
+
+#: src/usr/local/www/head.inc:644
+#, php-format
+msgid ""
+"%1$sPackages are currently being reinstalled in the background.%2$s%1$sDo "
+"not make changes in the GUI until this is complete.%2$s"
+msgstr ""
+
+#: src/usr/local/www/head.inc:645
+#, php-format
+msgid ""
+"%1$sIf the above message is still displayed after a couple of hours, use the "
+"'Clear Package Lock' button on the %3$s page and reinstall packages manually."
+"%2$s"
+msgstr ""
+
+#: src/usr/local/www/head.inc:655
+msgid "This page is currently being managed by a remote machine."
+msgstr ""
+
+#: src/usr/local/www/head.inc:714
+msgid "Close"
+msgstr ""
+
+#: src/usr/local/www/head.inc:716
+msgid "Mark All as Read"
+msgstr ""
+
+#: src/usr/local/www/help.php:383
+msgid "Help"
+msgstr ""
+
+#: src/usr/local/www/help.php:388
+msgid "The Help page is the only page this user has privilege for."
+msgstr ""
+
+#: src/usr/local/www/help.php:390
+msgid ""
+"Displaying the Help page because it is the first page this user has "
+"privilege for."
+msgstr ""
+
+#: src/usr/local/www/help.php:393
+msgid "Help page accessed directly without any page parameter."
+msgstr ""
+
+#: src/usr/local/www/index.php:77
+#, php-format
+msgid "%s has detected a crash report or programming bug."
+msgstr ""
+
+#: src/usr/local/www/index.php:79
+#, php-format
+msgid "Click %1$shere%2$s for more information."
+msgstr ""
+
+#: src/usr/local/www/index.php:81
+#, php-format
+msgid "Contact a firewall administrator for more information."
+msgstr ""
+
+#: src/usr/local/www/index.php:191
+#, php-format
+msgid "Welcome to %s!"
+msgstr ""
+
+#: src/usr/local/www/index.php:192
+msgid "One moment while the initial setup wizard starts."
+msgstr ""
+
+#: src/usr/local/www/index.php:193
+msgid ""
+"Embedded platform users: Please be patient, the wizard takes a little longer "
+"to run than the normal GUI."
+msgstr ""
+
+#: src/usr/local/www/index.php:194
+#, php-format
+msgid "To bypass the wizard, click on the %s logo on the initial page."
+msgstr ""
+
+#: src/usr/local/www/index.php:307 src/etc/inc/pfsense-utils.inc:274
+msgid "Available Widgets"
+msgstr ""
+
+#: src/usr/local/www/index.php:486
+msgid "One or more widgets have been moved but have not yet been saved"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:415
+msgid "The settings have already been applied!"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:501
+msgid "An interface with the specified description already exists."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:510
+#, php-format
+msgid "Sorry, an alias with the name %s already exists."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:519
+#, php-format
+msgid "Sorry, an interface group with the name %s already exists."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:525
+msgid "The interface description cannot contain only numbers."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:534
+msgid "The interface description cannot start with pkg_"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:540
+msgid ""
+"The DHCP Server is active on this interface and it can be used only with a "
+"static IP configuration. Please disable the DHCP Server service on this "
+"interface first, then change the interface configuration."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:546
+msgid ""
+"The DHCP Server is active on this interface and it can be used only with "
+"IPv4 subnet < 31. Please disable the DHCP Server service on this interface "
+"first, then change the interface configuration."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:554
+msgid ""
+"The DHCP6 Server is active on this interface and it can be used only with a "
+"static IPv6 configuration. Please disable the DHCPv6 Server service on this "
+"interface first, then change the interface configuration."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:560
+msgid "IPv4 address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:560 src/usr/local/www/interfaces.php:611
+msgid "Subnet bit count"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:567
+msgid ""
+"This interface is referenced by IPv4 VIPs. Please delete those before "
+"setting the interface to 'none' configuration."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:574
+msgid "Modem Port"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:574
+#: src/usr/local/www/interfaces_ppps_edit.php:204
+msgid "Phone Number"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:580 src/usr/local/www/interfaces.php:583
+msgid "PPPoE username"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:580 src/usr/local/www/interfaces.php:583
+msgid "PPPoE password"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:580 src/usr/local/www/interfaces.php:590
+#: src/usr/local/www/interfaces.php:600 src/usr/local/www/interfaces.php:2620
+#: src/usr/local/www/interfaces.php:2752
+#: src/usr/local/www/interfaces_ppps_edit.php:210
+#: src/usr/local/www/interfaces_ppps_edit.php:221
+msgid "Dial on demand"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:580 src/usr/local/www/interfaces.php:590
+#: src/usr/local/www/interfaces.php:600
+#: src/usr/local/www/interfaces_ppps_edit.php:210
+#: src/usr/local/www/interfaces_ppps_edit.php:221
+msgid "Idle timeout value"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:590 src/usr/local/www/interfaces.php:593
+msgid "PPTP username"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:590 src/usr/local/www/interfaces.php:593
+msgid "PPTP password"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:590 src/usr/local/www/interfaces.php:593
+msgid "PPTP local IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:590 src/usr/local/www/interfaces.php:593
+msgid "PPTP subnet"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:590 src/usr/local/www/interfaces.php:593
+msgid "PPTP remote IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:600 src/usr/local/www/interfaces.php:603
+msgid "L2TP username"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:600 src/usr/local/www/interfaces.php:603
+msgid "L2TP password"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:600 src/usr/local/www/interfaces.php:603
+msgid "L2TP remote IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:618
+msgid ""
+"This interface is referenced by IPv6 VIPs. Please delete those before "
+"setting the interface to 'none' configuration."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:625 src/usr/local/www/interfaces.php:644
+#: src/usr/local/www/interfaces.php:655 src/usr/local/www/interfaces.php:661
+#, php-format
+msgid "The interface must be reassigned to configure as %s."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:628
+msgid ""
+"DHCPv6 Prefix Delegation size must be provided when Send IPv6 prefix hint "
+"flag is checked"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:635
+msgid "Only one interface can be configured within a single 6rd prefix."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:641
+msgid "6RD Border Relay must be an IPv4 address."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:650
+#, php-format
+msgid "Only one interface can be configured as 6to4."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:665
+msgid "A valid interface to track must be selected."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:669
+msgid "A valid hexadecimal number must be entered for the IPv6 prefix ID."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:673
+msgid "The specified IPv6 Prefix ID is out of range."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:683
+#, php-format
+msgid "This track6 prefix ID is already being used in %s."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:696
+#: src/usr/local/www/services_dhcp_edit.php:179
+msgid "A valid IPv4 address must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:700
+#, php-format
+msgid "IPv4 address %s is being used by or overlaps with:"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:710
+msgid "This IPv4 address is the network address and cannot be used"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:712
+msgid "This IPv4 address is the broadcast address and cannot be used"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:719
+msgid "This IPv4 address conflicts with a Static Route."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:730
+#: src/usr/local/www/services_dhcpv6_edit.php:127
+msgid "A valid IPv6 address must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:733
+msgid "IPv6 link local addresses cannot be configured as an interface IP."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:737
+#, php-format
+msgid "IPv6 address %s is being used by or overlaps with:"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:747
+msgid "This IPv6 address conflicts with a Static Route."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:755 src/usr/local/www/interfaces.php:758
+msgid "A valid subnet bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:761
+msgid "A valid alias IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:764
+msgid "A valid alias subnet bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:767
+msgid "A valid alias IP address must be specified to reject DHCP Leases from."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:782
+#: src/usr/local/www/system_routes_edit.php:94
+msgid "A valid gateway must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:786
+msgid "The service name contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:789 src/usr/local/www/interfaces.php:812
+#: src/usr/local/www/interfaces_ppps_edit.php:251
+msgid "The idle timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:793
+#: src/usr/local/www/interfaces_ppps_edit.php:255
+msgid "A valid PPPoE reset hour must be specified (0-23)."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:797
+#: src/usr/local/www/interfaces_ppps_edit.php:259
+msgid "A valid PPPoE reset minute must be specified (0-59)."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:800
+#: src/usr/local/www/interfaces_ppps_edit.php:262
+msgid "A valid PPPoE reset date must be specified (mm/dd/yyyy)."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:803
+msgid "A valid PPTP local IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:806
+msgid "A valid PPTP subnet bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:809
+msgid "A valid PPTP remote IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:815
+#: src/usr/local/www/services_dhcp_edit.php:183
+#: src/usr/local/www/services_wol.php:79
+#: src/usr/local/www/services_wol_edit.php:81
+msgid "A valid MAC address must be specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:830
+#, php-format
+msgid "The MTU must be between %d and %d bytes."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:846
+msgid "The MTU of a VLAN cannot be greater than that of its parent interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:862
+#, php-format
+msgid "Interface %s (VLAN) has MTU set to a larger value."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:869
+msgid "The MSS must be an integer between 576 and 65535 bytes."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:878 src/usr/local/www/interfaces.php:2966
+#: src/usr/local/www/status_interfaces.php:163
+msgid "SSID"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:881
+msgid "A specific channel, not auto, must be selected for Access Point mode."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:886
+msgid "802.11n standards require enabling WME."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:892
+msgid "Key Rotation must be an integer between 1 and 9999."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:895
+msgid "Master Key Regeneration must be an integer between 1 and 9999."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:899
+msgid "Master Key Regeneration must be greater than Key Rotation."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:904
+msgid "802.1X Authentication Server must be an IP or hostname."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:909
+msgid "Secondary 802.1X Authentication Server must be an IP or hostname."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:914
+msgid ""
+"802.1X Authentication Server Port must be a valid port number (1-65535)."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:919
+msgid ""
+"Secondary 802.1X Authentication Server Port must be a valid port number (1-"
+"65535)."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:924
+msgid "Invalid channel specified."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:927
+msgid "Channel must be between 0-255."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:932
+msgid "Distance must be an integer."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:936
+msgid "Channel selected is not valid for 802.11a or 802.11na."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:941
+msgid "Channel selected is not valid for 802.11b or 802.11g."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:945
+msgid "Invalid option chosen for OFDM Protection Mode"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:951
+msgid "The WPA passphrase must be between 8 and 63 characters long."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:957
+msgid "A WPA Passphrase must be specified when WPA PSK is enabled."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:963
+msgid "PPP Password and confirmed password must match!"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:967
+msgid "PPPoE Password and confirmed password must match!"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:971
+msgid "PTPP Password and confirmed password must match!"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1632
+#, php-format
+msgid ""
+"Unable to change mode to %s. The maximum number of wireless clones supported "
+"in this mode may have been reached."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1658
+msgid "Static IPv4"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1658 src/usr/local/www/status_logs.php:43
+#: src/usr/local/www/status_logs_common.inc:90
+#: src/usr/local/www/status_logs_settings.php:218
+msgid "DHCP"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1658
+#: src/usr/local/www/interfaces_ppps_edit.php:459
+#: src/usr/local/www/status_logs.php:49
+#: src/usr/local/www/status_logs_common.inc:93
+#: src/usr/local/www/status_logs_settings.php:221
+msgid "PPP"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1658
+#: src/usr/local/www/interfaces_ppps_edit.php:459
+msgid "PPPoE"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1658
+#: src/usr/local/www/interfaces_ppps_edit.php:459
+msgid "PPTP"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1659
+msgid "Static IPv6"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1659
+msgid "DHCP6"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1659
+msgid "SLAAC"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1659
+msgid "6rd Tunnel"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1659
+msgid "6to4 Tunnel"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1659
+msgid "Track Interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1669
+msgid "Default (no preference, typically autoselect)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1670
+msgid "------- Media Supported by this interface -------"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1713
+#, php-format
+msgid "The %s configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1714
+msgid "The changes must be applied to take effect."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1715
+msgid "Don't forget to adjust the DHCP Server range if needed after applying."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1724
+msgid "General Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1736
+#: src/usr/local/www/load_balancer_monitor_edit.php:278
+msgid "*Description"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1739
+msgid "Enter a description (name) for the interface here."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1743
+msgid "IPv4 Configuration Type"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1750
+msgid "IPv6 Configuration Type"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1757 src/usr/local/www/interfaces.php:1772
+#: src/usr/local/www/services_captiveportal_mac_edit.php:210
+#: src/usr/local/www/services_dhcp_edit.php:413
+#: src/usr/local/www/services_dhcp_edit.php:428
+#: src/usr/local/www/status_interfaces.php:135
+msgid "MAC Address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1765
+#: src/usr/local/www/services_captiveportal_mac_edit.php:218
+#: src/usr/local/www/services_dhcp_edit.php:421
+msgid "Copy My MAC"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1775
+#, php-format
+msgid ""
+"This field can be used to modify (\"spoof\") the MAC address of this "
+"interface.%sEnter a MAC address in the following format: xx:xx:xx:xx:xx:xx "
+"or leave blank."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1781
+#: src/usr/local/www/interfaces_ppps_edit.php:920
+#: src/usr/local/www/status_interfaces.php:158
+msgid "MTU"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1784
+msgid ""
+"If this field is blank, the adapter's default MTU will be used. This is "
+"typically 1500 bytes but can vary in some circumstances."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1789
+msgid "MSS"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1792
+msgid ""
+"If a value is entered in this field, then MSS clamping for TCP connections "
+"to the value entered above minus 40 (TCP/IP header size) will be in effect."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1798
+msgid "Speed and Duplex"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1801
+#, php-format
+msgid ""
+"Explicitly set speed and duplex mode for this interface.%sWARNING: MUST be "
+"set to autoselect (automatically negotiate speed) unless the port this "
+"interface connects to has its speed and duplex forced."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1807
+msgid "Static IPv4 Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1812
+msgid "*IPv4 Address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1817
+msgid "IPv4 Upstream gateway"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1821
+msgid "IPv4 Upstream Gateway"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1828 src/usr/local/www/interfaces.php:1862
+msgid "Add a new gateway"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1833
+#, php-format
+msgid ""
+"If this interface is an Internet connection, select an existing Gateway from "
+"the list or add a new one using the \"Add\" button.%1$sOn local area network "
+"interfaces the upstream gateway should be \"none\". Gateways can be managed "
+"by %2$sclicking here%3$s."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1841
+msgid "Static IPv6 Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1846
+msgid "*IPv6 address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1851
+msgid "IPv6 Upstream gateway"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1855
+msgid "IPv6 Upstream Gateway"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1867
+#, php-format
+msgid ""
+"If this interface is an Internet connection, select an existing Gateway from "
+"the list or add a new one using the \"Add\" button.%sOn local LANs the "
+"upstream gateway should be \"none\". "
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1874
+msgid "New IPv6 Gateway"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1885 src/usr/local/www/interfaces.php:3208
+#: src/usr/local/www/system_gateways_edit.php:620
+msgid "Gateway name"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1892
+#: src/usr/local/www/status_interfaces.php:146
+msgid "Gateway IPv6"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1930
+msgid "DHCP Client Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1933 src/usr/local/www/interfaces.php:2117
+msgid "Options"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1940
+msgid "Use advanced DHCP configuration options."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1947 src/usr/local/www/interfaces.php:2131
+msgid "Override the configuration from this file."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1956
+msgid ""
+"The value in this field is sent as the DHCP client identifier and hostname "
+"when requesting a DHCP lease. Some ISPs may require this (for client "
+"identification)."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1960
+msgid "Alias IPv4 address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1963
+msgid ""
+"The value in this field is used as a fixed alias IPv4 address by the DHCP "
+"client."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1967
+msgid "Reject leases from"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1970
+msgid ""
+"To make the DHCP client reject leases from an undesirable DHCP server, place "
+"the IP address of the DHCP server here. This is useful for rejecting leases "
+"from cable modems that offer private IP addresses when they lose upstream "
+"sync."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1973
+msgid "Protocol timing"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1981
+#: src/usr/local/www/load_balancer_setting.php:117
+msgid "Timeout"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1988
+#: src/usr/local/www/load_balancer_pool_edit.php:337
+msgid "Retry"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1996
+msgid "Select timeout"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2010
+msgid "Backoff cutoff"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2017
+msgid "Initial interval"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2021
+msgid "Presets"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2056
+#, php-format
+msgid ""
+"The values in these fields are DHCP protocol timings used when requesting a "
+"lease.%1$sSee %2$shere%3$s for more information"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2063 src/usr/local/www/interfaces.php:2183
+msgid "Configuration File Override"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2073
+msgid "Lease Requirements and Requests"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2078 src/usr/local/www/interfaces.php:2208
+msgid "Send options"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2088
+msgid "Request options"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2096
+msgid "Require options"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2103
+msgid "Option modifiers"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2114
+msgid "DHCP6 Client Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2124
+msgid "Use advanced DHCPv6 configuration options."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2137
+msgid "Use IPv4 connectivity as parent interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2144
+msgid "Request only an IPv6 prefix"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2151
+msgid "DHCPv6 Prefix Delegation size"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2154
+msgid ""
+"The value in this field is the delegated prefix length provided by the "
+"DHCPv6 server. Normally specified by the ISP."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2158
+msgid "Send IPv6 prefix hint"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2165
+msgid "Debug"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2171
+msgid "Do not wait for a RA"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2177
+msgid "Do not allow PD/Address release"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2186
+#, php-format
+msgid ""
+"The value in this field is the full absolute path to a DHCP client "
+"configuration file.\t [/[dirname/[.../]]filename[.ext]] %1$sValue "
+"Substitutions in Config File: {interface}, {hostname}, {mac_addr_asciiCD}, "
+"{mac_addr_hexCD} %1$sWhere C is U(pper) or L(ower) Case, and D is \" :-.\" "
+"Delimiter (space, colon, hyphen, or period) (omitted for none).%1$sSome ISPs "
+"may require certain options be or not be sent."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2195
+msgid "Advanced DHCP6 Client Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2200
+msgid "Information only"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2204
+msgid "Only exchange informational configuration parameters with servers."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2218
+msgid "Request Options"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2226
+msgid "Scripts"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2232
+msgid "Identity Association Statement"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2313
+msgid "Prefix interface statement"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2331
+msgid "Authentication statement"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2363
+msgid "Keyinfo statement"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2404
+#, php-format
+msgid "See %1$shere%2$s more information"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2410
+msgid "6RD Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2415
+msgid "6RD Prefix"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2422
+msgid "*6RD Border relay"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2429
+msgid "6RD IPv4 Prefix length"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2432
+msgid ""
+"6RD IPv4 prefix length. Normally specified by the ISP. A value of 0 means "
+"embed the entire IPv4 address in the 6RD prefix."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2437
+msgid "Track IPv6 Interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2479
+msgid "*IPv6 Interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2482
+msgid "Selects the dynamic IPv6 WAN interface to track for configuration."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2490
+msgid "IPv6 Prefix ID"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2493
+#, php-format
+msgid ""
+"(%1$shexadecimal%2$s from 0 to %3$s) The value in this field is the "
+"(Delegated) IPv6 prefix ID. This determines the configurable network ID "
+"based on the dynamic IPv6 connection. The default value is 0."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2506
+#: src/usr/local/www/interfaces_ppps_edit.php:566
+msgid "PPP Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2511 src/usr/local/www/interfaces.php:2937
+#: src/usr/local/www/interfaces_ppps_edit.php:594
+msgid "Country"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2518
+#: src/usr/local/www/interfaces_ppps_edit.php:601
+msgid "Provider"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2525
+#: src/usr/local/www/interfaces_ppps_edit.php:608
+msgid "Plan"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2528
+#: src/usr/local/www/interfaces_ppps_edit.php:611
+msgid "Select to fill in service provider data."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2546
+#: src/usr/local/www/interfaces_ppps_edit.php:666
+msgid "*Phone number"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2549
+msgid "Typically *99# for GSM networks and #777 for CDMA networks."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2553
+msgid "Access Point Name"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2579
+msgid "*Modem port"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2586
+msgid "Advanced PPP"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2589
+msgid "Create a new PPP configuration."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2594
+msgid "PPPoE Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2613
+#: src/usr/local/www/interfaces_ppps_edit.php:723
+msgid "Service name"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2616
+msgid "This field can usually be left empty."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2628
+msgid "Idle timeout"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2632 src/usr/local/www/interfaces.php:2765
+msgid ""
+"If no qualifying outgoing packets are transmitted for the specified number "
+"of seconds, the connection is brought down. An idle timeout of zero disables "
+"this feature."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2639
+#: src/usr/local/www/interfaces_ppps_edit.php:753
+msgid "Pre-set"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2637
+msgid "Periodic reset"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2640
+msgid "Select a reset timing type."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2642
+msgid "Custom reset"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2651
+msgid "Hour (0-23)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2659
+msgid "Minutes (0-59)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2666
+msgid "Specific date (mm/dd/yyyy)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2668
+msgid ""
+"Leave the date field empty, for the reset to be executed each day at the "
+"time specified by the minutes and hour fields"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2672
+msgid "cron based reset"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2711 src/usr/local/www/interfaces.php:2776
+msgid "Advanced and MLPPP"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2714
+msgid ""
+"Click for additional PPPoE configuration options. Save first if changes have "
+"been made."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2719
+msgid "PPTP/L2TP Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2738
+msgid "*Local IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2745
+msgid "*Remote IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2756
+msgid ""
+"This option causes the interface to operate in dial-on-demand mode, allowing "
+"it to be a virtual full time connection. The interface is configured, but "
+"the actual connection of the link is delayed until qualifying outgoing "
+"traffic is detected."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2761
+msgid "Idle timeout (seconds)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2769
+msgid "There are additional Local and Remote IP addresses defined for MLPPP."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2779
+#, php-format
+msgid ""
+"%sClick for additional PPTP and L2TP configuration options. Save first if "
+"changes have been made."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2786
+msgid ""
+"Common Wireless Configuration - Settings apply to all wireless networks on "
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2790
+msgid "Persist common settings"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2810
+msgid "Standard"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2820 src/usr/local/www/interfaces.php:2870
+msgid "Off"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2820
+msgid "CTS to self"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2820
+msgid "RTS and CTS"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2818
+msgid "802.11g OFDM Protection Mode"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2821
+msgid ""
+"For IEEE 802.11g, use the specified technique for protecting OFDM frames in "
+"a mixed 11b/11g network."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2831 src/usr/local/www/interfaces.php:2879
+#: src/usr/local/www/interfaces.php:2888
+#: src/usr/local/www/vpn_ipsec_phase1.php:664
+#: src/usr/local/www/vpn_ipsec_phase1.php:849
+#: src/usr/local/www/vpn_ipsec_phase2.php:628
+msgid "Auto"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2855
+#: src/usr/local/www/status_interfaces.php:162
+msgid "Channel"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2858
+#, php-format
+msgid ""
+"Legend: wireless standards - channel # (frequency @ max TX power / TX power "
+"allowed in reg. domain) %1$sNot all channels may be supported by some cards. "
+" Auto may override the wireless standard selected above."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2863
+msgid "Antenna Settings"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2870
+msgid "On"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2871
+msgid "Diversity"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2879 src/usr/local/www/interfaces.php:2888
+msgid "#1"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2879 src/usr/local/www/interfaces.php:2888
+msgid "#2"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2880
+msgid "Transmit antenna"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2889
+msgid "Receive antenna"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2892
+msgid ""
+"Note: The antenna numbers do not always match up with the labels on the card."
+""
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2901
+msgid "Distance setting (meters)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2904
+msgid ""
+"This field can be used to tune ACK/CTS timers to fit the distance between AP "
+"and Client"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2910
+msgid "Regulatory Settings"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2922
+msgid "Regulatory domain"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2925
+msgid ""
+"Some cards have a default that is not recognized and require changing the "
+"regulatory domain to one in this list for the changes to other regulatory "
+"settings to work"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2940
+msgid ""
+"Any country setting other than \"Default\" will override the regulatory "
+"domain setting"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2946
+msgid "Indoor"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2946
+msgid "Outdoor"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2946
+msgid "Anywhere"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2944
+msgid "Location"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2947
+#, php-format
+msgid ""
+"These settings may affect which channels are available and the maximum "
+"transmit power allowed on those channels. Using the correct settings to "
+"comply with local regulatory requirements is recommended.%1$sAll wireless "
+"networks on this interface will be temporarily brought down when changing "
+"regulatory settings.  Some of the regulatory domains or country codes may "
+"not be allowed by some cards.\tThese settings may not be able to add "
+"additional channels that are not already supported."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2955
+msgid "Network-Specific Wireless Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2976
+msgid "802.11g"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2976
+msgid "802.11n"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2974
+msgid "Minimum wireless standard"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2977
+msgid ""
+"When operating as an access point, allow only stations capable of the "
+"selected wireless standard to associate (stations not capable are not "
+"permitted to associate)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2981
+msgid "802.11g only"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2985
+msgid ""
+"When operating as an access point in 802.11g mode, allow only 11g-capable "
+"stations to associate (11b-only stations are not permitted to associate)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2990
+msgid "Allow intra-BSS communication"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2994
+msgid ""
+"Provides extra security by isolating clients so they cannot directly "
+"communicate with one another"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2998
+msgid "Enable WME"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3006
+msgid "Hide SSID"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3015 src/usr/local/www/interfaces.php:3036
+msgid "WPA"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3027
+msgid "WPA Pre-Shared Key"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3030
+msgid "WPA Passphrase must be between 8 and 63 characters long"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3036
+msgid "WPA2"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3036 src/usr/local/www/interfaces.php:3043
+#: src/usr/local/www/interfaces.php:3050 src/usr/local/www/pkg_mgr.php:160
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:155
+#: src/usr/local/www/services_captiveportal_ip_edit.php:202
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:124
+#: src/usr/local/www/services_rfc2136_edit.php:276
+msgid "Both"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3034
+msgid "WPA mode"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3043
+#: src/usr/local/www/vpn_ipsec_keys.php:103
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:68
+#: src/usr/local/www/vpn_ipsec_phase1.php:213
+msgid "Pre-Shared Key"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3043
+msgid "Extensible Authentication Protocol"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3041
+msgid "WPA Key Management Mode"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3050
+msgid "AES (recommended)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3050
+msgid "TKIP"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3048
+msgid "WPA Pairwise"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3055
+msgid "Group Key Rotation"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3059
+msgid ""
+"Time between group rekey events, specified in seconds. Allowed values are 1-"
+"9999. Must be shorter than Master Key Regeneration time"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3063
+msgid "Group Master Key Regeneration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3067
+msgid ""
+"Time between GMK rekey events, specified in seconds. Allowed values are 1-"
+"9999. Must be longer than Group Key Rotation time"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3071
+msgid "Strict Key Regeneration"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3079
+msgid "802.1x RADIUS Options"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3083
+msgid "IEEE802.1X"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3087
+msgid "This option requires that the \"Enable WPA box\" is checked"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3089
+msgid "Primary 802.1X server"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3095 src/usr/local/www/interfaces.php:3119
+msgid "IP address of the RADIUS server"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3102 src/usr/local/www/interfaces.php:3126
+msgid "Server auth port. Default is 1812"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3106 src/usr/local/www/interfaces.php:3130
+#: src/usr/local/www/system_authservers.php:275
+msgid "Shared Secret"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3109 src/usr/local/www/interfaces.php:3133
+msgid "RADIUS Shared secret for this firewall"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3113
+msgid "Secondary 802.1X server"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3139
+msgid "Authentication Roaming Preauth"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3148
+msgid "Reserved Networks"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3152
+msgid "Block private networks and loopback addresses"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3156
+msgid ""
+"Blocks traffic from IP addresses that are reserved for private networks per "
+"RFC 1918 (10/8, 172.16/12, 192.168/16) and unique local addresses per RFC "
+"4193 (fc00::/7) as well as loopback addresses (127/8). This option should "
+"generally be turned on, unless this network interface resides in such a "
+"private address space, too."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3166
+#, php-format
+msgid ""
+"Blocks traffic from reserved IP addresses (but not RFC 1918) or not yet "
+"assigned by IANA. Bogons are prefixes that should never appear in the "
+"Internet routing table, and so should not appear as the source address in "
+"any packets received.%1$sNote: The update frequency can be changed under "
+"System->Advanced Firewall/NAT settings."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3197
+msgid "New Gateway"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3215
+#: src/usr/local/www/status_interfaces.php:142
+msgid "Gateway IPv4"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:34
+#: src/usr/local/www/interfaces_assign.php:492
+#: src/usr/local/www/interfaces_bridge.php:83
+#: src/usr/local/www/interfaces_gif.php:78
+#: src/usr/local/www/interfaces_gre.php:78
+#: src/usr/local/www/interfaces_groups.php:60
+#: src/usr/local/www/interfaces_lagg.php:85
+#: src/usr/local/www/interfaces_ppps.php:78
+#: src/usr/local/www/interfaces_qinq.php:89
+#: src/usr/local/www/interfaces_vlan.php:83
+#: src/usr/local/www/interfaces_wireless.php:80
+msgid "Interface Assignments"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:49
+#, php-format
+msgid "VLAN %1$s on %2$s"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:220
+msgid "lan"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:221
+msgid "LAN"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:247
+msgid "Interface has been added."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:286
+#, php-format
+msgid "Port %1$s  was assigned to %2$s interfaces:"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:304
+#, php-format
+msgid ""
+"Cannot set port %1$s to interface %2$s because this interface is a member of "
+"%3$s."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:315
+#, php-format
+msgid ""
+"Vlan parent interface %1$s does not exist anymore so vlan id %2$s cannot be "
+"created please fix the issue before continuing."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:384
+msgid ""
+"The interface is part of a group. Please remove it from the group to "
+"continue"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:386
+msgid ""
+"The interface is part of a bridge. Please remove it from the bridge to "
+"continue"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:388
+msgid ""
+"The interface is part of a gre tunnel. Please delete the tunnel to continue"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:390
+msgid ""
+"The interface is part of a gif tunnel. Please delete the tunnel to continue"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:435
+msgid "Interface has been deleted."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:461
+msgid "The system is now rebooting. Please wait."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:464
+msgid "Reboot is needed. Please apply the settings in order to reboot."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:468
+msgid ""
+"Interface mismatch detected. Please resolve the mismatch, save and then "
+"click 'Apply Changes'. The firewall will reboot afterwards."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:475
+msgid "The interface configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:493
+#: src/usr/local/www/interfaces_bridge.php:84
+#: src/usr/local/www/interfaces_gif.php:79
+#: src/usr/local/www/interfaces_gre.php:79
+#: src/usr/local/www/interfaces_groups.php:54
+#: src/usr/local/www/interfaces_groups.php:61
+#: src/usr/local/www/interfaces_groups.php:73
+#: src/usr/local/www/interfaces_groups_edit.php:33
+#: src/usr/local/www/interfaces_lagg.php:86
+#: src/usr/local/www/interfaces_ppps.php:79
+#: src/usr/local/www/interfaces_qinq.php:90
+#: src/usr/local/www/interfaces_vlan.php:84
+#: src/usr/local/www/interfaces_wireless.php:81
+msgid "Interface Groups"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:495
+#: src/usr/local/www/interfaces_bridge.php:86
+#: src/usr/local/www/interfaces_gif.php:81
+#: src/usr/local/www/interfaces_gre.php:81
+#: src/usr/local/www/interfaces_groups.php:63
+#: src/usr/local/www/interfaces_lagg.php:88
+#: src/usr/local/www/interfaces_ppps.php:81
+#: src/usr/local/www/interfaces_qinq.php:92
+#: src/usr/local/www/interfaces_vlan.php:76
+#: src/usr/local/www/interfaces_vlan.php:86
+#: src/usr/local/www/interfaces_vlan_edit.php:172
+#: src/usr/local/www/interfaces_wireless.php:83
+msgid "VLANs"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:496
+#: src/usr/local/www/interfaces_bridge.php:87
+#: src/usr/local/www/interfaces_gif.php:82
+#: src/usr/local/www/interfaces_gre.php:82
+#: src/usr/local/www/interfaces_groups.php:64
+#: src/usr/local/www/interfaces_lagg.php:89
+#: src/usr/local/www/interfaces_ppps.php:82
+#: src/usr/local/www/interfaces_qinq.php:80
+#: src/usr/local/www/interfaces_qinq.php:93
+#: src/usr/local/www/interfaces_qinq_edit.php:29
+#: src/usr/local/www/interfaces_vlan.php:87
+#: src/usr/local/www/interfaces_wireless.php:84
+msgid "QinQs"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:497
+#: src/usr/local/www/interfaces_bridge.php:88
+#: src/usr/local/www/interfaces_gif.php:83
+#: src/usr/local/www/interfaces_gre.php:83
+#: src/usr/local/www/interfaces_groups.php:65
+#: src/usr/local/www/interfaces_lagg.php:90
+#: src/usr/local/www/interfaces_ppps.php:73
+#: src/usr/local/www/interfaces_ppps.php:83
+#: src/usr/local/www/interfaces_ppps_edit.php:454
+#: src/usr/local/www/interfaces_qinq.php:94
+#: src/usr/local/www/interfaces_vlan.php:88
+#: src/usr/local/www/interfaces_wireless.php:85
+msgid "PPPs"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:498
+#: src/usr/local/www/interfaces_bridge.php:89
+#: src/usr/local/www/interfaces_gif.php:84
+#: src/usr/local/www/interfaces_gre.php:70
+#: src/usr/local/www/interfaces_gre.php:84
+#: src/usr/local/www/interfaces_gre_edit.php:159
+#: src/usr/local/www/interfaces_groups.php:66
+#: src/usr/local/www/interfaces_lagg.php:91
+#: src/usr/local/www/interfaces_ppps.php:84
+#: src/usr/local/www/interfaces_qinq.php:95
+#: src/usr/local/www/interfaces_vlan.php:89
+#: src/usr/local/www/interfaces_wireless.php:86
+msgid "GREs"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:499
+#: src/usr/local/www/interfaces_bridge.php:90
+#: src/usr/local/www/interfaces_gif.php:69
+#: src/usr/local/www/interfaces_gif.php:85
+#: src/usr/local/www/interfaces_gif_edit.php:165
+#: src/usr/local/www/interfaces_gre.php:85
+#: src/usr/local/www/interfaces_groups.php:67
+#: src/usr/local/www/interfaces_lagg.php:92
+#: src/usr/local/www/interfaces_ppps.php:85
+#: src/usr/local/www/interfaces_qinq.php:96
+#: src/usr/local/www/interfaces_vlan.php:90
+#: src/usr/local/www/interfaces_wireless.php:87
+msgid "GIFs"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:500
+#: src/usr/local/www/interfaces_bridge.php:75
+#: src/usr/local/www/interfaces_bridge.php:91
+#: src/usr/local/www/interfaces_bridge_edit.php:384
+#: src/usr/local/www/interfaces_gif.php:86
+#: src/usr/local/www/interfaces_gre.php:86
+#: src/usr/local/www/interfaces_groups.php:68
+#: src/usr/local/www/interfaces_lagg.php:93
+#: src/usr/local/www/interfaces_ppps.php:86
+#: src/usr/local/www/interfaces_qinq.php:97
+#: src/usr/local/www/interfaces_vlan.php:91
+#: src/usr/local/www/interfaces_wireless.php:88
+msgid "Bridges"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:501
+#: src/usr/local/www/interfaces_bridge.php:92
+#: src/usr/local/www/interfaces_gif.php:87
+#: src/usr/local/www/interfaces_gre.php:87
+#: src/usr/local/www/interfaces_groups.php:69
+#: src/usr/local/www/interfaces_lagg.php:76
+#: src/usr/local/www/interfaces_lagg.php:94
+#: src/usr/local/www/interfaces_lagg_edit.php:223
+#: src/usr/local/www/interfaces_ppps.php:87
+#: src/usr/local/www/interfaces_qinq.php:98
+#: src/usr/local/www/interfaces_vlan.php:92
+#: src/usr/local/www/interfaces_wireless.php:89
+msgid "LAGGs"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:510
+msgid "Network port"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:536
+msgid "Delete interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:548
+msgid "Available network ports:"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:560
+msgid "Add selected interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:576
+msgid ""
+"Interfaces that are configured as members of a lagg(4) interface will not be "
+"shown."
+msgstr ""
+
+#: src/usr/local/www/interfaces_assign.php:578
+msgid ""
+"Wireless interfaces must be created on the Wireless tab before they can be "
+"assigned."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge.php:53
+#: src/usr/local/www/interfaces_gif.php:52
+#: src/usr/local/www/interfaces_gre.php:53
+#: src/usr/local/www/interfaces_lagg.php:59
+#: src/usr/local/www/interfaces_vlan.php:56
+msgid "Wrong parameters supplied"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge.php:55
+#: src/usr/local/www/interfaces_gif.php:54
+#: src/usr/local/www/interfaces_gre.php:55
+#: src/usr/local/www/interfaces_lagg.php:61
+#: src/usr/local/www/interfaces_vlan.php:58
+msgid "Wrong index supplied"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge.php:58
+msgid "This bridge cannot be deleted because it is assigned as an interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge.php:96
+msgid "Bridge Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge.php:103
+#: src/usr/local/www/interfaces_groups.php:80
+#: src/usr/local/www/interfaces_lagg.php:105
+#: src/usr/local/www/system_groupmanager.php:455
+msgid "Members"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge.php:139
+msgid "Edit interface bridge"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge.php:140
+msgid "Delete interface bridge"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:147
+msgid "Member Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:152
+msgid "Maxage needs to be an integer between 6 and 40."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:155
+msgid "Maxaddr needs to be an integer."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:158
+msgid "Timeout needs to be an integer."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:161
+msgid "Forward Delay needs to be an integer between 4 and 30."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:164
+msgid "Hello time for STP needs to be an integer between 1 and 2."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:167
+msgid "Priority for STP needs to be an integer between 0 and 61440."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:170
+msgid "Transmit Hold Count for STP needs to be an integer between 1 and 10."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:174
+#, php-format
+msgid ""
+"%s interface priority for STP needs to be an integer between 0 and 240."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:182
+#, php-format
+msgid ""
+"%s interface path cost for STP needs to be an integer between 1 and "
+"200000000."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:188
+msgid "At least one member interface must be selected for a bridge."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:194
+#, php-format
+msgid ""
+"Sticky interface (%s) is not part of the bridge. Remove the sticky interface "
+"to continuez."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:202
+#, php-format
+msgid ""
+"Private interface (%s) is not part of the bridge. Remove the private "
+"interface to continue."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:210
+#, php-format
+msgid ""
+"STP interface (%s) is not part of the bridge. Remove the STP interface to "
+"continue."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:221
+#, php-format
+msgid ""
+"Edge interface (%s) is not part of the bridge. Remove the edge interface to "
+"continue."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:229
+#, php-format
+msgid ""
+"Auto Edge interface (%s) is not part of the bridge. Remove the auto edge "
+"interface to continue."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:237
+#, php-format
+msgid ""
+"PTP interface (%s) is not part of the bridge. Remove the PTP interface to "
+"continue."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:245
+#, php-format
+msgid ""
+"Auto PTP interface (%s) is not part of the bridge. Remove the auto PTP "
+"interface to continue."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:253
+msgid "A member interface passed does not exist in configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:256
+msgid "A bridge interface cannot be a member of a bridge."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:260
+msgid "Bridging a wireless interface is only possible in hostap mode."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:263
+#, php-format
+msgid ""
+"Span interface (%s) cannot be part of the bridge. Remove the span interface "
+"from bridge members to continue."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:272
+#, php-format
+msgid ""
+"%s is part of another bridge. Remove the interface from bridge members to "
+"continue."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:344
+#: src/usr/local/www/interfaces_gif_edit.php:133
+#: src/usr/local/www/interfaces_gre_edit.php:127
+#: src/usr/local/www/interfaces_lagg_edit.php:169
+#: src/usr/local/www/interfaces_vlan_edit.php:136
+msgid "Error occurred creating interface, please retry."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:395
+msgid "Bridge Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:401
+msgid "*Member Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:405
+msgid "Interfaces participating in the bridge."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:431
+#: src/usr/local/www/interfaces_ppps_edit.php:839
+#: src/usr/local/www/vpn_ipsec_phase2.php:674
+#: src/usr/local/www/vpn_openvpn_client.php:859
+#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
+msgid "Advanced Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:437
+msgid "Cache Size"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:440
+msgid "Set the size of the bridge address cache. The default is 2000 entries."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:444
+msgid "Cache expire time"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:447
+msgid ""
+"Set the timeout of address cache entries to this number of seconds. If "
+"seconds is zero, then address cache entries will not be expired. The default "
+"is 1200 seconds."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:453
+msgid "Span Port"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:457
+#, php-format
+msgid ""
+"Add the interface named by interface as a span port on the bridge. Span "
+"ports transmit a copy of every frame received by the bridge. This is most "
+"useful for snooping a bridged network passively on another host connected to "
+"one of the span ports of the bridgez. %1$s%2$sThe span interface cannot be "
+"part of the bridge member interfaces.%3$s"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:465
+msgid "Edge Ports"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:469
+msgid ""
+"Set interface as an edge port. An edge port connects directly to end "
+"stations and cannot create bridging loops in the network; this allows it to "
+"transition straight to forwarding."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:475
+msgid "Auto Edge Ports"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:479
+#, php-format
+msgid ""
+"Allow interface to automatically detect edge status. This is the default for "
+"all interfaces added to a bridge.%1$sThis will disable the autoedge status "
+"of interfaces. %2$s"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:486
+msgid "PTP Ports"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:490
+msgid ""
+"Set the interface as a point-to-point link. This is required for straight "
+"transitions to forwarding and should be enabled on a direct link to another "
+"RSTP-capable switch."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:496
+msgid "Auto PTP Ports"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:500
+#, php-format
+msgid ""
+"Automatically detect the point-to-point status on interface by checking the "
+"full duplex link status. This is the default for interfaces added to the "
+"bridge.%1$sThe interfaces selected here will be removed from default "
+"autoedge status. %2$s"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:507
+msgid "Sticky Ports"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:511
+msgid ""
+"Mark an interface as a \"sticky\" interface. Dynamically learned address "
+"entries are treated as static once entered into the cache. Sticky entries "
+"are never aged out of the cache or replaced, even if the address is seen on "
+"a different interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:518
+msgid "Private Ports"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:522
+msgid ""
+"Mark an interface as a \"private\" interface. A private interface does not "
+"forward any traffic to any other port that is also a private interface. "
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:528
+msgid "Enable RSTP/STP"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:535
+msgid "RSTP/STP"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:544
+msgid "Protocol used for spanning tree."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:550
+msgid "STP Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:554
+msgid ""
+"Enable Spanning Tree Protocol on interface. The if_bridge(4) driver has "
+"support for the IEEE 802.1D Spanning Tree Protocol (STP). STP is used to "
+"detect and remove loops in a network topology."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:559
+msgid "Valid time"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:563
+msgid ""
+"Set the time that a Spanning Tree Protocol configuration is valid. The "
+"default is 20 seconds. The minimum is 6 seconds and the maximum is 40 "
+"seconds."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:567
+msgid "Forward time"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:571
+msgid ""
+"Set the time that must pass before an interface begins forwarding packets "
+"when Spanning Tree is enabled. The default is 15 seconds. The minimum is 4 "
+"seconds and the maximum is 30 seconds. "
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:575
+msgid "Hello time"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:579
+msgid ""
+"Set the time in seconds between broadcasting of Spanning Tree Protocol "
+"configuration messages. The hello time may only be changed when operating in "
+"legacy STP mode. The default is 2 seconds. The minimum is 1 second and the "
+"maximum is 2 seconds."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:588
+msgid ""
+"Set the bridge priority for Spanning Tree. The default is 32768. The minimum "
+"is 0 and the maximum is 61440. "
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:592
+msgid "Hold Count"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:596
+msgid ""
+"Set the transmit hold count for Spanning Tree. This is the number of packets "
+"transmitted before being rate limited. The default is 6. The minimum is 1 "
+"and the maximum is 10."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:601
+msgid " Priority"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:605
+msgid ""
+"Set the Spanning Tree priority of interface to value. The default is 128. "
+"The minimum is 0 and the maximum is 240. Increments of 16."
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:612
+msgid " Path cost"
+msgstr ""
+
+#: src/usr/local/www/interfaces_bridge_edit.php:616
+msgid ""
+"Set the Spanning Tree path cost of interface to value. The default is "
+"calculated from the link speed. To change a previously selected path cost "
+"back to automatic, set the cost to 0. The minimum is 1 and the maximum is "
+"200000000."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif.php:57
+msgid ""
+"This gif TUNNEL cannot be deleted because it is still being used as an "
+"interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif.php:91
+msgid "GIF Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif.php:98
+#: src/usr/local/www/interfaces_gre.php:98
+msgid "Tunnel to &hellip;"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif.php:116
+msgid "Edit GIF interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif.php:117
+msgid "Delete GIF interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:65
+#: src/usr/local/www/interfaces_gre_edit.php:69
+#: src/usr/local/www/interfaces_vlan_edit.php:72
+#: src/usr/local/www/interfaces_wireless_edit.php:81
+msgid "Parent interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:65
+msgid "gif remote address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:65
+msgid "gif tunnel local address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:65
+msgid "gif tunnel remote address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:65
+msgid "gif tunnel remote netmask"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:72
+#: src/usr/local/www/interfaces_gre_edit.php:76
+msgid ""
+"The tunnel local and tunnel remote fields must have valid IP addresses."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:76
+msgid "The gif tunnel subnet must be an integer."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:81
+msgid ""
+"The gif tunnel remote address must be IPv4 where tunnel local address is "
+"IPv4."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:84
+msgid "The gif tunnel subnet must be an integer between 1 and 32."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:90
+msgid ""
+"The gif tunnel remote address must be IPv6 where tunnel local address is "
+"IPv6."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:93
+msgid "The gif tunnel subnet must be an integer between 1 and 128."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:100
+msgid ""
+"The alias IP address family has to match the family of the remote peer "
+"address."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:110
+#, php-format
+msgid "A gif with the network %s is already defined."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:176
+msgid "GIF Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:180
+#: src/usr/local/www/interfaces_gre_edit.php:174
+#: src/usr/local/www/interfaces_vlan_edit.php:186
+#: src/usr/local/www/interfaces_wireless_edit.php:179
+msgid "*Parent Interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:183
+msgid ""
+"This interface serves as the local address to be used for the GIF tunnel."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:187
+msgid "*GIF Remote Address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:189
+msgid "Peer address where encapsulated gif packets will be sent."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:193
+msgid "*GIF tunnel local address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:195
+msgid "Local gif tunnel endpoint."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:199
+msgid "*GIF tunnel remote address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:201
+msgid "Remote GIF address endpoint."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:205
+msgid "*GIF tunnel subnet"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:208
+#: src/usr/local/www/interfaces_gre_edit.php:202
+msgid "The subnet is used for determining the network that is tunnelled."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:212
+msgid "ECN friendly behavior"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:219
+msgid "Outer Source Filtering"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre.php:58
+msgid ""
+"This GRE tunnel cannot be deleted because it is still being used as an "
+"interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre.php:91
+msgid "GRE Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre.php:122
+msgid "Edit GRE interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre.php:123
+msgid "Delete GRE interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:69
+msgid "Remote tunnel endpoint IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:69
+msgid "Local tunnel IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:69
+msgid "Remote tunnel IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:69
+msgid "Remote tunnel network"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:80
+msgid "The GRE tunnel subnet must be an integer."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:85
+msgid ""
+"The GRE Tunnel remote address must be IPv4 where tunnel local address is "
+"IPv4."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:88
+msgid "The GRE tunnel subnet must be an integer between 1 and 32."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:94
+msgid ""
+"The GRE Tunnel remote address must be IPv6 where tunnel local address is "
+"IPv6."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:97
+msgid "The GRE tunnel subnet must be an integer between 1 and 128."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:107
+#, php-format
+msgid "A GRE tunnel with the network %s is already defined."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:170
+msgid "GRE Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:177
+msgid ""
+"This interface serves as the local address to be used for the GRE tunnel."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:181
+msgid "*GRE Remote Address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:183
+msgid "Peer address where encapsulated GRE packets will be sent."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:187
+msgid "*GRE tunnel local address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:189
+msgid "Local GRE tunnel endpoint."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:193
+msgid "*GRE tunnel remote address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:195
+msgid "Remote GRE address endpoint."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:199
+msgid "*GRE tunnel subnet"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:206
+msgid "Add Static Route"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups.php:112
+#: src/usr/local/www/system_groupmanager.php:336
+msgid "Edit group"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups.php:113
+#: src/usr/local/www/system_groupmanager.php:338
+msgid "Delete group"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups.php:131
+#, php-format
+msgid ""
+"Interface Groups allow setting up rules for multiple interfaces without "
+"duplicating the rules.%sIf members are removed from an interface group, the "
+"group rules are no longer applicable to that interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:58
+msgid "Only letters (A-Z), digits (0-9) and '_' are allowed."
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:59
+msgid "The group name cannot end with a digit."
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:68
+#: src/usr/local/www/status_gateway_groups.php:64
+#: src/usr/local/www/system_gateway_groups.php:130
+#: src/usr/local/www/system_gateway_groups_edit.php:266
+#: src/usr/local/www/system_gateway_groups_edit.php:295
+#: src/usr/local/www/system_groupmanager.php:141
+msgid "Group Name"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:74
+msgid "Group name already exists!"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:79
+msgid "Group name cannot have more than 16 characters."
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:83
+msgid "Please choose another group name."
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:95
+msgid "Group name cannot start with pkg_"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:210
+msgid "Interface Group Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:214
+#: src/usr/local/www/system_gateway_groups_edit.php:209
+msgid "*Group Name"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:218
+msgid " "
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:222
+msgid "Group Description"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:226
+#: src/usr/local/www/interfaces_vlan_edit.php:213
+msgid ""
+"A group description may be entered here for administrative reference (not "
+"parsed)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:231
+msgid "Group Members"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:235
+#, php-format
+msgid ""
+"NOTE: Rules for WAN type interfaces in groups do not contain the reply-to "
+"mechanism upon which Multi-WAN typically relies. %1$sMore Information%2$s"
+msgstr ""
+
+#: src/usr/local/www/interfaces_groups_edit.php:243
+#: src/usr/local/www/interfaces_vlan_edit.php:225
+#: src/usr/local/www/system_advanced_sysctl.php:221
+msgid "id"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg.php:64
+msgid "This LAGG interface cannot be deleted because it is still being used."
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg.php:98
+msgid "LAGG Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg.php:128
+msgid "Edit LAGG interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg.php:129
+msgid "Delete LAGG interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:39
+msgid "NONE"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:39
+msgid "LACP"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:39
+msgid "FAILOVER"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:39
+msgid "FEC"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:39
+msgid "LOADBALANCE"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:39
+msgid "ROUNDROBIN"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:45
+msgid ""
+"This protocol is intended to do nothing: it disables any traffic without "
+"disabling the lagg interface itself."
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:50
+msgid ""
+"Supports the IEEE 802.3ad Link Aggregation Control Protocol (LACP) and the "
+"Marker Protocol.\tLACP will negotiate a set of aggregable links with the "
+"peer in to one or more Link Aggregated Groups.  Each LAG is composed of "
+"ports of the same speed, set to full-duplex operation.  The traffic will be "
+"balanced across the ports in the LAG with the greatest total speed, in most "
+"cases there will only be one LAG which contains all ports.\tIn the event of "
+"changes in physical connectivity, Link Aggregation will quickly converge to "
+"a new configuration."
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:63
+msgid ""
+"Sends and receives traffic only through the master port.  If the master port "
+"becomes unavailable, the next active port is used.\tThe first interface "
+"added is the master port; any interfaces added after that are used as "
+"failover devices."
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:70
+msgid ""
+"Supports Cisco EtherChannel.  This is a static setup and does not negotiate "
+"aggregation with the peer or exchange frames to monitor the link."
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:76
+msgid ""
+"Balances outgoing traffic across the active ports based on hashed protocol "
+"header information and accepts incoming traffic from any active port.\t This "
+"is a static setup and does not negotiate aggregation with the peer or "
+"exchange frames to monitor the link.  The hash includes the Ethernet source "
+"and destination address, and, if available, the VLAN tag, and the IP source "
+"and destination address."
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:86
+msgid ""
+"Distributes outgoing traffic using a round-robin scheduler through all "
+"active ports and accepts incoming traffic from any active port."
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:139
+msgid "Member interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:139
+msgid "Lagg protocol"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:146
+#, php-format
+msgid "Interface supplied as member (%s) is invalid"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:150
+msgid "Interface supplied as member is invalid"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:154
+msgid "Protocol supplied is invalid"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:234
+msgid "LAGG Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:240
+msgid "*Parent Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:244
+msgid "Choose the members that will be used for the link aggregation."
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:248
+msgid "*LAGG Protocol"
+msgstr ""
+
+#: src/usr/local/www/interfaces_lagg_edit.php:258
+msgid "Enter a description here for reference only (Not parsed)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps.php:56
+msgid ""
+"This point-to-point link cannot be deleted because it is still being used as "
+"an interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps.php:91
+msgid "PPP Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps.php:98
+msgid "Interface(s)/Port(s)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps.php:129
+msgid "Edit PPP interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps.php:130
+msgid "Delete PPP interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:204
+#: src/usr/local/www/interfaces_ppps_edit.php:210
+#: src/usr/local/www/interfaces_ppps_edit.php:213
+#: src/usr/local/www/interfaces_ppps_edit.php:221
+#: src/usr/local/www/interfaces_ppps_edit.php:224
+msgid "Link Interface(s)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:221
+#: src/usr/local/www/interfaces_ppps_edit.php:224
+msgid "Local IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:221
+#: src/usr/local/www/interfaces_ppps_edit.php:224
+#: src/usr/local/www/services_dhcp.php:851
+#: src/usr/local/www/services_dhcpv6.php:596
+msgid "Subnet"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:221
+#: src/usr/local/www/interfaces_ppps_edit.php:224
+msgid "Remote IP address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:229
+msgid "Please choose a Link Type."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:239
+#: src/usr/local/www/services_captiveportal_vouchers.php:250
+#: src/usr/local/www/services_checkip_edit.php:74
+#: src/usr/local/www/services_dyndns_edit.php:113
+msgid "Password and confirmed password must match."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:242
+msgid ""
+"Multilink connections (MLPPP) using the PPP link type is not currently "
+"supported. Please select only one Link Interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:245
+msgid "The Service name contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:248
+msgid "Do not specify both a Service name and a NULL Service name."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:267
+msgid ""
+"A valid PPPoE reset month must be specified (1-12) in the Custom PPPoE "
+"Periodic reset fields."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:270
+msgid ""
+"A valid PPPoE reset day of month must be specified (1-31) in the Custom "
+"PPPoE Periodic reset fields. No checks are done on valid # of days per month"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:273
+msgid ""
+"A valid PPPoE reset year must be specified. Don't select a year in the past!"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:281
+#, php-format
+msgid "A valid local IP address must be specified for %s."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:284
+#, php-format
+msgid "A valid gateway IP address OR hostname must be specified for %s."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:287
+#, php-format
+msgid "The bandwidth value for %s must be an integer."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:290
+#, php-format
+msgid "The MTU for %s must be greater than 576 bytes."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:293
+#, php-format
+msgid "The MRU for %s must be greater than 576 bytes."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:306
+#, php-format
+msgid ""
+"The MTU (%1$d) is too big for %2$s (maximum allowed with current settings: "
+"%3$d)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:459
+msgid "Select"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:559
+msgid ""
+"Bandwidth is set only for MLPPP connections and when links have different "
+"bandwidths<br />MTU defaults to 1492<br />MRU will be auto-negotiated by "
+"default<br />Set only for MLPPP connections. MRRU will be auto-negotiated by "
+"default."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:570
+msgid "*Link Type"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:579
+msgid "*Link Interface(s)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:583
+msgid "Select at least two interfaces for Multilink (MLPPP) connections."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:590
+msgid ""
+"A description may be entered here for administrative reference. Description "
+"will appear in the \"Interfaces Assign\" select lists."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:641
+msgid "IP/Gateway ("
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:647
+msgid "Local IP Address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:654
+msgid "Gateway IP or Hostname"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:669
+msgid "Typically *99# for GSM networks and #777 for CDMA networks"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:674
+msgid "Access Point Name (APN)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:681
+msgid "APN number (optional)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:684
+msgid "Defaults to 1 if APN is set. Ignored if no APN is set."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:688
+msgid "SIM PIN"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:695
+msgid "SIM PIN wait"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:698
+msgid ""
+"Time to wait for SIM to discover network after PIN is sent to SIM (seconds)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:702
+msgid "Init string"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:705
+msgid ""
+"Enter the modem initialization string here. Do NOT include the \"AT\" string "
+"at the beginning of the command. Many modern USB 3G modems don't need an "
+"initialization string."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:710
+msgid "Connection Timeout"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:713
+msgid ""
+"Enter timeout in seconds for connection to be established (sec.) Default is "
+"45 sec."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:717
+msgid "Uptime logging"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:720
+#, php-format
+msgid ""
+"Causes cumulative uptime to be recorded and displayed on the %1$sStatus-"
+">Interfaces%2$s page."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:740
+msgid ""
+"This field can usually be left empty. Service name will not be configured if "
+"this field is empty. Check the \"Configure NULL\" box to configure a blank "
+"Service name."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:748
+msgid "Periodic Reset"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:755
+msgid "Select a reset timing type"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:757
+msgid "Reset Date/Time"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:765
+msgid "Hour"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:772
+msgid "Minute"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:780
+msgid "Specific date"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:782
+msgid ""
+"Leaving the date field empty will cause the reset to be executed each day at "
+"the time specified in the minutes and hour fields. "
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:786
+msgid "Reset frequency"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:833
+msgid "Advanced options"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:844
+msgid "Dial On Demand"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:847
+msgid ""
+"Causes the interface to operate in dial-on-demand mode. Do NOT enable if the "
+"link is to remain continuously connected. The interface is configured, but "
+"the actual connection of the link is delayed until qualifying outgoing "
+"traffic is detected."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:852
+msgid "Idle Timeout"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:855
+msgid ""
+"If no incoming or outgoing packets are transmitted for the entered number of "
+"seconds the connection is brought down. When the idle timeout occurs, if the "
+"dial-on-demand option is enabled, mpd goes back into dial-on-demand mode. "
+"Otherwise, the interface is brought down and all associated routes removed."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:861
+#: src/usr/local/www/vpn_openvpn_client.php:824
+#: src/usr/local/www/vpn_openvpn_server.php:1078
+msgid "Compression"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:864
+#, php-format
+msgid ""
+"Disable vjcomp(compression) (auto-negotiated by default).%1$sThis option "
+"enables Van Jacobson TCP header compression, which saves several bytes per "
+"TCP data packet. This option is almost always required. Compression is not "
+"effective for TCP connections with enabled modern extensions like time "
+"stamping or SACK, which modify TCP options between sequential packets."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:871
+msgid "TCPmssFix"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:874
+msgid ""
+"Causes mpd to adjust incoming and outgoing TCP SYN segments so that the "
+"requested maximum segment size is not greater than the amount allowed by the "
+"interface MTU. This is necessary in many setups to avoid problems caused by "
+"routers that drop ICMP Datagram Too Big messages. Without these messages, "
+"the originating machine sends data, it passes the rogue router then hits a "
+"machine that has an MTU that is not big enough for the data. Because the IP "
+"Don't Fragment option is set, this machine sends an ICMP Datagram Too Big "
+"message back to the originator and drops the packet. The rogue router drops "
+"the ICMP message and the originator never gets to discover that it must "
+"reduce the fragment size or drop the IP Don't Fragment option from its "
+"outgoing data."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:882
+msgid "ShortSeq"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:885
+msgid ""
+"This option is only meaningful if multi-link PPP is negotiated. It "
+"proscribes shorter multi-link fragment headers, saving two bytes on every "
+"frame. It is not necessary to disable this for connections that are not "
+"multi-link."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:890
+msgid "ACFComp"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:893
+msgid ""
+"Address and control field compression. This option only applies to "
+"asynchronous link types. It saves two bytes per frame."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:897
+msgid "ProtoComp"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:900
+msgid ""
+"Protocol field compression. This option saves one byte per frame for most "
+"frames."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:906
+msgid "Link Parameters ("
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:927
+msgid "MRU"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:934
+msgid "MRRU"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq.php:56
+msgid ""
+"This QinQ cannot be deleted because it is still being used as an interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq.php:58
+msgid "QinQ interface does not exist"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq.php:103
+msgid "QinQ Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq.php:111
+msgid "QinQ members"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq.php:136
+msgid "Edit Q-in-Q interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq.php:137
+msgid "Delete Q-in-Q interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq.php:157
+#, php-format
+msgid ""
+"Not all drivers/NICs support 802.1Q QinQ tagging properly. %1$sOn cards that "
+"do not explicitly support it, QinQ tagging will still work, but the reduced "
+"MTU may cause problems.%1$sSee the %2$s handbook for information on "
+"supported cards."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:76
+msgid "First level tag cannot be empty."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:79
+msgid "Modifying the first level tag of an existing entry is not allowed."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:82
+msgid "Modifying the interface of an existing entry is not allowed."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:87
+msgid "QinQ level already exists for this interface, edit it!"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:93
+msgid ""
+"A normal VLAN exists with this tag please remove it to use this tag for QinQ "
+"first level."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:139
+#, php-format
+msgid ""
+"Tags can contain only numbers or a range  (in format #-#) from %1$s to %2$s."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:146
+msgid "At least one tag must be entered."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:204
+msgid "QinQ VLANs group"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:242
+msgid "QinQ Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:246
+msgid "*Parent interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:249
+msgid "Only QinQ capable interfaces will be shown."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:253
+msgid "*First level tag"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:257
+msgid ""
+"This is the first level VLAN tag. On top of this are stacked the member "
+"VLANs defined below."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:261
+msgid "Option(s)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:264
+msgid "Allows rules to be written more easily."
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:274
+msgid "Member(s)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:300
+msgid "Tag(s)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:324
+msgid "Add Tag"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan.php:61
+msgid ""
+"This VLAN cannot be deleted because it is still being used as an interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan.php:101
+msgid "VLAN Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan.php:108
+#: src/usr/local/www/interfaces_vlan_edit.php:72
+msgid "VLAN tag"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan.php:132
+msgid "Edit VLAN"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan.php:134
+msgid "Delete VLAN"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan.php:157
+#, php-format
+msgid ""
+"Not all drivers/NICs support 802.1Q VLAN tagging properly. %1$sOn cards that "
+"do not explicitly support it, VLAN tagging will still work, but the reduced "
+"MTU may cause problems.%1$sSee the %2$s handbook for information on "
+"supported cards."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan.php:164
+msgid "Are you sure you want to delete this VLAN?"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:77
+msgid "The VLAN tag must be an integer between 1 and 4094."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:80
+msgid "The VLAN Priority must be an integer between 0 and 7."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:84
+msgid "Interface supplied as parent is invalid"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:90
+msgid "The VLAN tag cannot be changed while the interface is assigned."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:100
+#, php-format
+msgid "A VLAN with the tag %s is already defined on this interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:107
+#, php-format
+msgid ""
+"A QinQ VLAN exists on %s with this tag. Please remove it to use this tag for "
+"a normal VLAN."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:182
+msgid "VLAN Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:189
+msgid "Only VLAN capable interfaces will be shown."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:193
+msgid "*VLAN Tag"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:197
+msgid "802.1Q VLAN tag (between 1 and 4094)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:201
+msgid "VLAN Priority"
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:205
+msgid "802.1Q VLAN Priority (between 0 and 7)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_vlan_edit.php:217
+msgid "vlanif"
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless.php:58
+msgid ""
+"This wireless clone cannot be deleted because it is assigned as an interface."
+""
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless.php:93
+msgid "Wireless Interfaces"
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless.php:123
+msgid "Edit WiFi interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless.php:124
+msgid "Delete WiFi interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless_edit.php:115
+msgid ""
+"This wireless clone cannot be modified because it is still assigned as an "
+"interface."
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless_edit.php:117
+msgid ""
+"Use the configuration page for the assigned interface to change the mode."
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless_edit.php:124
+#, php-format
+msgid ""
+"Error creating interface with mode %1$s.\t The %2$s interface may not "
+"support creating more clones with the selected mode."
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless_edit.php:130
+#, php-format
+msgid "Created with id %s"
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless_edit.php:133
+msgid "Created without id"
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless_edit.php:161
+msgid "None available"
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless_edit.php:175
+msgid "Wireless Interface Configuration"
+msgstr ""
+
+#: src/usr/local/www/interfaces_wireless_edit.php:186
+#: src/usr/local/www/vpn_ipsec_phase2.php:506
+msgid "*Mode"
+msgstr ""
+
+#: src/usr/local/www/license.php:30 src/usr/local/www/license.php:34
+msgid "License"
+msgstr ""
+
+#: src/usr/local/www/license.php:36
+#, php-format
+msgid "%1$s is Copyright &copy; %2$s %3$s. All rights reserved."
+msgstr ""
+
+#: src/usr/local/www/license.php:37
+msgid ""
+"m0n0wall is Copyright &copy; 2002-2015 by Manuel Kasper (mk@neon1.net). All "
+"rights reserved."
+msgstr ""
+
+#: src/usr/local/www/license.php:38
+#, php-format
+msgid ""
+"Licensed under the Apache License, Version 2.0 (the \"License\");%1$syou may "
+"not use this file except in compliance with the License.%1$sYou may obtain a "
+"copy of the License at"
+msgstr ""
+
+#: src/usr/local/www/license.php:40
+#, php-format
+msgid ""
+"Unless required by applicable law or agreed to in writing, "
+"software%1$sdistributed under the License is distributed on an \\\"AS IS\\\" "
+"BASIS,%1$sWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or "
+"implied.%1$sSee the License for the specific language governing permissions "
+"and%1$slimitations under the License."
+msgstr ""
+
+#: src/usr/local/www/license.php:44
+msgid "Third Party Credits"
+msgstr ""
+
+#: src/usr/local/www/license.php:47
+#, php-format
+msgid ""
+"%1$s is based upon/includes various free software packages, listed below. "
+"The authors of %1$s would like to thank the authors of these software "
+"packages for their efforts."
+msgstr ""
+
+#: src/usr/local/www/license.php:52 src/usr/local/www/license.php:56
+#: src/usr/local/www/license.php:63 src/usr/local/www/license.php:67
+#: src/usr/local/www/license.php:75 src/usr/local/www/license.php:76
+#: src/usr/local/www/license.php:80 src/usr/local/www/license.php:84
+#: src/usr/local/www/license.php:88 src/usr/local/www/license.php:92
+#: src/usr/local/www/license.php:96 src/usr/local/www/license.php:101
+#: src/usr/local/www/license.php:105 src/usr/local/www/license.php:109
+#: src/usr/local/www/license.php:113 src/usr/local/www/license.php:114
+#: src/usr/local/www/license.php:118 src/usr/local/www/license.php:122
+#: src/usr/local/www/license.php:127 src/usr/local/www/license.php:137
+#: src/usr/local/www/license.php:141 src/usr/local/www/license.php:145
+#: src/usr/local/www/license.php:153 src/usr/local/www/license.php:154
+#: src/usr/local/www/license.php:158 src/usr/local/www/license.php:162
+#: src/usr/local/www/license.php:166 src/usr/local/www/license.php:170
+#: src/usr/local/www/license.php:174 src/usr/local/www/license.php:178
+#: src/usr/local/www/license.php:182 src/usr/local/www/license.php:190
+#: src/usr/local/www/license.php:194
+msgid "Copyright"
+msgstr ""
+
+#: src/usr/local/www/license.php:52
+msgid "1992-2016 The FreeBSD Project. All rights reserved."
+msgstr ""
+
+#: src/usr/local/www/license.php:55
+#, php-format
+msgid "This product includes %1$s, freely available from (%2$s)"
+msgstr ""
+
+#: src/usr/local/www/license.php:56
+msgid "1999-2016 The PHP Group. All rights reserved."
+msgstr ""
+
+#: src/usr/local/www/license.php:113
+msgid "2004-2013 Internet Software Consortium, Inc."
+msgstr ""
+
+#: src/usr/local/www/license.php:114
+msgid "1995-2003 Internet Software Consortium"
+msgstr ""
+
+#: src/usr/local/www/license.php:123 src/usr/local/www/license.php:128
+msgid "All rights reserved."
+msgstr ""
+
+#: src/usr/local/www/license.php:127
+msgid "2011-2016 Nginx, Inc."
+msgstr ""
+
+#: src/usr/local/www/license.php:132
+msgid "Copyright 2000, 2001, 2002 by Edwin Groothuis. All rights reserved."
+msgstr ""
+
+#: src/usr/local/www/license.php:133
+msgid "This product includes software developed by Edwin Groothuis."
+msgstr ""
+
+#: src/usr/local/www/license.php:137
+msgid "2005-2016 University of Applied Sciences Rapperswil"
+msgstr ""
+
+#: src/usr/local/www/license.php:149
+msgid "Copyright (C) 2002-2016 OpenVPN Solutions LLC "
+msgstr ""
+
+#: src/usr/local/www/license.php:186
+msgid "Public Domain"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:56
+msgid ""
+"This entry cannot be deleted because it is still referenced by at least one "
+"pool."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:72
+#: src/usr/local/www/load_balancer_monitor.php:94
+#: src/usr/local/www/load_balancer_monitor_edit.php:202
+#: src/usr/local/www/load_balancer_pool.php:108
+#: src/usr/local/www/load_balancer_setting.php:107
+#: src/usr/local/www/load_balancer_virtual_server.php:128
+msgid "Monitors"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:87
+#: src/usr/local/www/load_balancer_pool.php:101
+#: src/usr/local/www/load_balancer_setting.php:100
+#: src/usr/local/www/status_lb_pool.php:110
+msgid "The load balancer configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:92
+#: src/usr/local/www/load_balancer_pool.php:86
+#: src/usr/local/www/load_balancer_pool.php:106
+#: src/usr/local/www/load_balancer_pool_edit.php:185
+#: src/usr/local/www/load_balancer_setting.php:105
+#: src/usr/local/www/load_balancer_virtual_server.php:126
+#: src/usr/local/www/status_lb_pool.php:59
+#: src/usr/local/www/status_lb_pool.php:119
+#: src/usr/local/www/status_lb_vs.php:51
+msgid "Pools"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:93
+#: src/usr/local/www/load_balancer_pool.php:107
+#: src/usr/local/www/load_balancer_setting.php:106
+#: src/usr/local/www/load_balancer_virtual_server.php:106
+#: src/usr/local/www/load_balancer_virtual_server.php:127
+#: src/usr/local/www/load_balancer_virtual_server.php:135
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:159
+#: src/usr/local/www/status_lb_pool.php:120
+#: src/usr/local/www/status_lb_vs.php:45 src/usr/local/www/status_lb_vs.php:52
+msgid "Virtual Servers"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:101
+#: src/usr/local/www/load_balancer_pool.php:124
+#: src/usr/local/www/load_balancer_pool_edit.php:73
+#: src/usr/local/www/load_balancer_pool_edit.php:356
+#: src/usr/local/www/load_balancer_pool_edit.php:362
+#: src/usr/local/www/status_gateways.php:62
+#: src/usr/local/www/status_lb_pool.php:136
+msgid "Monitor"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:128
+msgid "Edit monitor"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:129
+msgid "Copy monitor"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor.php:130
+msgid "Delete monitor"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:64
+msgid "Load Balancer: Monitor:"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:93
+msgid ""
+"This monitor name has already been used.  Monitor names must be unique."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:98
+#: src/usr/local/www/load_balancer_pool_edit.php:85
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:89
+msgid "Spaces or slashes cannot be used in the 'name' field."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:102
+#: src/usr/local/www/load_balancer_pool_edit.php:89
+msgid "The 'name' field must be 16 characters or less."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:117
+#: src/usr/local/www/services_dhcp_edit.php:170
+#: src/usr/local/www/services_dhcpv6_edit.php:118
+msgid "The hostname can only contain the characters A-Z, 0-9 and '-'."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:123
+msgid "HTTP(s) codes must be from RFC2616."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:127
+msgid "The path to monitor must be set."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:151
+#, php-format
+msgid "modified '%s' monitor:"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:207
+msgid "ICMP"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:207
+msgid "TCP"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:207
+#: src/usr/local/www/system_advanced_admin.php:314
+msgid "HTTP"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:207
+#: src/usr/local/www/system_advanced_admin.php:322
+msgid "HTTPS"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:207
+msgid "Send/Expect"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:267
+msgid "Edit Load Balancer - Monitor Entry"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:292
+msgid "HTTP Options"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:297
+#: src/usr/local/www/load_balancer_monitor_edit.php:323
+msgid "Path"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:307
+#: src/usr/local/www/load_balancer_monitor_edit.php:333
+msgid "Hostname for Host: header if needed."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:311
+msgid "HTTP Code"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:318
+#: src/usr/local/www/services_captiveportal.php:1011
+msgid "HTTPS Options"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:337
+msgid "HTTPS Code"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:344
+msgid "Send/Expect Options"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:349
+#: src/usr/local/www/services_wol.php:156
+msgid "Send"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_monitor_edit.php:356
+msgid "Expect"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool.php:60
+msgid ""
+"This entry cannot be deleted because it is still referenced by at least one "
+"virtual server."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool.php:115
+#: src/usr/local/www/load_balancer_virtual_server.php:144
+#: src/usr/local/www/status_ipsec_leases.php:52
+#: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:61
+msgid "Pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool.php:122
+#: src/usr/local/www/services_dhcp.php:936
+#: src/usr/local/www/status_lb_pool.php:135
+#: src/usr/local/www/status_lb_vs.php:65
+#: src/usr/local/www/vpn_openvpn_client.php:474
+#: src/usr/local/www/vpn_openvpn_csc.php:303
+#: src/usr/local/www/vpn_openvpn_server.php:633
+#: src/usr/local/www/vpn_openvpn_server.php:657
+msgid "Servers"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool.php:163
+#: src/usr/local/www/services_dhcp.php:706
+msgid "Edit pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool.php:164
+msgid "Copy pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool.php:165
+#: src/usr/local/www/services_dhcp.php:708
+msgid "Delete pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:60
+msgid "Load Balancer: Pool:"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:73
+#: src/usr/local/www/vpn_openvpn_csc.php:326
+msgid "Server List"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:80
+msgid "This pool name has already been used.  Pool names must be unique."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:93
+#, php-format
+msgid "The name '%s' is a reserved word and cannot be used."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:97
+#, php-format
+msgid "Sorry, an alias is already named %s."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:101
+msgid "The port must be an integer between 1 and 65535, or a port alias."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:106
+msgid "The retry value must be an integer between 1 and 65535."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:110
+msgid "The submitted mode is not valid."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:116
+#, php-format
+msgid "%s is not a valid IP address or IPv4 subnet (in \"enabled\" list)."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:118
+#, php-format
+msgid ""
+"%s is a subnet containing more than 64 IP addresses (in \"enabled\" list)."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:126
+#, php-format
+msgid "%s is not a valid IP address or IPv4 subnet (in \"disabled\" list)."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:128
+#, php-format
+msgid ""
+"%s is a subnet containing more than 64 IP addresses (in \"disabled\" list)."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:140
+msgid "Invalid monitor chosen."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:150
+#, php-format
+msgid " modified '%s' pool:"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:302
+msgid "Add/Edit Load Balancer - Pool Entry"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:316
+msgid "Load Balance"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:317
+msgid "Manual Failover"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:333
+msgid ""
+"This is the port the servers are listening on. A port alias listed in "
+"Firewall -> Aliases may also be specified here."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:341
+msgid ""
+"Optionally specify how many times to retry checking a server before "
+"declaring it down."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:345
+msgid "Add Item to the Pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:367
+msgid "Server IP Address"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:377
+msgid "Add to pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:386
+msgid "Current Pool Members"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:388
+msgid "*Members"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:414
+msgid "Enabled (Default)"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:440
+msgid "Move to enabled list"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:447
+msgid "Move to disabled list"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:56
+msgid "Timeout must be a numeric value"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:60
+msgid "Interval must be a numeric value"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:65
+msgid "Prefork must be a numeric value"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:68
+msgid "Prefork value must be between 1 and 32"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:113
+msgid "Relayd Global Settings"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:120
+msgid ""
+"Set the global timeout in milliseconds for checks. Leave blank to use the "
+"default value of 1000 ms."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:124
+msgid "Interval"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:127
+msgid ""
+"Set the interval in seconds at which the member of a pool will be checked. "
+"Leave blank to use the default interval of 10 seconds."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:131
+msgid "Prefork"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_setting.php:134
+msgid ""
+"Number of processes forked in advance by relayd. Leave blank to use the "
+"default value of 5 processes."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server.php:121
+msgid "The virtual server configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server.php:145
+msgid "Fallback pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server.php:178
+msgid "Edit virtual server"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server.php:179
+msgid "Copy virtual server"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server.php:180
+msgid "Delete virtual server"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server.php:189
+msgid "No virtual servers have been configured."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:57
+msgid "Load Balancer: Virtual Server:"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:75
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:255
+msgid "Relay Protocol"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:84
+msgid ""
+"This virtual server name has already been used.\tVirtual server names must "
+"be unique."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:93
+msgid "The 'name' field must be 32 characters or less."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:97
+msgid ""
+"The port must be an integer between 1 and 65535, a port alias, or left blank."
+""
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:101
+#, php-format
+msgid "%s is not a valid IP address, IPv4 subnet, or alias."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:103
+#, php-format
+msgid "%s is a subnet containing more than 64 IP addresses."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:107
+msgid "The submitted relay protocol is not valid."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:111
+msgid "A Fall Back Pool cannot be selected when using the DNS relay protocol."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:120
+#, php-format
+msgid "modified '%s' vs:"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:122
+#, php-format
+msgid "created '%s' vs:"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:173
+msgid "Edit Load Balancer - Virtual Server Entry"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:191
+#: src/usr/local/www/services_captiveportal_ip_edit.php:224
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:143
+#: src/usr/local/www/services_dnsmasq_edit.php:216
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:134
+#: src/usr/local/www/services_unbound_host_edit.php:231
+msgid "*IP Address"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:194
+msgid ""
+"This is normally the WAN IP address for the server to listen on. All "
+"connections to this IP and port will be forwarded to the pool cluster. A "
+"host alias listed in Firewall -&gt; Aliases may also be specified here."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:203
+msgid ""
+"Port that the clients will connect to. All connections to this port will be "
+"forwarded to the pool cluster. If left blank listening ports from the pool "
+"will be used. A port alias listed in Firewall -&gt; Aliases may also be "
+"specified here."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:209
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:221
+msgid "Virtual Server Pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:229
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:240
+msgid "Fall-back Pool"
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:272
+msgid ""
+"Don't forget to add a firewall rule for the virtual server/pool after "
+"finished setting it up."
+msgstr ""
+
+#: src/usr/local/www/pkg.php:39 src/usr/local/www/pkg.php:170
+#: src/usr/local/www/pkg.php:174 src/usr/local/www/pkg_edit.php:50
+#: src/usr/local/www/pkg_edit.php:512 src/usr/local/www/pkg_edit.php:516
+msgid "Package"
+msgstr ""
+
+#: src/usr/local/www/pkg.php:39 src/usr/local/www/pkg.php:174
+#: src/usr/local/www/pkg_edit.php:50 src/usr/local/www/pkg_edit.php:516
+msgid "Editor"
+msgstr ""
+
+#: src/usr/local/www/pkg.php:42 src/usr/local/www/pkg_edit.php:53
+msgid "No valid package defined."
+msgstr ""
+
+#: src/usr/local/www/pkg.php:50
+#, php-format
+msgid "Package path %s not found."
+msgstr ""
+
+#: src/usr/local/www/pkg.php:52
+#, php-format
+msgid "Invalid path %s specified."
+msgstr ""
+
+#: src/usr/local/www/pkg.php:57
+msgid "Try reinstalling the package."
+msgstr ""
+
+#: src/usr/local/www/pkg.php:66
+#, php-format
+msgid "File not found %s."
+msgstr ""
+
+#: src/usr/local/www/pkg.php:265
+msgid "Saving changes..."
+msgstr ""
+
+#: src/usr/local/www/pkg.php:266
+msgid "Confirmation Required to save changes."
+msgstr ""
+
+#: src/usr/local/www/pkg.php:325
+msgid "Filter by: "
+msgstr ""
+
+#: src/usr/local/www/pkg.php:337
+msgid "Filter field: "
+msgstr ""
+
+#: src/usr/local/www/pkg.php:349
+msgid "Filter text: "
+msgstr ""
+
+#: src/usr/local/www/pkg.php:384
+#, php-format
+msgid "Displaying page %1$s of %2$s"
+msgstr ""
+
+#: src/usr/local/www/pkg.php:385
+msgid "Rows per page: "
+msgstr ""
+
+#: src/usr/local/www/pkg.php:518
+msgid "Edit this item"
+msgstr ""
+
+#: src/usr/local/www/pkg.php:523
+msgid "Delete this item"
+msgstr ""
+
+#: src/usr/local/www/pkg.php:547
+msgid "Previous page"
+msgstr ""
+
+#: src/usr/local/www/pkg.php:560
+msgid "Next page"
+msgstr ""
+
+#: src/usr/local/www/pkg.php:578
+msgid "Add a new item"
+msgstr ""
+
+#: src/usr/local/www/pkg_edit.php:645
+msgid "Advanced Features"
+msgstr ""
+
+#: src/usr/local/www/pkg_edit.php:726 src/usr/local/www/services_dhcp.php:790
+msgid "General Options"
+msgstr ""
+
+#: src/usr/local/www/pkg_edit.php:1191
+msgid "Listen on All interfaces/ip addresses "
+msgstr ""
+
+#: src/usr/local/www/pkg_edit.php:1195
+msgid "loopback"
+msgstr ""
+
+#: src/usr/local/www/pkg_edit.php:1496 src/usr/local/www/pkg_edit.php:1515
+msgid "Show Advanced Options"
+msgstr ""
+
+#: src/usr/local/www/pkg_edit.php:1516
+msgid "Hide Advanced Options"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:83
+msgid "Visit official website"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:92 src/usr/local/www/pkg_mgr_installed.php:145
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:106
+msgid "View changelog"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:103
+#: src/usr/local/www/pkg_mgr_installed.php:156
+msgid "Package Dependencies"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:114
+msgid "Click to install"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:117
+#: src/usr/local/www/pkg_mgr_installed.php:176
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:126
+msgid "View more information"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:130 src/usr/local/www/pkg_mgr.php:136
+#: src/usr/local/www/pkg_mgr_install.php:252
+#: src/usr/local/www/pkg_mgr_installed.php:210
+msgid "Available Packages"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:135 src/usr/local/www/pkg_mgr_install.php:251
+#: src/usr/local/www/pkg_mgr_installed.php:204
+#: src/usr/local/www/pkg_mgr_installed.php:209
+#: src/usr/local/www/pkg_mgr_installed.php:216
+#: src/usr/local/www/widgets/include/installed_packages.inc:24
+msgid "Installed Packages"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:142 src/usr/local/www/pkg_mgr.php:164
+msgid "Search"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:153
+msgid "Search term"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:168
+msgid ""
+"Enter a search string or *nix regular expression to search package names and "
+"descriptions."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:175
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
+msgid "Packages"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:178
+#: src/usr/local/www/pkg_mgr_installed.php:219
+msgid "Please wait while the list of packages is retrieved and formatted."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr.php:182
+#: src/usr/local/www/pkg_mgr_installed.php:223
+msgid "Unable to retrieve package information."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:121
+msgid "Failed"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:244
+#: src/usr/local/www/pkg_mgr_install.php:246
+#: src/usr/local/www/system_update_settings.php:147
+msgid "System Update"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:247
+#: src/usr/local/www/system_update_settings.php:107
+#: src/usr/local/www/system_update_settings.php:148
+msgid "Update Settings"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:249
+#: src/usr/local/www/pkg_mgr_install.php:253
+msgid "Package Installer"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:276
+#, php-format
+msgid "Confirmation Required to reinstall package %s."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:279
+#, php-format
+msgid "Confirmation Required to remove package %s."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:283
+#, php-format
+msgid "Confirmation Required to install package %s."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:293
+msgid "Confirmation Required to reinstall all packages."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:297
+#, php-format
+msgid "Confirmation Required to upgrade package %1$s from %2$s to %3$s."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:301
+#, php-format
+msgid "Confirmation Required to update %s system."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:319
+msgid "Current Base System"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:327
+msgid "Latest Base System"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:335
+msgid "Retrieving"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:366
+msgid "Unable to retrieve system versions."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:381
+msgid "Updating System"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:382
+msgid "System update successfully completed."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:383
+msgid "System update failed!"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:384
+msgid "Please wait while the system update completes."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:386
+msgid "Package Removal"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:387
+#, php-format
+msgid "%1$s removal successfully completed."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:388
+#, php-format
+msgid "%1$s removal failed!"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:389
+#, php-format
+msgid "Please wait while the removal of %1$s completes."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:391
+msgid "Packages Reinstallation"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:392
+msgid "All packages reinstallation successfully completed."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:393
+msgid "All packages reinstallation failed!"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:394
+#: src/usr/local/www/pkg_mgr_install.php:560
+msgid "Please wait while the reinstallation of all packages completes."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:396
+msgid "Package Reinstallation"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:397
+#, php-format
+msgid "%1$s reinstallation successfully completed."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:398
+#, php-format
+msgid "%1$s reinstallation failed!"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:399
+#, php-format
+msgid "Please wait while the reinstallation of %1$s completes."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:401
+msgid "Package Installation"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:402
+#, php-format
+msgid "%1$s installation successfully completed."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:403
+#, php-format
+msgid "%1$s installation failed!"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:404
+#, php-format
+msgid "Please wait while the installation of %1$s completes."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:434
+msgid "Please wait while the update system initializes"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:448
+msgid "Creating restore point before package installation."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:488
+msgid "Up to date."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:489
+msgid "Confirm Update"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:535
+msgid "Reinstallation of all packages successfully completed."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:548
+msgid "Reinstallation of all packages failed."
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:558
+msgid "This may take several minutes. Do not leave or refresh the page!"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_install.php:561
+msgid "This may take several minutes!"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:77
+msgid "Category"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:100
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:70
+msgid "Package is configured, but not installed!"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:106
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:76
+#, php-format
+msgid "Newer than available (%s)"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:109
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:80
+#, php-format
+msgid "Upgrade available to %s"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:115
+msgid "Up-to-date"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:117
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:91
+msgid "Error comparing version"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:164
+#, php-format
+msgid "Remove package %s"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:168
+#, php-format
+msgid "Update package %s"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:171
+#, php-format
+msgid "Reinstall package %s"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:191
+msgid "Current"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:196
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:122
+msgid "Reinstall"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:198
+msgid "Newer version available"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:199
+msgid "Package is configured but not (fully) installed"
+msgstr ""
+
+#: src/usr/local/www/pkg_mgr_installed.php:227
+msgid "There are no packages currently installed."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:64
+#: src/usr/local/www/services_captiveportal.php:521
+#: src/usr/local/www/services_captiveportal_filemanager.php:139
+#: src/usr/local/www/services_captiveportal_hostname.php:104
+#: src/usr/local/www/services_captiveportal_ip.php:97
+#: src/usr/local/www/services_captiveportal_mac.php:164
+#: src/usr/local/www/services_captiveportal_vouchers.php:375
+#: src/usr/local/www/vpn_l2tp.php:168 src/usr/local/www/vpn_l2tp.php:182
+#: src/usr/local/www/vpn_l2tp.php:206 src/usr/local/www/vpn_l2tp_users.php:84
+msgid "Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:85
+#, php-format
+msgid "Captive Portal: zone %s: Restore default portal page"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:105
+#, php-format
+msgid "Captive Portal: zone %s: Restore default error page"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:125
+#, php-format
+msgid "Captive Portal: zone %s: Restore default logout page"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:216
+#: src/usr/local/www/services_captiveportal_zones_edit.php:50
+msgid "Zone name"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:216
+msgid "Authentication method"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:220
+msgid "RADIUS Protocol"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:222
+msgid "Primary RADIUS server IP address"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:231
+#, php-format
+msgid ""
+"The captive portal cannot be used on interface %s since it is part of a "
+"bridge."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:236
+#, php-format
+msgid ""
+"The captive portal cannot be used on interface %1$s since it is used already "
+"on %2$s instance."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:244
+#, php-format
+msgid "Authentication method %s is invalid."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:249
+msgid "Certificate must be specified for HTTPS login."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:252
+msgid "The HTTPS server name must be specified for HTTPS login."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:259
+msgid "The timeout must be at least 1 minute."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:275
+msgid ""
+"Hard timeout must be less than or equal to the Default lease time set on "
+"DHCP Server"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:282
+msgid "The idle timeout must be at least 1 minute."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:286
+msgid "The pass-through credit count must be a number or left blank."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:289
+msgid ""
+"The waiting period to restore pass-through credits must be above 0 hours."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:294
+#: src/usr/local/www/services_captiveportal.php:298
+#: src/usr/local/www/services_captiveportal.php:302
+#: src/usr/local/www/services_captiveportal.php:306
+#: src/usr/local/www/services_captiveportal_ip_edit.php:102
+#, php-format
+msgid "A valid IP address must be specified. [%s]"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:310
+#: src/usr/local/www/services_captiveportal.php:314
+#: src/usr/local/www/services_captiveportal.php:318
+#: src/usr/local/www/services_captiveportal.php:322
+#: src/usr/local/www/services_captiveportal.php:326
+#, php-format
+msgid "A valid port number must be specified. [%s]"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:330
+msgid ""
+"The maximum number of concurrent connections per client IP address may not "
+"be larger than the global maximum."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:334
+msgid ""
+"The NAS-Identifier must be 3-253 characters long and should only contain "
+"ASCII characters."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:522
+#: src/usr/local/www/services_captiveportal_filemanager.php:140
+#: src/usr/local/www/services_captiveportal_hostname.php:105
+#: src/usr/local/www/services_captiveportal_ip.php:98
+#: src/usr/local/www/services_captiveportal_mac.php:59
+#: src/usr/local/www/services_captiveportal_mac.php:165
+#: src/usr/local/www/services_captiveportal_mac_edit.php:69
+#: src/usr/local/www/services_captiveportal_vouchers.php:376
+msgid "MACs"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:523
+#: src/usr/local/www/services_captiveportal_filemanager.php:141
+#: src/usr/local/www/services_captiveportal_hostname.php:106
+#: src/usr/local/www/services_captiveportal_ip.php:62
+#: src/usr/local/www/services_captiveportal_ip.php:99
+#: src/usr/local/www/services_captiveportal_ip_edit.php:66
+#: src/usr/local/www/services_captiveportal_mac.php:166
+#: src/usr/local/www/services_captiveportal_vouchers.php:377
+msgid "Allowed IP Addresses"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:524
+#: src/usr/local/www/services_captiveportal_filemanager.php:142
+#: src/usr/local/www/services_captiveportal_hostname.php:63
+#: src/usr/local/www/services_captiveportal_hostname.php:107
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:64
+#: src/usr/local/www/services_captiveportal_ip.php:100
+#: src/usr/local/www/services_captiveportal_mac.php:167
+#: src/usr/local/www/services_captiveportal_vouchers.php:378
+msgid "Allowed Hostnames"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:525
+#: src/usr/local/www/services_captiveportal_filemanager.php:143
+#: src/usr/local/www/services_captiveportal_hostname.php:108
+#: src/usr/local/www/services_captiveportal_ip.php:101
+#: src/usr/local/www/services_captiveportal_mac.php:168
+#: src/usr/local/www/services_captiveportal_vouchers.php:78
+#: src/usr/local/www/services_captiveportal_vouchers.php:379
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:53
+msgid "Vouchers"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:526
+#: src/usr/local/www/services_captiveportal_filemanager.php:67
+#: src/usr/local/www/services_captiveportal_filemanager.php:144
+#: src/usr/local/www/services_captiveportal_hostname.php:109
+#: src/usr/local/www/services_captiveportal_ip.php:102
+#: src/usr/local/www/services_captiveportal_mac.php:169
+#: src/usr/local/www/services_captiveportal_vouchers.php:380
+msgid "File Manager"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:532
+msgid "Captive Portal Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:543
+#: src/usr/local/www/services_dnsmasq.php:330
+msgid "*Interfaces"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:547
+msgid "Select the interface(s) to enable for captive portal."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:551
+msgid "Maximum concurrent connections"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:555
+msgid ""
+"Limits the number of concurrent connections to the captive portal HTTP(S) "
+"server. This does not set how many users can be logged in to the captive "
+"portal, but rather how many connections a single IP can establish to the "
+"portal web server."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:560
+msgid "Idle timeout (Minutes)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:563
+msgid ""
+"Clients will be disconnected after this amount of inactivity. They may log "
+"in again immediately, though. Leave this field blank for no idle timeout."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:567
+msgid "Hard timeout (Minutes)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:570
+msgid ""
+"Clients will be disconnected after this amount of time, regardless of "
+"activity. They may log in again immediately, though. Leave this field blank "
+"for no hard timeout (not recommended unless an idle timeout is set)."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:575
+msgid "Pass-through credits per MAC address."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:578
+msgid ""
+"Allows passing through the captive portal without authentication a limited "
+"number of times per MAC address. Once used up, the client can only log in "
+"with valid credentials until the waiting period specified below has expired. "
+"Recommended to set a hard timeout and/or idle timeout when using this for it "
+"to be effective."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:584
+msgid "Waiting period to restore pass-through credits. (Hours)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:587
+msgid ""
+"Clients will have their available pass-through credits restored to the "
+"original count after this amount of time since using the first one. This "
+"must be above 0 hours if pass-through credits are enabled."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:592
+msgid "Reset waiting period"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:595
+msgid ""
+"If enabled, the waiting period is reset to the original duration if access "
+"is attempted when all pass-through credits have already been exhausted."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:599
+msgid "Logout popup window"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:602
+msgid ""
+"If enabled, a popup window will appear when clients are allowed through the "
+"captive portal. This allows clients to explicitly disconnect themselves "
+"before the idle or hard timeout occurs."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:607
+msgid "Pre-authentication redirect URL"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:610
+msgid ""
+"Use this field to set $PORTAL_REDIRURL$ variable which can be accessed using "
+"the custom captive portal index.php page or error pages."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:614
+msgid "After authentication Redirection URL"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:617
+msgid ""
+"Clients will be redirected to this URL instead of the one they initially "
+"tried to access after they've authenticated."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:621
+msgid "Blocked MAC address redirect URL"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:624
+msgid ""
+"Blocked MAC addresses will be redirected to this URL when attempting access."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:628
+msgid "Concurrent user logins"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:631
+msgid ""
+"If enabled only the most recent login per username will be active. "
+"Subsequent logins will cause machines previously logged in with the same "
+"username to be disconnected."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:636
+msgid "MAC filtering"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:639
+msgid ""
+"If enabled no attempts will be made to ensure that the MAC address of "
+"clients stays the same while they are logged in. This is required when the "
+"MAC address of the client cannot be determined (usually because there are "
+"routers between pfSense and the clients). If this is enabled, RADIUS MAC "
+"authentication cannot be used."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:645
+msgid "Pass-through MAC Auto Entry"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:648
+#, php-format
+msgid ""
+"When enabled, a MAC passthrough entry is automatically added after the user "
+"has successfully authenticated. Users of that MAC address will never have to "
+"authenticate again. To remove the passthrough MAC entry either log in and "
+"remove it manually from the %1$sMAC tab%2$s or send a POST from another "
+"system. If this is enabled, RADIUS MAC authentication cannot be used. Also, "
+"the logout window will not be shown."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:658
+#, php-format
+msgid ""
+"If enabled with the automatically MAC passthrough entry created, the "
+"username used during authentication will be saved. To remove the passthrough "
+"MAC entry either log in and remove it manually from the %1$sMAC tab%2$s or "
+"send a POST from another system."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:664
+msgid "Per-user bandwidth restriction"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:671
+msgid "Default download (Kbit/s)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:678
+msgid "Default upload (Kbit/s)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:681
+msgid ""
+"If this option is set, the captive portal will restrict each user who logs "
+"in to the specified default bandwidth. RADIUS can override the default "
+"settings. Leave empty for no limit."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:689
+msgid "*Authentication method"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:724
+msgid "*RADIUS protocol"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:763
+msgid "Primary Authentication Source"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:766
+msgid "*Primary RADIUS server"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:790
+#: src/usr/local/www/services_captiveportal.php:843
+msgid "Secondary RADIUS server"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:796
+#: src/usr/local/www/services_captiveportal.php:849
+msgid "IP address of the RADIUS server to authenticate against."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:803
+#: src/usr/local/www/services_captiveportal.php:856
+msgid "RADIUS port. Leave blank for default (1812)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:810
+#: src/usr/local/www/services_captiveportal.php:863
+msgid ""
+"RADIUS shared secret. Leave blank to not use a shared secret (not "
+"recommended)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:816
+msgid "Secondary Authentication Source"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:819
+msgid "Primary RADIUS server"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:873
+#: src/usr/local/www/services_pppoe_edit.php:366
+#: src/usr/local/www/vpn_l2tp.php:273
+msgid "RADIUS"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:880
+msgid "Accounting Port"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:883
+msgid "Leave blank to use the default port (1813)."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:885
+msgid "Accounting updates"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:923
+msgid "RADIUS Options"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:928
+msgid "Reauthentication"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:931
+msgid ""
+"If reauthentication is enabled, Access-Requests will be sent to the RADIUS "
+"server for each user that is logged in every minute. If an Access-Reject is "
+"received for a user, that user is disconnected from the captive portal "
+"immediately."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:936
+msgid "RADIUS MAC Authentication"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:939
+msgid ""
+"If this option is enabled, the captive portal will try to authenticate users "
+"by sending their MAC address as the username and the password entered below "
+"to the RADIUS server."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:944
+msgid "MAC authentication secret"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:951
+msgid "RADIUS NAS IP Attribute"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:954
+msgid "Choose the IP to use for calling station attribute."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:958
+#: src/usr/local/www/system_usermanager_settings.php:199
+msgid "Session timeout"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:961
+msgid ""
+"When enabled, clients will be disconnected after the amount of time "
+"retrieved from the RADIUS Session-Timeout attribute."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:968
+msgid ""
+"If RADIUS type is set to Cisco, in Access-Requests the value of Calling-"
+"Station-ID will be set to the client's IP address and the Called-Station-Id "
+"to the client's MAC address. Default behavior is Calling-Station-Id = "
+"client's MAC address and Called-Station-ID = pfSense's WAN IP address."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:974
+msgid "Accounting style"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:977
+msgid ""
+"When enabled, data counts for RADIUS accounting packets will be taken from "
+"the client perspective, not the NAS. Acct-Input-Octets will represent "
+"download, and Acct-Output-Octets will represent upload."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:982
+msgid "Idle time accounting"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:985
+msgid ""
+"When enabled, if a client is disconnected for exceeding the idle timeout the "
+"time spent idle is included in the total session time. Otherwise the session "
+"time reported to the RADIUS server is the time between when the session "
+"started and when the last activity was recorded."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:991
+msgid "NAS Identifier"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:994
+msgid ""
+"Specify a NAS identifier to override the default value (pfSense.localdomain)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1000
+msgid "Single dash"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1000
+msgid "Unformatted"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:998
+msgid "MAC address format"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1001
+#, php-format
+msgid ""
+"This option changes the MAC address format used in the whole RADIUS system. "
+"Change this if the username format also needs to be changed for RADIUS MAC "
+"authentication. %1$sDefault: 00:11:22:33:44:55 %1$sSingle dash: 001122-"
+"334455 %1$sIETF: 00-11-22-33-44-55 %1$sCisco: 0011.2233.4455 %1$sUnformatted:"
+" 001122334455"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1019
+msgid ""
+"When enabled, the username and password will be transmitted over an HTTPS "
+"connection to protect against eavesdroppers. A server name and certificate "
+"must also be specified below."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1024
+msgid "*HTTPS server name"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1027
+msgid ""
+"This name will be used in the form action for the HTTPS POST and should "
+"match the Common Name (CN) in the certificate (otherwise, the client browser "
+"will most likely display a security warning). Make sure captive portal "
+"clients can resolve this name in DNS and verify on the client that the IP "
+"resolves to the correct interface IP on pfSense."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1033
+msgid "*SSL Certificate"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1036
+#, php-format
+msgid ""
+"If no certificates are defined, one may be defined here: %1$sSystem &gt; "
+"Cert. Manager%2$s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1040
+msgid "HTTPS Forwards"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1043
+msgid ""
+"If this option is set, attempts to connect to SSL/HTTPS (Port 443) sites "
+"will not be forwarded to the captive portal. This prevents certificate "
+"errors from being presented to the user even if HTTPS logins are enabled. "
+"Users must attempt a connecton to an HTTP (Port 80) site to get forwarded to "
+"the captive portal. If HTTPS logins are enabled, the user will be redirected "
+"to the HTTPS login page."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1050
+msgid "HTML Page Contents"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1055
+msgid "Portal page contents"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1058
+#, php-format
+msgid ""
+"Upload an HTML/PHP file for the portal page here (leave blank to keep the "
+"current one). Make sure to include a form (POST to \"$PORTAL_ACTION$\") with "
+"a submit button (name=\"accept\") and a hidden field with name=\"redirurl\" "
+"and value=\"$PORTAL_REDIRURL$\". Include the \"auth_user\" and \"auth_pass\" "
+"and/or \"auth_voucher\" input fields if authentication is enabled, otherwise "
+"it will always fail.%1$sExample code for the form: %1$s&lt;form method="
+"&quot;post&quot; action="
+"&quot;$PORTAL_ACTION$&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;auth_user&quot; type="
+"&quot;text&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;auth_pass&quot; type="
+"&quot;password&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;auth_voucher&quot; type="
+"&quot;text&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;redirurl&quot; type=&quot;hidden&quot; value="
+"&quot;$PORTAL_REDIRURL$&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;zone&quot; type=&quot;hidden&quot; value="
+"&quot;$PORTAL_ZONE$&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;accept&quot; type=&quot;submit&quot; value="
+"&quot;Continue&quot;&gt;%1$s&lt;/form&gt;"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1082
+msgid "Current Portal Page"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1099
+#: src/usr/local/www/services_captiveportal.php:1133
+#: src/usr/local/www/services_captiveportal.php:1165
+msgid "Restore Default Page"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1108
+msgid "Auth error page contents"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1111
+msgid ""
+"The contents of the HTML/PHP file that is uploaded here are displayed when "
+"an authentication error occurs. It may include \"$PORTAL_MESSAGE$\", which "
+"will be replaced by the error or reply messages from the RADIUS server, if "
+"any."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1116
+msgid "Current Auth Error Page"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1142
+msgid "Logout page contents"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1145
+msgid ""
+"The contents of the HTML/PHP file that is uploaded here are displayed on "
+"authentication success when the logout popup is enabled."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1148
+msgid "Current Logout Page"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1181
+msgid ""
+"Don't forget to enable the DHCP server on the captive portal interface! Make "
+"sure that the default/maximum DHCP lease time is higher than the hard "
+"timeout entered on this page. Also, the DNS Forwarder or Resolver must be "
+"enabled for DNS lookups by unauthenticated clients to work."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:97
+#, php-format
+msgid "A file with the name '%s' already exists."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:104
+#, php-format
+msgid "The total size of all files uploaded may not exceed %s."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:153
+msgid "Upload a New File"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:164
+msgid "File"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:183
+msgid "Installed Files"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:203
+msgid "Delete file"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:214
+msgid "Total"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:244
+#: src/usr/local/www/services_ntpd_gps.php:331
+#: src/usr/local/www/services_ntpd_pps.php:127
+msgid "Notes"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:246
+msgid ""
+"Any files that are uploaded here with the filename prefix of captiveportal- "
+"will be made available in the root directory of the captive portal HTTP(S) "
+"server. An icon file named favicon.ico may also be uploaded and will remain "
+"without prefix. They may be referenced directly from the portal page HTML "
+"code using relative paths. Example: An image uploaded with the name "
+"'captiveportal-test.jpg' using the file manager can then be included in the "
+"portal page like this:"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:253
+msgid ""
+"In addition, .php files can also be uploaded for execution.\tThe filename "
+"can be passed to the custom page from the initial page by using text similar "
+"to:"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:255
+msgid "Acceptable usage policy"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_filemanager.php:256
+#, php-format
+msgid "The total size limit for all files is %s."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname.php:32
+#, php-format
+msgid ""
+"Adding new hostnames will allow a DNS hostname access to/from the captive "
+"portal without being taken to the portal page. This can be used for a web "
+"server serving images for the portal page, or a DNS server on another "
+"network, for example. By specifying %1$sfrom%2$s addresses, it may be used "
+"to always allow pass-through access from a client behind the captive portal."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname.php:136
+msgid "Edit hostname"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname.php:137
+msgid "Delete hostname"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname.php:145
+#, php-format
+msgid "All connections %1$sto%2$s the hostname are allowed"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname.php:146
+#, php-format
+msgid "All connections %1$sfrom%2$s the hostname are allowed"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname.php:147
+#: src/usr/local/www/services_captiveportal_ip.php:143
+#, php-format
+msgid "All connections %1$sto or from%2$s are allowed"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:96
+msgid "Allowed Hostname"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:101
+#, php-format
+msgid "A valid Hostname must be specified. [%s]"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:105
+#: src/usr/local/www/services_captiveportal_ip_edit.php:110
+#: src/usr/local/www/services_captiveportal_mac_edit.php:120
+msgid "Upload speed needs to be an integer"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:108
+#: src/usr/local/www/services_captiveportal_ip_edit.php:114
+#: src/usr/local/www/services_captiveportal_mac_edit.php:123
+msgid "Download speed needs to be an integer"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:117
+#, php-format
+msgid "Hostname [%s] already allowed."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:173
+msgid "Captive Portal Hostname Settings"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:180
+msgid ""
+"Use \"From\" to always allow a Hostname through the captive portal (without "
+"authentication). Use \"To\" to allow access from all clients (even non-"
+"authenticated ones) behind the portal to this Hostname."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:199
+#: src/usr/local/www/services_captiveportal_ip_edit.php:245
+#: src/usr/local/www/services_captiveportal_mac_edit.php:240
+msgid "Bandwidth up"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:202
+msgid "Enter a upload limit to be enforced on this Hostname in Kbit/s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:206
+#: src/usr/local/www/services_captiveportal_ip_edit.php:252
+#: src/usr/local/www/services_captiveportal_mac_edit.php:247
+msgid "Bandwidth down"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_hostname_edit.php:209
+msgid "Enter a download limit to be enforced on this Hostname in Kbit/s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip.php:110
+msgid "IP Addresses"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip.php:131
+msgid "Edit IP"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip.php:132
+msgid "Delete IP"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip.php:141
+#, php-format
+msgid "All connections %1$sto%2$s the address are allowed"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip.php:142
+#, php-format
+msgid "All connections %1$sfrom%2$s the address are allowed"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip.php:162
+msgid ""
+"Adding allowed IP addresses will allow IP access to/from these addresses "
+"through the captive portal without being taken to the portal page. This can "
+"be used for a web server serving images for the portal page or a DNS server "
+"on another network, for example."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:97
+msgid "Allowed IP address"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:97
+#: src/usr/local/www/services_dhcp.php:856
+#: src/usr/local/www/services_dhcp.php:884
+msgid "Subnet mask"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:106
+msgid "A valid subnet mask must be specified"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:118
+#: src/usr/local/www/services_captiveportal_mac_edit.php:126
+msgid "Upload speed must be between 1 and 999999"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:122
+#: src/usr/local/www/services_captiveportal_mac_edit.php:129
+msgid "Download speed must be between 1 and 999999"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:131
+#, php-format
+msgid "[%s] already allowed."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:220
+msgid "Edit Captive Portal IP Rule"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:233
+msgid "Enter a description here for reference only. (Not parsed)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:240
+msgid ""
+"Use \"From\" to always allow access to an address through the captive portal "
+"(without authentication). Use \"To\" to allow access from all clients (even "
+"non-authenticated ones) behind the portal to this IP."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:248
+msgid "Enter an upload limit to be enforced on this address in Kbit/s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_ip_edit.php:255
+msgid "Enter a download limit to be enforced on this address in Kbit/s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:88
+msgid "No entry exists yet!"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:93
+msgid "Please set the zone on which the operation should be allowed"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:106
+msgid "No entry exists for this username:"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:127
+msgid "The entry was successfully deleted"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:129
+msgid "No entry exists for this mac address:"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:160
+msgid "The Captive Portal MAC address configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:176
+#: src/usr/local/www/services_captiveportal_mac_edit.php:100
+#: src/usr/local/www/services_unbound_acls.php:300
+#: src/usr/local/www/status_logs_common.inc:936
+#: src/usr/local/www/status_logs_filter.php:149
+#: src/usr/local/www/status_logs_filter_dynamic.php:389
+#: src/usr/local/www/status_logs_vpn.php:139
+#: src/usr/local/www/status_logs_vpn.php:366
+#: src/usr/local/www/system_groupmanager.php:233
+#: src/usr/local/www/system_usermanager.php:438
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:77
+msgid "Action"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:200
+msgid "Edit MAC address"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:201
+msgid "Delete MAC address"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac.php:227
+msgid ""
+"Adding MAC addresses as \"pass\" MACs allows them access through the captive "
+"portal automatically without being taken to the portal page."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:111
+#, php-format
+msgid ""
+"The MAC address %s belongs to a local interface. It cannot be used here."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:116
+#, php-format
+msgid "A valid MAC address must be specified. [%s]"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:138
+#, php-format
+msgid "[%s] already exists."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:199
+msgid "Edit MAC Address Rules"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:206
+msgid "Choose what to do with packets coming from this MAC address."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:225
+msgid "*MAC Address"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:228
+msgid "6 hex octets separated by colons"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:236
+msgid ""
+"A description may be entered here for administrative reference (not parsed)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:243
+msgid "Enter an upload limit to be enforced on this MAC in Kbit/s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_mac_edit.php:250
+msgid "Enter a download limit to be enforced on this MAC in Kbit/s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:73
+#, php-format
+msgid "Submission on captiveportal page with unknown zone parameter: %s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:129
+msgid "Voucher invalid"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:132
+msgid "Voucher expired"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:155
+msgid "Cannot write private key file"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:177
+msgid "Need private RSA key to print vouchers"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:211
+msgid "charset"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:211
+msgid "rollbits"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:211
+msgid "ticketbits"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:211
+msgid "checksumbits"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:211
+msgid "publickey"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:211
+msgid "magic"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:214
+#: src/usr/local/www/services_captiveportal_vouchers.php:525
+msgid "Synchronize Voucher Database IP"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:214
+msgid "Sync port"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:214
+msgid "Sync password"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:214
+msgid "Sync username"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:223
+msgid "Need at least 2 characters to create vouchers."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:226
+msgid "Double quotes aren't allowed."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:229
+msgid "',' aren't allowed."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:232
+msgid "# of Bits to store Roll Id needs to be between 1..31."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:235
+msgid "# of Bits to store Ticket Id needs to be between 1..16."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:238
+msgid "# of Bits to store checksum needs to be between 1..31."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:241
+msgid "This doesn't look like an RSA Public key."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:244
+msgid "This doesn't look like an RSA Private key."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:247
+msgid "The voucher database cannot be sync'd to this host (itself)."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:316
+#, php-format
+msgid ""
+"The Captive Portal voucher database has been synchronized with %s (pfsense."
+"exec_php)."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:348
+#, php-format
+msgid "Voucher database has been synchronized from %1$s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:386
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:181
+#: src/usr/local/www/status_captiveportal.php:152
+#: src/usr/local/www/status_captiveportal_expire.php:75
+#: src/usr/local/www/status_captiveportal_test.php:83
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:72
+#: src/usr/local/www/status_captiveportal_vouchers.php:98
+msgid "Voucher Rolls"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:392
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:92
+msgid "Roll #"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:393
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:83
+msgid "Minutes/Ticket"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:394
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:84
+msgid "# of Tickets"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:395
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:206
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:85
+msgid "Comment"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:411
+msgid "Edit voucher roll"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:412
+msgid "Delete voucher roll"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:413
+msgid "Export vouchers for this roll to a .csv file"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:439
+#: src/usr/local/www/services_captiveportal_vouchers.php:450
+msgid "Create, Generate and Activate Rolls with Vouchers"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:455
+msgid "Voucher Public Key"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:457
+msgid ""
+"Paste an RSA public key (64 Bit or smaller) in PEM format here. This key is "
+"used to decrypt vouchers."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:461
+msgid "Voucher Private Key"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:463
+msgid ""
+"Paste an RSA private key (64 Bit or smaller) in PEM format here. This key is "
+"only used to generate encrypted vouchers and doesn't need to be available if "
+"the vouchers have been generated offline."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:467
+msgid "Character set"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:470
+msgid ""
+"Tickets are generated with the specified character set. It should contain "
+"printable characters (numbers, lower case and upper case letters) that are "
+"hard to confuse with others. Avoid e.g. 0/O and l/1."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:474
+msgid "# of Roll bits"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:477
+msgid ""
+"Reserves a range in each voucher to store the Roll # it belongs to. Allowed "
+"range: 1..31. Sum of Roll+Ticket+Checksum bits must be one Bit less than the "
+"RSA key size."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:481
+msgid "# of Ticket bits"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:484
+msgid ""
+"Reserves a range in each voucher to store the Ticket# it belongs to. Allowed "
+"range: 1..16. Using 16 bits allows a roll to have up to 65535 vouchers. A "
+"bit array, stored in RAM and in the config, is used to mark if a voucher has "
+"been used. A bit array for 65535 vouchers requires 8 KB of storage. "
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:490
+msgid "# of Checksum bits"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:493
+msgid ""
+"Reserves a range in each voucher to store a simple checksum over Roll # and "
+"Ticket#. Allowed range is 0..31."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:497
+msgid "Magic number"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:500
+msgid ""
+"Magic number stored in every voucher. Verified during voucher check. Size "
+"depends on how many bits are left by Roll+Ticket+Checksum bits. If all bits "
+"are used, no magic number will be used and checked."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:505
+msgid "Invalid voucher message"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:508
+msgid ""
+"Error message displayed for invalid vouchers on captive portal error page "
+"($PORTAL_MESSAGE$)."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:513
+msgid "Expired voucher message"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:516
+msgid ""
+"Error message displayed for expired vouchers on captive portal error page "
+"($PORTAL_MESSAGE$)."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:520
+msgid "Voucher Database Synchronization"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:527
+#, php-format
+msgid ""
+"IP address of master nodes webConfigurator to synchronize voucher database "
+"and used vouchers from.%1$sNOTE: this should be setup on the slave nodes and "
+"not the primary node!"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:532
+msgid "Voucher sync port"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:535
+msgid "The port of the master voucher node's webConfigurator. Example: 443 "
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:539
+msgid "Voucher sync username"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:542
+msgid "This is the username of the master voucher nodes webConfigurator."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:546
+msgid "Voucher sync password"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:549
+msgid "This is the password of the master voucher nodes webConfigurator."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:570
+msgid ""
+"Changing any Voucher parameter (apart from managing the list of Rolls) on "
+"this page will render existing vouchers useless if they were generated with "
+"different settings. Specifying the Voucher Database Synchronization options "
+"will not record any other value from the other options. They will be "
+"retrieved/synced from the master."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:606
+msgid "Generate new keys"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:92
+msgid "Minutes per ticket"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:102
+#, php-format
+msgid "Roll number %s already exists."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:108
+#, php-format
+msgid "Roll number must be numeric and less than %s"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:112
+#, php-format
+msgid "A roll has at least one voucher and less than %s."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:116
+msgid "Each voucher must be good for at least 1 minute."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:140
+#, php-format
+msgid "All %1$s vouchers from Roll %2$s marked unused"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:185
+msgid "*Roll #"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:188
+#, php-format
+msgid "Enter the Roll# (0..%d) found on top of the generated/printed vouchers"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:192
+msgid "*Minutes per ticket"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:195
+msgid ""
+"Defines the time in minutes that a user is allowed access. The clock starts "
+"ticking the first time a voucher is used for authentication."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:199
+msgid "*Count"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:202
+#, php-format
+msgid ""
+"Enter the number of vouchers (1..%d) found on top of the generated/printed "
+"vouchers. WARNING: Changing this number for an existing Roll will mark all "
+"vouchers as unused again"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers_edit.php:209
+msgid "Can be used to further identify this roll. Ignored by the system."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones.php:64
+msgid "The Captive Portal entry list has been changed."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones.php:69
+msgid "Captive Portal Zones"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones.php:74
+#: src/usr/local/www/services_rfc2136_edit.php:204
+msgid "Zone"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones.php:76
+#: src/usr/local/www/services_pppoe.php:104
+msgid "Number of users"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones.php:102
+msgid "Edit zone"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones.php:103
+msgid "Delete zone"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones_edit.php:35
+msgid "Add Zone"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones_edit.php:55
+msgid "The zone name can only contain letters, digits, and underscores ( _ )."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones_edit.php:60
+#, php-format
+msgid "Zone [%s] already exists."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones_edit.php:86
+msgid "Add Captive Portal Zone"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones_edit.php:90
+msgid "*Zone name"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones_edit.php:91
+msgid ""
+"Zone name. Can only contain letters, digits, and underscores (_) and may not "
+"start with a digit."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones_edit.php:95
+msgid "Zone description"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_zones_edit.php:102
+msgid "Save & Continue"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:65
+#: src/usr/local/www/services_checkip.php:72
+#: src/usr/local/www/services_checkip.php:82
+#: src/usr/local/www/services_checkip_edit.php:106
+#: src/usr/local/www/services_dyndns.php:78
+#: src/usr/local/www/services_rfc2136.php:65
+msgid "Check IP Services"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:70
+#: src/usr/local/www/services_dyndns.php:67
+#: src/usr/local/www/services_dyndns.php:76
+#: src/usr/local/www/services_dyndns.php:83
+#: src/usr/local/www/services_dyndns_edit.php:242
+#: src/usr/local/www/services_rfc2136.php:63
+msgid "Dynamic DNS Clients"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:71
+#: src/usr/local/www/services_dyndns.php:77
+#: src/usr/local/www/services_rfc2136.php:58
+#: src/usr/local/www/services_rfc2136.php:64
+#: src/usr/local/www/services_rfc2136_edit.php:148
+msgid "RFC 2136 Clients"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:89
+#: src/usr/local/www/services_checkip_edit.php:63
+msgid "URL"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:90
+#: src/usr/local/www/services_checkip_edit.php:155
+#: src/usr/local/www/services_checkip_edit.php:156
+msgid "Verify SSL Peer"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:130
+#: src/usr/local/www/services_dyndns.php:188
+msgid "Edit service"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:133
+#: src/usr/local/www/services_dyndns.php:191
+msgid "Disable service"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:136
+#: src/usr/local/www/services_dyndns.php:194
+msgid "Enable service"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:139
+#: src/usr/local/www/services_dyndns.php:197
+msgid "Delete service"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:161
+msgid ""
+"The server must return the client IP address as a string in the following "
+"format: "
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:165
+msgid ""
+"The first (highest in list) enabled check ip service will be used to check "
+"IP addresses for Dynamic DNS services, and RFC 2136 entries that have the "
+"\"Use public IP\" option enabled."
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:171
+msgid "Sample Server Configurations"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:173
+msgid "nginx with LUA"
+msgstr ""
+
+#: src/usr/local/www/services_checkip.php:182
+msgid "PHP"
+msgstr ""
+
+#: src/usr/local/www/services_checkip_edit.php:68
+msgid "The Check IP Service name contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/services_checkip_edit.php:71
+msgid "The Check IP Service URL is not valid."
+msgstr ""
+
+#: src/usr/local/www/services_checkip_edit.php:99
+msgid "New/Edited Check IP Services entry was posted."
+msgstr ""
+
+#: src/usr/local/www/services_checkip_edit.php:116
+msgid "Check IP Service"
+msgstr ""
+
+#: src/usr/local/www/services_checkip_edit.php:130
+msgid ""
+"The name of the service may only consist of the characters \"a-z, A-Z, 0-9 "
+"and _\"."
+msgstr ""
+
+#: src/usr/local/www/services_checkip_edit.php:134
+msgid "*URL"
+msgstr ""
+
+#: src/usr/local/www/services_checkip_edit.php:141
+msgid "User name"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:254
+#: src/usr/local/www/services_dhcpv6.php:215
+msgid "Range begin"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:254
+#: src/usr/local/www/services_dhcpv6.php:215
+msgid "Range end"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:260
+msgid ""
+"Ignore Denied Clients may not be used when a Failover Peer IP is defined."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:264
+msgid "A valid IPv4 address must be specified for range from."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:267
+msgid "A valid IPv4 address must be specified for range to."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:270
+#: src/usr/local/www/services_dhcpv6.php:279
+msgid "Range From and Range To must both be entered."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:273
+msgid "A valid IP address must be specified for the gateway."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:276
+msgid ""
+"A valid IP address must be specified for the primary/secondary WINS servers."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:282
+#: src/usr/local/www/services_dhcp_edit.php:247
+#, php-format
+msgid ""
+"The gateway address %s does not lie within the chosen interface's subnet."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:287
+msgid "A valid IP address must be specified for each of the DNS servers."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:291
+#: src/usr/local/www/services_dhcp_edit.php:258
+#: src/usr/local/www/services_dhcpv6.php:292
+msgid "The default lease time must be at least 60 seconds."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:313
+#, php-format
+msgid ""
+"The Captive Portal zone (%1$s) has Hard Timeout parameter set to a value "
+"bigger than Default lease time (%2$s)."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:319
+#: src/usr/local/www/services_dhcp_edit.php:261
+#: src/usr/local/www/services_dhcpv6.php:295
+msgid ""
+"The maximum lease time must be at least 60 seconds and higher than the "
+"default lease time."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:322
+#: src/usr/local/www/services_dhcp_edit.php:264
+#: src/usr/local/www/services_dhcpv6.php:298
+msgid ""
+"A valid domain name must be specified for the dynamic DNS registration."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:325
+msgid ""
+"A valid primary domain name server IP address must be specified for the "
+"dynamic domain name."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:329
+#: src/usr/local/www/services_dhcp_edit.php:271
+#: src/usr/local/www/services_dhcpv6.php:305
+msgid "Both a valid domain key and key name must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:335
+#: src/usr/local/www/services_dhcp_edit.php:277
+#: src/usr/local/www/services_dhcpv6.php:311
+#: src/usr/local/www/services_router_advertisements.php:175
+msgid "A valid domain search list must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:343
+msgid ""
+"If a mac allow list is specified, it must contain only valid partial MAC "
+"addresses."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:346
+msgid ""
+"If a mac deny list is specified, it must contain only valid partial MAC "
+"addresses."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:350
+msgid ""
+"A valid IP address or hostname must be specified for the primary/secondary "
+"NTP servers."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:353
+#: src/usr/local/www/services_dhcpv6.php:321
+msgid "A valid domain name must be specified for the DNS domain."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:356
+msgid ""
+"A valid IP address, hostname or URL must be specified for the TFTP server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:359
+msgid "A valid IP address must be specified for the network boot server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:363
+msgid "The network address cannot be used in the starting subnet range."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:366
+msgid "The broadcast address cannot be used in the ending subnet range."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:374
+#, php-format
+msgid "The subnet range cannot overlap with virtual IP address %s."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:390
+msgid ""
+"Cannot enable static ARP when there are static map entries without IP "
+"addresses. Ensure all static maps have IP addresses and try again."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:397
+msgid "Text type cannot include quotation marks."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:399
+msgid ""
+"String type must be enclosed in quotes like \"this\" or must be a series of "
+"octets specified in hexadecimal, separated by colons, like 01:23:45:67:89:ab:"
+"cd:ef"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:401
+msgid "Boolean type must be true, false, on, or off."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:403
+msgid "Unsigned 8-bit integer type must be a number in the range 0 to 255."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:405
+msgid "Unsigned 16-bit integer type must be a number in the range 0 to 65535."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:407
+msgid ""
+"Unsigned 32-bit integer type must be a number in the range 0 to 4294967295."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:409
+msgid "Signed 8-bit integer type must be a number in the range -128 to 127."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:411
+msgid ""
+"Signed 16-bit integer type must be a number in the range -32768 to 32767."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:413
+msgid ""
+"Signed 32-bit integer type must be a number in the range -2147483648 to "
+"2147483647."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:415
+msgid "IP address or host type must be an IP address or host name."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:422
+#: src/usr/local/www/services_dhcpv6.php:352
+#, php-format
+msgid ""
+"The DHCP relay on the %s interface must be disabled before enabling the DHCP "
+"server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:429
+#: src/usr/local/www/services_dhcpv6.php:369
+msgid "The range is invalid (first element higher than second element)."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:434
+#: src/usr/local/www/services_dhcpv6.php:364
+msgid "The specified range lies outside of the current subnet."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:444
+msgid ""
+"The specified range must not be within the DHCP range for this interface."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:457
+msgid ""
+"The specified range must not be within the range configured on a DHCP pool "
+"for this interface."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:468
+#: src/usr/local/www/services_dhcpv6.php:385
+#, php-format
+msgid "The DHCP range cannot overlap any static DHCP mappings."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:684
+#: src/usr/local/www/status_dhcp_leases.php:496
+msgid "Pool Start"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:685
+#: src/usr/local/www/status_dhcp_leases.php:497
+msgid "Pool End"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:742
+#: src/usr/local/www/services_dhcpv6.php:505
+msgid "The static mapping configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:777
+#, php-format
+msgid "%1$s has a CIDR mask of %2$s, which does not contain enough addresses."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:779
+msgid "This system has no interfaces configured with a static IPv4 address."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:781
+msgid ""
+"The DHCP Server requires a static IPv4 subnet large enough to serve "
+"addresses to clients."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:797
+msgid ""
+"DHCP Relay is currently enabled. DHCP Server canot be enabled while the DHCP "
+"Relay is enabled on any interface."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:804
+#, php-format
+msgid "Enable DHCP server on %s interface"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:809
+msgid ""
+"Editing pool-specific options. To return to the Interface, click its tab "
+"above."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:814
+msgid "BOOTP"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:821
+msgid "Deny unknown clients"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:828
+msgid "Ignore denied clients"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:831
+msgid ""
+"This option is not compatible with failover and cannot be enabled when a "
+"Failover Peer IP address is configured."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:835
+msgid "Ignore client identifiers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:838
+msgid ""
+"This option may be useful when a client can dual boot using different client "
+"identifiers but the same hardware (MAC) address.  Note that the resulting "
+"server behavior violates the official DHCP specification."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:844
+msgid "Pool Description"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:864
+msgid "In-use DHCP Pool Ranges:"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:877
+msgid "Available range"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:890
+#: src/usr/local/www/services_dhcpv6.php:638
+msgid "*Range"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:911
+msgid "Additional Pools"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:915
+msgid "Add pool"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:924
+msgid ""
+"If additional pools of addresses are needed inside of this subnet outside "
+"the above Range, they may be specified here."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:940
+#: src/usr/local/www/vpn_openvpn_csc.php:555
+msgid "WINS servers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:955
+#: src/usr/local/www/status_interfaces.php:152
+msgid "DNS servers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:958
+msgid ""
+"Leave blank to use the system default DNS servers: this interface's IP if "
+"DNS Forwarder or Resolver is enabled, otherwise the servers configured on "
+"the System / General Setup page."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:963
+msgid "Other Options"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:971
+msgid ""
+"The default is to use the IP on this interface of the firewall as the "
+"gateway. Specify an alternate gateway here if this is not the correct "
+"gateway for the network. Type \"none\" for no gateway assignment."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:975
+#: src/usr/local/www/services_dhcp_edit.php:552
+#: src/usr/local/www/services_dhcpv6.php:704
+#: src/usr/local/www/services_dyndns_edit.php:103
+#: src/usr/local/www/services_dyndns_edit.php:296
+msgid "Domain name"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:978
+msgid ""
+"The default is to use the domain name of this system as the default domain "
+"name provided by DHCP. An alternate domain name may be specified here."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:982
+#: src/usr/local/www/services_dhcp_edit.php:559
+#: src/usr/local/www/services_dhcpv6.php:711
+#: src/usr/local/www/services_router_advertisements.php:458
+msgid "Domain search list"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:985
+#: src/usr/local/www/services_dhcp_edit.php:562
+#: src/usr/local/www/services_dhcpv6.php:714
+msgid ""
+"The DHCP server can optionally provide a domain search list. Use the "
+"semicolon character as separator."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:989
+#: src/usr/local/www/services_dhcpv6.php:718
+msgid "Default lease time"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:992
+msgid ""
+"This is used for clients that do not ask for a specific expiration time. The "
+"default is 7200 seconds."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:996
+msgid "Maximum lease time"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:999
+#: src/usr/local/www/services_dhcp_edit.php:576
+msgid ""
+"This is the maximum lease time for clients that ask for a specific "
+"expiration time. The default is 86400 seconds."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1004
+msgid "Failover peer IP"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1007
+msgid ""
+"Leave blank to disable. Enter the interface IP address of the other machine. "
+"Machines must be using CARP. Interface's advskew determines whether the "
+"DHCPd process is Primary or Secondary. Ensure one machine's advskew &lt; 20 "
+"(and the other is &gt; 20)."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1014
+#: src/usr/local/www/services_dhcp.php:1393
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:93
+msgid "Static ARP"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1017
+msgid ""
+"This option persists even if DHCP server is disabled. Only the machines "
+"listed below will be able to communicate with the firewall on this interface."
+""
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1021
+msgid "Time format change"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1024
+msgid ""
+"By default DHCP leases are displayed in UTC time.\tBy checking this box DHCP "
+"lease time will be displayed in local time and set to the time zone selected."
+" This will be used for all DHCP interfaces lease time."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1028
+msgid "Statistics graphs"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1031
+msgid ""
+"Enable this to add DHCP leases statistics to the RRD graphs. Disabled by "
+"default."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1058
+#: src/usr/local/www/services_dhcp_edit.php:608
+#: src/usr/local/www/services_dhcpv6.php:764
+msgid "DDNS Domain"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1061
+#, php-format
+msgid ""
+"Leave blank to disable dynamic DNS registration.%1$sEnter the dynamic DNS "
+"domain which will be used to register client names in the DNS server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1066
+#: src/usr/local/www/services_dhcpv6.php:771
+msgid "DDNS Hostnames"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1069
+#: src/usr/local/www/services_dhcpv6.php:774
+msgid "Default registers host name option supplied by DHCP client."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1073
+msgid "Primary DDNS address"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1076
+msgid "Primary domain name server IP address for the dynamic domain name."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1080
+msgid "DNS Domain key"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1083
+msgid ""
+"Dynamic DNS domain key name which will be used to register client names in "
+"the DNS server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1087
+msgid "DNS Domain key secret"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1090
+msgid ""
+"Dynamic DNS domain key secret (HMAC-MD5) which will be used to register "
+"client names in the DNS server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1103
+msgid "MAC address control"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1109
+msgid "MAC Allow"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1112
+msgid ""
+"List of partial MAC addresses to allow, comma separated, no spaces, e.g.: 00:"
+"00:00,01:E5:FF"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1116
+msgid "MAC Deny"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1119
+msgid ""
+"List of partial MAC addresses to deny access, comma separated, no spaces, e."
+"g.: 00:00:00,01:E5:FF"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1138
+#: src/usr/local/www/services_dhcp_edit.php:652
+#: src/usr/local/www/services_dhcpv6.php:835
+#: src/usr/local/www/vpn_openvpn_server.php:1218
+msgid "NTP Server 1"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1145
+#: src/usr/local/www/services_dhcp_edit.php:660
+#: src/usr/local/www/services_dhcpv6.php:843
+#: src/usr/local/www/vpn_openvpn_server.php:1225
+msgid "NTP Server 2"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1161
+msgid "TFTP"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1167
+#: src/usr/local/www/services_dhcp_edit.php:686
+msgid "TFTP Server"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1170
+msgid ""
+"Leave blank to disable. Enter a valid IP address, hostname or URL for the "
+"TFTP server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1183
+#: src/usr/local/www/services_dhcpv6.php:863
+msgid "LDAP"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1189
+msgid "LDAP Server URI"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1192
+msgid ""
+"Leave blank to disable. Enter a full URI for the LDAP server in the form "
+"ldap://ldap.example.com/dc=example,dc=com "
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1205
+msgid "Network Booting"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1218
+msgid "Next Server"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1221
+msgid "Enter the IP address of the next server"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1225
+msgid "Default BIOS file name"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1232
+msgid "UEFI 32 bit file name"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1239
+msgid "UEFI 64 bit file name"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1242
+msgid ""
+"Both a filename and a boot server must be configured for this to work! All "
+"three filenames and a configured boot server are necessary for UEFI to work! "
+""
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1247
+#: src/usr/local/www/services_dhcpv6_edit.php:257
+msgid "Root path"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1250
+msgid "string-format: iscsi:(servername):(protocol):(port):(LUN):targetname "
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1263
+#: src/usr/local/www/services_dhcp.php:1269
+#: src/usr/local/www/services_dhcpv6.php:912
+msgid "Additional BOOTP/DHCP Options"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1274
+msgid ""
+"Enter the DHCP option number and the value for each item to include in the "
+"DHCP lease information."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1275
+#, php-format
+msgid "For a list of available options please visit this %1$s URL%2$s.%3$s"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1283
+msgid "Text"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1283
+msgid "String"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1283
+msgid "Boolean"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1284
+msgid "Unsigned 8-bit integer"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1284
+msgid "Unsigned 16-bit integer"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1284
+msgid "Unsigned 32-bit integer"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1285
+msgid "Signed 8-bit integer"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1285
+msgid "Signed 16-bit integer"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1285
+msgid "Signed 32-bit integer"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1285
+msgid "IP address or host"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1298
+msgid "Option"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1306
+#: src/usr/local/www/services_dhcpv6.php:940
+msgid "Number"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1388
+msgid "DHCP Static Mappings for this Interface"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1398
+#: src/usr/local/www/status_dhcp_leases.php:358
+msgid "Client Id"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1444
+#: src/usr/local/www/services_dhcpv6.php:1035
+#: src/usr/local/www/status_dhcp_leases.php:465
+msgid "Edit static mapping"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1445
+#: src/usr/local/www/services_dhcpv6.php:1036
+msgid "Delete static mapping"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:158
+msgid "Either MAC address or Client identifier must be specified"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:167
+#: src/usr/local/www/services_dhcpv6_edit.php:115
+msgid "The hostname cannot end with a hyphen according to RFC952"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:173
+#: src/usr/local/www/services_dhcpv6_edit.php:121
+#: src/usr/local/www/services_dnsmasq_edit.php:72
+#: src/usr/local/www/services_unbound_host_edit.php:87
+#: src/usr/local/www/system.php:191
+msgid ""
+"A valid hostname is specified, but the domain name part should be omitted"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:186
+msgid "Static ARP is enabled.  An IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:203
+msgid ""
+"This fully qualified hostname (Hostname + Domainname), IP, MAC address or "
+"Client identifier already exists."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:211
+#, php-format
+msgid "The IP address must not be within the DHCP range for this interface."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:216
+msgid ""
+"The IP address must not be within the range configured on a DHCP pool for "
+"this interface."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:224
+#, php-format
+msgid "The IP address must lie in the %s subnet."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:228
+#, php-format
+msgid "The IP address cannot be the %s network address."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:232
+#, php-format
+msgid "The IP address cannot be the %s broadcast address."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:237
+msgid "A valid IPv4 address must be specified for the gateway."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:240
+msgid ""
+"A valid IPv4 address must be specified for the primary/secondary WINS "
+"servers."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:254
+msgid "A valid IPV4 address must be specified for each of the DNS servers."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:267
+#: src/usr/local/www/services_dhcpv6.php:301
+msgid ""
+"A valid primary domain name server IPv4 address must be specified for the "
+"dynamic domain name."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:284
+msgid ""
+"A valid IPv4 address must be specified for the primary/secondary NTP servers."
+""
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:287
+msgid ""
+"A valid IPv4 address, hostname or URL must be specified for the TFTP server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:290
+msgid "A valid IPv4 address must be specified for the network boot server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:293
+msgid "A valid MAC address must be specified for use with static ARP."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:296
+msgid "A valid IPv4 address must be specified for use with static ARP."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:397
+#: src/usr/local/www/services_dhcpv6_edit.php:201
+msgid "Edit Static Mapping"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:431
+msgid "MAC address (6 hex octets separated by colons)"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:436
+msgid "Client Identifier"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:446
+#, php-format
+msgid ""
+"If an IPv4 address is entered, the address must be outside of the pool."
+"%1$sIf no IPv4 address is given, one will be dynamically allocated from the "
+"pool."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:454
+#: src/usr/local/www/services_dhcpv6_edit.php:238
+msgid "Name of the host, without domain part."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:459
+#: src/usr/local/www/services_dhcpv6_edit.php:250
+msgid "Netboot filename"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:462
+#: src/usr/local/www/services_dhcpv6_edit.php:253
+msgid ""
+"Name of the file that should be loaded when this host boots off of the "
+"network, overrides setting on main page."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:466
+msgid "Root Path"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:469
+msgid "Enter the root-path-string, overrides setting on main page."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:481
+msgid "ARP Table Static Entry"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:486
+#: src/usr/local/www/vpn_ipsec_mobile.php:632
+msgid "WINS Servers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:505
+#: src/usr/local/www/services_dhcpv6.php:687
+#: src/usr/local/www/services_pppoe_edit.php:353
+#: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
+#: src/usr/local/www/vpn_openvpn_csc.php:463
+msgid "DNS Servers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:539
+msgid ""
+"Note: leave blank to use the system default DNS servers - this interface's "
+"IP if DNS Forwarder or Resolver is enabled, otherwise the servers configured "
+"on the General page."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:548
+msgid ""
+"The default is to use the IP on this interface of the firewall as the "
+"gateway. Specify an alternate gateway here if this is not the correct "
+"gateway for the network."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:555
+#: src/usr/local/www/services_dhcpv6.php:707
+msgid ""
+"The default is to use the domain name of this system as the default domain "
+"name provided by DHCP. An alternate domain name may be specified here. "
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:566
+msgid "Default lease time (Seconds)"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:569
+msgid ""
+"Used for clients that do not ask for a specific expiration time. The default "
+"is 7200 seconds."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:573
+msgid "Maximum lease time (Seconds)"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:594
+#: src/usr/local/www/services_dhcpv6.php:757
+#: src/usr/local/www/services_dnsmasq.php:255
+#: src/usr/local/www/services_unbound.php:327
+msgid "DHCP Registration"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:601
+msgid "DDNS Hostname"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:611
+#: src/usr/local/www/services_dhcpv6.php:767
+msgid ""
+"Leave blank to disable dynamic DNS registration. Enter the dynamic DNS "
+"domain which will be used to register client names in the DNS server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:615
+#: src/usr/local/www/services_dhcpv6.php:778
+msgid "DDNS Server IP"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:618
+msgid ""
+"Enter the primary domain name server IP address for the dynamic domain name."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:622
+#: src/usr/local/www/services_dhcpv6.php:785
+msgid "DDNS Domain Key name"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:625
+#: src/usr/local/www/services_dhcpv6.php:788
+msgid ""
+"Enter the dynamic DNS domain key name which will be used to register client "
+"names in the DNS server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:629
+#: src/usr/local/www/services_dhcpv6.php:792
+msgid "DDNS Domain Key secret"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:632
+#: src/usr/local/www/services_dhcpv6.php:795
+msgid ""
+"Enter the dynamic DNS domain key secret which will be used to register "
+"client names in the DNS server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:644
+#: src/usr/local/www/services_dhcpv6.php:827
+msgid "NTP servers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:648
+#: src/usr/local/www/services_dhcpv6.php:831
+#: src/usr/local/www/vpn_openvpn_csc.php:504
+msgid "NTP Servers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:680
+msgid "TFTP servers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:689
+msgid ""
+"Leave blank to disable. Enter a full hostname or IP for the TFTP server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:88
+#, php-format
+msgid "Destination Server IP address %s is not a valid IPv4 address."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:102
+#: src/usr/local/www/services_dhcpv6_relay.php:102
+msgid "At least one Destination Server IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:129
+msgid ""
+"DHCP Server is currently enabled. Cannot enable the DHCP Relay service while "
+"the DHCP Server is enabled on any interface."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:144
+msgid "DHCP Relay Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:155
+#: src/usr/local/www/services_dhcpv6_relay.php:155
+msgid "*Interface(s)"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:159
+msgid "Interfaces without an IP address will not be shown."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:167
+#, php-format
+msgid ""
+"If this is checked, the DHCP relay will append the circuit ID (%s interface "
+"number) and the agent ID to the DHCP request."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:173
+#: src/usr/local/www/services_dhcpv6_relay.php:173
+msgid "*Destination server"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:178
+#: src/usr/local/www/services_dhcpv6_relay.php:177
+msgid "Destination server"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:182
+msgid ""
+"This is the IPv4 address of the server to which DHCP requests are relayed."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:199
+msgid "Add server"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:221
+#: src/usr/local/www/services_dhcpv6.php:224
+msgid "A valid prefix range must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:236
+#, php-format
+msgid "Prefix Delegation From address is not a valid IPv6 Netmask for %s"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:247
+#, php-format
+msgid "Prefix Delegation To address is not a valid IPv6 Netmask for %s"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:256
+#: src/usr/local/www/services_dhcpv6.php:268
+msgid "A valid range must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:261
+#: src/usr/local/www/services_dhcpv6.php:273
+#: src/usr/local/www/services_dhcpv6_edit.php:134
+#, php-format
+msgid "The prefix (upper %1$s bits) must be zero.  Use the form %2$s"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:282
+msgid "A valid IPv6 address must be specified for the gateway."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:288
+#: src/usr/local/www/services_router_advertisements.php:169
+msgid "A valid IPv6 address must be specified for each of the DNS servers."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:318
+msgid ""
+"A valid IPv6 address must be specified for the primary/secondary NTP servers."
+""
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:324
+msgid ""
+"A valid IPv6 address or hostname must be specified for the TFTP server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:327
+msgid "A valid URL must be specified for the network bootfile."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:335
+#, php-format
+msgid "The subnet range cannot overlap with virtual IPv6 address %s."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:556
+msgid ""
+"The DHCPv6 Server can only be enabled on interfaces configured with a static "
+"IPv6 address. This system has none."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:565
+#: src/usr/local/www/services_router_advertisements.php:259
+#: src/usr/local/www/services_router_advertisements.php:306
+msgid "Router Advertisements"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:570
+msgid "DHCPv6 Options"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:576
+msgid ""
+"DHCPv6 Relay is currently enabled. DHCPv6 Server canot be enabled while the "
+"DHCPv6 Relay is enabled on any interface."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:601
+#: src/usr/local/www/services_dhcpv6.php:614
+msgid "Subnet Mask"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:606
+msgid "Available Range"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:608
+msgid ""
+"Prefix Delegation subnet will be appended to the beginning of the defined "
+"range"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:663
+msgid "Prefix Delegation Range"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:672
+msgid "Prefix Delegation Size"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:685
+msgid ""
+"A Prefix range can be defined here for DHCP Prefix Delegation. This allows "
+"for assigning networks to subrouters. The start and end of the range must "
+"end on boundaries of the prefix delegation size."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:699
+msgid ""
+"Leave blank to use the system default DNS servers, this interface's IP if "
+"DNS forwarder is enabled, or the servers configured on the \"General\" page."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:721
+#, php-format
+msgid ""
+"Lease time in seconds. Used for clients that do not ask for a specific "
+"expiration time. %1$sThe default is 7200 seconds."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:726
+msgid "Max lease time"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:729
+#, php-format
+msgid ""
+"Maximum lease time for clients that ask for a specific expiration time. "
+"%1$sThe default is 86400 seconds."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:734
+msgid "Time Format Change"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:737
+msgid ""
+"By default DHCPv6 leases are displayed in UTC time. By checking this box "
+"DHCPv6 lease time will be displayed in local time and set to time zone "
+"selected. This will be used for all DHCPv6 interfaces lease time."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:781
+msgid ""
+"Enter the primary domain name server IPv4 address for the dynamic domain "
+"name."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:802
+#: src/usr/local/www/services_unbound_acls.php:234
+msgid "Allow"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:804
+msgid "Ignore"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:799
+msgid "DDNS Client Updates"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:805
+msgid ""
+"How Forward entries are handled when client indicates they wish to update "
+"DNS.  Allow prevents DHCP from updating Forward entries, Deny indicates that "
+"DHCP will do the updates and the client should not, Ignore specifies that "
+"DHCP will do the update and the client can also attempt the update usually "
+"using a different domain name."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:812
+msgid "DDNS Reverse"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:869
+msgid "LDAP URI"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:884
+#: src/usr/local/www/services_dhcpv6.php:890
+msgid "Network booting"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:897
+msgid "Bootfile URL"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:965
+msgid "Add Option"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:988
+#, php-format
+msgid ""
+"The DNS servers entered in %1$sSystem: General Setup%3$s (or the %2$sDNS "
+"forwarder%3$s if enabled) will be assigned to clients by the DHCP server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:994
+#, php-format
+msgid ""
+"The DHCP lease table can be viewed on the %1$sStatus: DHCPv6 leases%2$s page."
+""
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:1002
+msgid "DHCPv6 Static Mappings for this Interface"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:1007
+#: src/usr/local/www/services_dhcpv6_edit.php:108
+#: src/usr/local/www/status_dhcpv6_leases.php:439
+#: src/usr/local/www/status_dhcpv6_leases.php:536
+msgid "DUID"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_edit.php:141
+msgid "A valid DUID must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_edit.php:151
+msgid "This Hostname, IP or DUID already exists."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_edit.php:213
+msgid "Static DHCPv6 Mapping"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_edit.php:217
+msgid "*DUID"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_edit.php:221
+#, php-format
+msgid "Enter a DUID in the following format: %1$s %2$s"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_edit.php:230
+#, php-format
+msgid ""
+"If an IPv6 address is entered, the address must be outside of the pool."
+"%1$sIf no IPv6 address is given, one will be dynamically allocated from the "
+"pool."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_edit.php:260
+msgid "Enter the root-path string. This overrides setting on main page."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_relay.php:79
+msgid "Destination Server"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_relay.php:89
+#, php-format
+msgid "Destination Server IP address %s is not a valid IPv6 address."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_relay.php:129
+msgid ""
+"DHCPv6 Server is currently enabled. Cannot enable the DHCPv6 Relay service "
+"while the DHCPv6 Server is enabled on any interface."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_relay.php:144
+msgid "DHCPv6 Relay Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_relay.php:159
+msgid "Interfaces without an IPv6 address will not be shown."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_relay.php:168
+#, php-format
+msgid ""
+"If this is checked, the DHCPv6 relay will append the circuit ID (%s "
+"interface number) and the agent ID to the DHCPv6 request."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_relay.php:181
+msgid ""
+"This is the IPv6 address of the server to which DHCPv6 requests are relayed."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:144
+msgid ""
+"The DNS Resolver is enabled using this port. Choose a non-conflicting port, "
+"or disable DNS Resolver."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:152
+#: src/usr/local/www/services_unbound.php:146
+msgid "A valid port number must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:171
+msgid "Invalid custom options"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:239
+msgid "The DNS forwarder configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:244
+msgid "General DNS Forwarder Options"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:258
+#, php-format
+msgid ""
+"If this option is set machines that specify their hostname when requesting a "
+"DHCP lease will be registered in the DNS forwarder, so that their name can "
+"be resolved. The domain in %1$sSystem: General Setup%2$s should also be set "
+"to the proper value."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:267
+#: src/usr/local/www/services_unbound.php:336
+msgid "Static DHCP"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:270
+#, php-format
+msgid ""
+"If this option is set, DHCP static mappings will be registered in the DNS "
+"forwarder, so that their name can be resolved. The domain in %1$sSystem: "
+"General Setup%2$s should also be set to the proper value."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:278
+msgid "Prefer DHCP"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:281
+msgid ""
+"If this option is set DHCP mappings will be resolved before the manual list "
+"of names below. This only affects the name given for a reverse lookup (PTR)."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:286
+#: src/usr/local/www/services_dnsmasq.php:290
+#: src/usr/local/www/services_unbound.php:318
+msgid "DNS Query Forwarding"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:293
+#, php-format
+msgid ""
+"If this option is set %1$s DNS Forwarder (dnsmasq) will query the DNS "
+"servers sequentially in the order specified (%2$sSystem - General Setup - "
+"DNS Servers%3$s), rather than all at once in parallel. "
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:302
+#, php-format
+msgid ""
+"If this option is set %s DNS Forwarder (dnsmasq) will not forward A or AAAA "
+"queries for plain names, without dots or domain parts, to upstream name "
+"servers.\t If the name is not known from /etc/hosts or DHCP then a \"not "
+"found\" answer is returned. "
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:311
+#, php-format
+msgid ""
+"If this option is set %s DNS Forwarder (dnsmasq) will not forward reverse "
+"DNS lookups (PTR) for private addresses (RFC 1918) to upstream name servers. "
+" Any entries in the Domain Overrides section forwarding private \"n.n.n.in-"
+"addr.arpa\" names to a specific server are still forwarded. If the IP to "
+"name is not known from /etc/hosts, DHCP or a specific domain override then a "
+"\"not found\" answer is immediately returned. "
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:320
+#: src/usr/local/www/services_unbound.php:275
+msgid "Listen Port"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:324
+#: src/usr/local/www/services_unbound.php:279
+msgid ""
+"The port used for responding to DNS queries. It should normally be left "
+"blank unless another service needs to bind to TCP/UDP port 53."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:334
+msgid ""
+"Interface IPs used by the DNS Forwarder for responding to queries from "
+"clients. If an interface has both IPv4 and IPv6 IPs, both are used. Queries "
+"to other interface IPs not selected below are discarded. The default "
+"behavior is to respond to queries on every available IPv4 and IPv6 address."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:339
+msgid "Strict binding"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:342
+#, php-format
+msgid ""
+"If this option is set, the DNS forwarder will only bind to the interfaces "
+"containing the IP addresses selected above, rather than binding to all "
+"interfaces and discarding queries to other addresses.%1$sThis option does "
+"NOT work with IPv6. If set, dnsmasq will not bind to IPv6 addresses."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:348
+#: src/usr/local/www/services_unbound.php:344
+#: src/usr/local/www/services_unbound.php:358
+#: src/usr/local/www/vpn_openvpn_client.php:864
+#: src/usr/local/www/vpn_openvpn_server.php:1296
+msgid "Custom options"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:350
+msgid ""
+"Enter any additional options to add to the dnsmasq configuration here, "
+"separated by a space or newline."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:358
+#: src/usr/local/www/services_unbound.php:431
+msgid "Host Overrides"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:364
+#: src/usr/local/www/services_dnsmasq.php:438
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:67
+#: src/usr/local/www/services_dnsmasq_edit.php:63
+#: src/usr/local/www/services_dnsmasq_edit.php:265
+#: src/usr/local/www/services_unbound.php:437
+#: src/usr/local/www/services_unbound.php:513
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:63
+#: src/usr/local/www/services_unbound_host_edit.php:78
+#: src/usr/local/www/services_unbound_host_edit.php:280
+#: src/usr/local/www/system.php:150
+msgid "Domain"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:388
+#: src/usr/local/www/services_dnsmasq.php:412
+#: src/usr/local/www/services_unbound.php:462
+#: src/usr/local/www/services_unbound.php:486
+msgid "Edit host override"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:389
+#: src/usr/local/www/services_unbound.php:463
+msgid "Delete host override"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:405
+#: src/usr/local/www/services_unbound.php:479
+msgid "Alias for "
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:433
+#: src/usr/local/www/services_unbound.php:508
+msgid "Domain Overrides"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:460
+#: src/usr/local/www/services_unbound.php:536
+msgid "Edit domain override"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:461
+#: src/usr/local/www/services_unbound.php:537
+msgid "Delete domain override"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:482
+msgid ""
+"If the DNS forwarder is enabled, the DHCP service (if enabled) will "
+"automatically serve the LAN IP address as a DNS server to DHCP clients so "
+"they will use the forwarder."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:484
+#, php-format
+msgid ""
+"The DNS forwarder will use the DNS servers entered in %1$sSystem > General "
+"Setup%2$s or those obtained via DHCP or PPP on WAN if &quot;Allow DNS server "
+"list to be overridden by DHCP/PPP on WAN&quot; is checked. If that option is "
+"not used (or if a static IP address is used on WAN), at least one DNS server "
+"must be manually specified on the %1$sSystem > General Setup%2$s page."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:79
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:74
+msgid "A valid domain must be specified after _msdcs."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:82
+#: src/usr/local/www/services_dnsmasq_edit.php:78
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:77
+#: src/usr/local/www/services_unbound_host_edit.php:93
+msgid "A valid domain must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:86
+msgid ""
+"A valid IP address must be specified, or # for an exclusion or ! to not "
+"forward at all."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:90
+msgid "An interface IP address must be specified for the DNS query source."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:120
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:112
+msgid "Edit Domain Override"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:131
+msgid "Domain Override Options"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:135
+#: src/usr/local/www/services_dnsmasq_edit.php:208
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:127
+#: src/usr/local/www/services_unbound_host_edit.php:223
+#: src/usr/local/www/system.php:438
+msgid "*Domain"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:138
+#, php-format
+msgid ""
+"Domain to override (NOTE: this does not have to be a valid TLD!)%1$se.g.: "
+"test or mycompany.localdomain or 1.168.192.in-addr.arpa"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:146
+#, php-format
+msgid ""
+"IP address of the authoritative DNS server for this domain%1$se.g.: 192.168."
+"100.100%1$sOr enter # for an exclusion to pass through this host/subdomain "
+"to standard nameservers instead of a previous override.%1$sOr enter ! for "
+"lookups for this host/subdomain to NOT be forwarded anywhere."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:153
+msgid "Source IP"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:155
+msgid ""
+"Source IP address for queries to the DNS server for the override domain. "
+"Leave blank unless the DNS server is accessed through a VPN tunnel."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:69
+#: src/usr/local/www/system.php:188
+msgid ""
+"The hostname can only contain the characters A-Z, 0-9 and '-'. It may not "
+"start or end with '-'."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:110
+#: src/usr/local/www/services_unbound_host_edit.php:125
+msgid "Alias Domain"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:115
+#: src/usr/local/www/services_unbound_host_edit.php:131
+msgid ""
+"Hostnames in an alias list can only contain the characters A-Z, 0-9 and '-'. "
+"They may not start or end with '-'."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:118
+#: src/usr/local/www/services_unbound_host_edit.php:134
+msgid ""
+"A valid alias hostname is specified, but the domain name part should be "
+"omitted"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:124
+#: src/usr/local/www/services_unbound_host_edit.php:139
+msgid "A valid domain must be specified in alias list."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:139
+#: src/usr/local/www/services_unbound_host_edit.php:153
+msgid "This host/domain already exists."
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:185
+#: src/usr/local/www/services_unbound_host_edit.php:200
+msgid "Edit Host Override"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:196
+#: src/usr/local/www/services_unbound_host_edit.php:211
+msgid "Host Override Options"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:203
+#: src/usr/local/www/services_unbound_host_edit.php:218
+#, php-format
+msgid "Name of the host, without the domain part%1$se.g.: \"myhost\""
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:211
+#: src/usr/local/www/services_unbound_host_edit.php:226
+#, php-format
+msgid "Domain of the host%1$se.g.: \"example.com\""
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:218
+#: src/usr/local/www/services_unbound_host_edit.php:233
+#, php-format
+msgid "IP address of the host%1$se.g.: 192.168.100.100 or fd00:abcd::1"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:239
+#: src/usr/local/www/services_unbound_host_edit.php:254
+msgid "Additional Names for this Host"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:258
+#: src/usr/local/www/services_unbound_host_edit.php:273
+msgid "Host name"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq_edit.php:288
+#: src/usr/local/www/services_unbound_host_edit.php:303
+msgid "Add Host Name"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns.php:90
+#: src/usr/local/www/services_ntpd_acls.php:208
+#: src/usr/local/www/status_openvpn.php:242
+#: src/usr/local/www/status_openvpn.php:303
+#: src/usr/local/www/status_services.php:86
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:168
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:221
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:75
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:123
+msgid "Service"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns.php:92
+#: src/usr/local/www/services_rfc2136.php:84
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:170
+msgid "Cached IP"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns.php:219
+#, php-format
+msgid ""
+"IP addresses appearing in %1$sgreen%2$s are up to date with Dynamic DNS "
+"provider. "
+msgstr ""
+
+#: src/usr/local/www/services_dyndns.php:220
+msgid ""
+"An update for an IP address can be forced on the edit page for that service."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:92
+msgid "Service type"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:107
+#: src/usr/local/www/services_dyndns_edit.php:384
+msgid "Update URL"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:136
+msgid "The hostname contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:143
+msgid "The MX contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:146
+#: src/usr/local/www/system_usermanager.php:196
+#: src/usr/local/www/vpn_l2tp_users_edit.php:87
+msgid "The username contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:252
+msgid "Dynamic DNS Client"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:265
+msgid "*Service Type"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:274
+msgid "*Interface to monitor"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:281
+msgid "*Interface to send update from"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:284
+msgid "This is almost always the same as the Interface to Monitor. "
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:301
+#, php-format
+msgid ""
+"Enter the complete fully qualified domain name. Example: myhost.dyndns."
+"org%1$she.net tunnelbroker: Enter the tunnel ID.%1$sGleSYS: Enter the record "
+"ID.%1$sDNSimple: Enter only the domain name.%1$sNamecheap, Cloudflare, "
+"GratisDNS: Enter the hostname and the domain separately, with the domain "
+"being the domain or subdomain zone being handled by the provider."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:311
+msgid "MX"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:314
+msgid ""
+"Note: With DynDNS service only a hostname can be used, not an IP address. "
+"Set this option only if a special MX record is needed. Not all services "
+"support this."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:319
+msgid "Wildcards"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:326
+msgid "CloudFlare Proxy"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:329
+#, php-format
+msgid ""
+"Note: This enables CloudFlares Virtual DNS proxy.  When Enabled it will "
+"route all traffic through their servers. By Default this is disabled and "
+"your Real IP is exposed.More info: %s"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:335
+msgid "Verbose logging"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:342
+msgid "CURL options"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:359
+#, php-format
+msgid ""
+"Username is required for all types except Namecheap, FreeDNS and Custom "
+"Entries.%1$sRoute 53: Enter the Access Key ID.%1$sGleSYS: Enter the API user."
+"%1$sFor Custom Entries, Username and Password represent HTTP Authentication "
+"username and passwords."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:369
+#, php-format
+msgid ""
+"FreeDNS (freedns.afraid.org): Enter the \"Authentication Token\" provided by "
+"FreeDNS.%1$sRoute 53: Enter the Secret Access Key.%1$sGleSYS: Enter the API "
+"key.%1$sDNSimple: Enter the API token."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:376
+msgid "Zone ID"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:379
+#, php-format
+msgid ""
+"Route53: Enter AWS Region and Zone ID in the form REGION/ZONEID (example: "
+"\"us-east-1/A1B2C3D4E5F6Z\").%1$sDNSimple: Enter the Record ID of record to "
+"update."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:387
+msgid ""
+"This is the only field required by for Custom Dynamic DNS, and is only used "
+"by Custom Entries."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:391
+msgid "Result Match"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:400
+#: src/usr/local/www/services_rfc2136_edit.php:78
+msgid "TTL"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:403
+msgid "Choose TTL for the dns record."
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:422
+#: src/usr/local/www/services_rfc2136_edit.php:300
+msgid "Save & Force Update"
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy.php:71
+msgid "The IGMP entry list has been changed."
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy.php:118
+msgid "Edit IGMP entry"
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy.php:119
+msgid "Delete IGMP entry"
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy.php:145
+msgid ""
+"Please add the interface for upstream, the allowed subnets, and the "
+"downstream interfaces for the proxy to allow. Only one \"upstream\" "
+"interface can be configured."
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy_edit.php:71
+msgid "Only one 'upstream' interface can be configured."
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy_edit.php:145
+msgid "IGMP Proxy Edit"
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy_edit.php:172
+msgid "Upstream Interface"
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy_edit.php:172
+msgid "Downstream Interface"
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy_edit.php:173
+#, php-format
+msgid ""
+"The upstream network interface is the outgoing interface which is "
+"responsible for communicating to available multicast data sources. There can "
+"only be one upstream interface.%1$sDownstream network interfaces are the "
+"distribution\tinterfaces to the destination networks, where multicast "
+"clients can join groups and receive multicast data. One or more downstream "
+"interfaces must be configured."
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy_edit.php:180
+msgid "Threshold"
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy_edit.php:183
+msgid ""
+"Defines the TTL threshold for the network interface. Packets with a lower "
+"TTL than the threshold value will be ignored. This setting is optional, and "
+"by default the threshold is 1."
+msgstr ""
+
+#: src/usr/local/www/services_igmpproxy_edit.php:243
+msgid "Add network"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:44
+msgid "Upgraded settings from openttpd"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:57
+msgid "The supplied value for NTP Orphan Mode is invalid."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:203
+#: src/usr/local/www/services_ntpd_acls.php:161
+#: src/usr/local/www/services_ntpd_acls.php:176
+#: src/usr/local/www/services_ntpd_gps.php:321
+#: src/usr/local/www/services_ntpd_pps.php:117
+msgid "ACLs"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:204
+#: src/usr/local/www/services_ntpd_acls.php:177
+#: src/usr/local/www/services_ntpd_gps.php:310
+#: src/usr/local/www/services_ntpd_gps.php:322
+#: src/usr/local/www/services_ntpd_pps.php:118
+msgid "Serial GPS"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:205
+#: src/usr/local/www/services_ntpd_acls.php:178
+#: src/usr/local/www/services_ntpd_gps.php:323
+#: src/usr/local/www/services_ntpd_pps.php:102
+#: src/usr/local/www/services_ntpd_pps.php:119
+#: src/usr/local/www/status_queues.php:162
+#: src/usr/local/www/status_queues.php:166
+msgid "PPS"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:211
+msgid "NTP Server Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:221
+#, php-format
+msgid ""
+"Interfaces without an IP address will not be shown.%1$sSelecting no "
+"interfaces will listen on all interfaces with a wildcard.%1$sSelecting all "
+"interfaces will explicitly listen on only the interfaces/IPs specified."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:229
+msgid "Time Servers"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:232
+#, php-format
+msgid "%d is the maximum number of configured servers."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:284
+#, php-format
+msgid ""
+"For best results three to five servers should be configured here, or at "
+"least one pool.%1$sThe %2$sPrefer%3$s option indicates that NTP should favor "
+"the use of this server more than all others.%1$sThe %2$sNo Select%3$s option "
+"indicates that NTP should not use this server for time, but stats for this "
+"server will be collected and displayed.%1$sThe %2$sIs a Pool%3$s option "
+"indicates this entry is a pool of NTP servers and not a single address. This "
+"is assumed for *.pool.ntp.org."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:292
+msgid "Orphan Mode"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:296
+msgid ""
+"Orphan mode allows the system clock to be used when no other clocks are "
+"available. The number here specifies the stratum reported during orphan mode "
+"and should normally be set to a number high enough to insure that any other "
+"servers available to clients are preferred over this server (default: 12)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:302
+msgid "NTP Graphs"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:309
+msgid "Logging"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:319
+#, php-format
+msgid ""
+"These options enable additional messages from NTP to be written to the "
+"System Log %1$sStatus > System Logs > NTP%2$s"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:333
+msgid "Statistics Logging"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:335
+msgid ""
+"Warning: These options will create persistent daily log files in /var/log/"
+"ntp."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:369
+msgid "Leap seconds"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:371
+msgid ""
+"A leap second file allows NTP to advertise an upcoming leap second addition "
+"or subtraction. Normally this is only useful if this server is a stratum 1 "
+"time server. "
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:378
+msgid "Enter Leap second configuration as text OR select a file to upload."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:92
+#, php-format
+msgid "A valid IP address must be entered for row %s under Networks."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:96
+#, php-format
+msgid "A valid IPv4 netmask must be entered for IPv4 row %s under Networks."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:99
+#, php-format
+msgid "A valid IPv6 netmask must be entered for IPv6 row %s under Networks."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:183
+msgid "Default Access Restrictions"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:187
+msgid "Kiss-o'-death"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:194
+msgid "Modifications"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:201
+msgid "Queries"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:215
+msgid "Peer Association"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:222
+msgid "Trap Service"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:230
+msgid "Custom Access Restrictions"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:236
+msgid "Networks"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:238
+#: src/usr/local/www/services_unbound_acls.php:258
+msgid "Network/mask"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:251
+msgid "KOD"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:258
+msgid "nomodify"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:265
+msgid "noquery"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:272
+msgid "noserve"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:279
+msgid "nopeer"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:286
+msgid "notrap"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:52
+msgid "Setting default NTPd settings"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:273
+msgid "Updated NTP GPS Settings"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:291
+msgid "RMC"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:292
+msgid "GGA"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:293
+msgid "GLL"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:294
+msgid "ZDA or ZDG"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:328
+msgid "NTP Serial GPS Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:343
+msgid "GPS Type"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:346
+#, php-format
+msgid ""
+"This option allows a predefined configuration to be selected. Default is the "
+"configuration of pfSense 2.1 and earlier (not recommended). Select Generic "
+"if the GPS is not listed.%1$sThe predefined configurations assume the GPS "
+"has already been set to NMEA mode."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:362
+#: src/usr/local/www/services_ntpd_pps.php:147
+msgid "Serial Port"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:365
+msgid ""
+"All serial ports are listed, be sure to pick the port with the GPS attached. "
+""
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:373
+msgid ""
+"A higher baud rate is generally only helpful if the GPS is sending too many "
+"sentences. It is recommended to configure the GPS to send only one sentence "
+"at a baud rate of 4800 or 9600."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:380
+msgid "NMEA Sentences"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:384
+msgid ""
+"By default NTP will listen for all supported NMEA sentences. One or more "
+"sentences to listen for may be specified."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:395
+msgid "Fudge Time 1"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:398
+msgid ""
+"Fudge time 1 is used to specify the GPS PPS signal offset (default: 0.0)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:402
+msgid "Fudge Time 2"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:405
+msgid "Fudge time 2 is used to specify the GPS time offset (default: 0.0)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:409
+msgid "Stratum (0-16)"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:412
+msgid ""
+"This may be used to change the GPS Clock stratum (default: 0). This may be "
+"useful to, for some reason, have ntpd prefer a different clock."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:416
+#: src/usr/local/www/services_ntpd_pps.php:169
+msgid "Flags"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:461
+msgid ""
+"Enabling this will rapidly fill the log, but is useful for tuning Fudge time "
+"2."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:468
+msgid ""
+"Enable extended GPS status if GPGSV or GPGGA are explicitly enabled by GPS "
+"initialization commands."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:472
+#: src/usr/local/www/services_ntpd_pps.php:190
+msgid "Clock ID"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:476
+msgid "This may be used to change the GPS Clock ID (default: GPS)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:489
+msgid "GPS Initialization"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:497
+msgid ""
+"Commands entered here will be sent to the GPS during initialization. Please "
+"read and understand the GPS documentation before making any changes here."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:504
+msgid ""
+"Calculates and appends checksum and missing special characters \"$\" and "
+"\"*\". May not work with some GPS models."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:506
+msgid "NMEA Checksum Calculator"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:515
+msgid "Calculate"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:532
+msgid ""
+"Enter the text between &quot;$&quot; and &quot;*&quot; of a NMEA command "
+"string:"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:124
+msgid "NTP Serial PPS Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:150
+msgid ""
+"All serial ports are listed, be sure to pick the port with the PPS source "
+"attached. "
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:155
+msgid "Fudge Time"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:158
+msgid ""
+"Fudge time is used to specify the PPS signal offset from the actual second "
+"such as the transmission delay between the transmitter and the receiver "
+"(default: 0.0)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:162
+#: src/usr/local/www/status_ntpd.php:298
+msgid "Stratum"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:165
+msgid ""
+"This may be used to change the PPS Clock stratum (default: 0). This may be "
+"useful to, for some reason, have ntpd prefer a different clock and just "
+"monitor this source."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:194
+msgid "This may be used to change the PPS Clock ID (default: PPS)."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe.php:90
+msgid "The PPPoE entry list has been changed."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe.php:103
+#: src/usr/local/www/status_ipsec.php:481
+msgid "Local IP"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe.php:128
+msgid "Edit PPPoE instance"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe.php:129
+msgid "Delete PPPoE instance"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:108
+#: src/usr/local/www/vpn_l2tp.php:61
+msgid "Server address"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:108
+#: src/usr/local/www/vpn_l2tp.php:61
+msgid "Remote start address"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:113
+#: src/usr/local/www/vpn_l2tp.php:66
+msgid "RADIUS server address"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:113
+#: src/usr/local/www/vpn_l2tp.php:66
+msgid "RADIUS shared secret"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:119
+#: src/usr/local/www/vpn_l2tp.php:72
+msgid "A valid server address must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:122
+#: src/usr/local/www/vpn_l2tp.php:78
+msgid "A valid remote start address must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:125
+#: src/usr/local/www/vpn_l2tp.php:81
+msgid "A valid RADIUS server address must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:128
+msgid "Number of PPPoE users must be between 1 and 255"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:131
+msgid "User Max Logins must be between 1 and 255"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:134
+msgid "Subnet mask must be an integer between 0 and 32"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:139
+#: src/usr/local/www/vpn_l2tp.php:99
+msgid "The specified server address lies in the remote subnet."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:142
+msgid "The specified server address is equal to an interface ip address."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:148
+#, php-format
+msgid "No password specified for username %s"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:151
+#, php-format
+msgid "Incorrect ip address specified for username %s"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:158
+msgid "Wrong data submitted"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:291
+msgid "PPPoE Server Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:311
+msgid "*Total User Count"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:314
+msgid ""
+"The number of PPPoE users allowed to connect to this server simultaneously."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:318
+msgid "*User Max Logins"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:321
+msgid "The number of times a single user may be logged in at the same time."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:325
+msgid "*Server Address"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:327
+#, php-format
+msgid ""
+"Enter the IP address the PPPoE server should give to clients for use as "
+"their \"gateway\".%1$sTypically this is set to an unused IP just outside of "
+"the client range.%1$sNOTE: This should NOT be set to any IP address "
+"currently in use on this firewall."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:333
+msgid "*Remote Address Range"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:335
+#: src/usr/local/www/vpn_l2tp.php:230
+msgid "Specify the starting address for the client IP address subnet."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:339
+msgid "*Subnet mask"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:342
+msgid "Hint: 24 is 255.255.255.0"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:362
+msgid ""
+"If entered these servers will be given to all PPPoE clients, otherwise LAN "
+"DNS and one WAN DNS will go to all clients."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:369
+msgid ""
+"Users will be authenticated using the RADIUS server specified below. The "
+"local user database will not be used."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:377
+#: src/usr/local/www/vpn_l2tp.php:288
+msgid "Sends accounting packets to the RADIUS server."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:384
+msgid "If primary server fails all requests will be sent via backup server."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:388
+msgid "NAS IP Address"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:390
+msgid "NAS IP Address sent to the RADIUS Server"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:394
+msgid "RADIUS Accounting Update"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:397
+msgid "RADIUS accounting update period in seconds"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:401
+msgid "RADIUS Issued IP Addresses"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:406
+msgid "Primary RADIUS Server"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:419
+#: src/usr/local/www/services_pppoe_edit.php:452
+#: src/usr/local/www/system_authservers.php:264
+#: src/usr/local/www/system_authservers.php:764
+msgid "Authentication port"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:426
+#: src/usr/local/www/services_pppoe_edit.php:459
+msgid "Accounting port (optional)"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:428
+#: src/usr/local/www/services_pppoe_edit.php:461
+msgid "Standard ports are 1812 (authentication) and 1813 (accounting)."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:434
+msgid "Primary RADIUS Server Shared Secret"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:437
+#: src/usr/local/www/vpn_l2tp.php:301
+msgid ""
+"Enter the shared secret that will be used to authenticate to the RADIUS "
+"server."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:439
+msgid "Secondary RADIUS Server"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:467
+msgid "Secondary RADIUS Server Shared Secret"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:470
+msgid ""
+"Enter the shared secret that will be used to authenticate to the backup "
+"RADIUS server."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:495
+msgid "User table"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:533
+msgid "Add user"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:568
+msgid ""
+"Don't forget to add a firewall rule to permit traffic from PPPoE clients."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136.php:75
+msgid "RFC2136 Clients"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136.php:176
+#: src/usr/local/www/vpn_openvpn_client.php:929
+msgid "Edit client"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136.php:179
+msgid "Disable client"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136.php:182
+msgid "Enable client"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136.php:185
+#: src/usr/local/www/vpn_openvpn_client.php:930
+msgid "Delete client"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:78
+msgid "Key name"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:78
+msgid "Key"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:83
+msgid "The DNS update host name contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:86
+msgid "The DNS update TTL must be an integer."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:89
+msgid "The DNS update key name contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:113
+msgid "New/Edited RFC2136 dnsupdate entry was posted."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:158
+msgid "RFC 2136 Client"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:183
+msgid "Fully qualified hostname of the host to be updated."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:187
+msgid "*TTL (seconds)"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:194
+msgid "*Key name"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:197
+msgid "This must match the setting on the DNS server."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:199
+msgid "*Key Type"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:203
+#: src/usr/local/www/services_rfc2136_edit.php:211
+#: src/usr/local/www/services_rfc2136_edit.php:219
+msgid "Key Type"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:229
+msgid "*Key"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:232
+msgid "Paste an HMAC-MD5 key here."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:250
+msgid "Use public IP"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:255
+msgid "*Record Type"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:259
+#: src/usr/local/www/services_rfc2136_edit.php:267
+#: src/usr/local/www/services_rfc2136_edit.php:275
+msgid "Record Type"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:309
+#, php-format
+msgid ""
+"A DNS server must be configured in %1$sSystem: General Setup %2$sor allow "
+"the DNS server list to be overridden by DHCP/PPP on WAN for dynamic DNS "
+"updates to work."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:57
+msgid ""
+"The DHCPv6 Server can only be enabled on interfaces configured with static, "
+"non unique local IP addresses."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:58
+msgid "Only interfaces configured with a static IP will be shown."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:108
+msgid "Router Only - RA Flags [none], Prefix Flags [router]"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:109
+msgid "Unmanaged - RA Flags [none], Prefix Flags [onlink, auto, router]"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:110
+msgid ""
+"Managed - RA Flags [managed, other stateful], Prefix Flags [onlink, router]"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:111
+msgid ""
+"Assisted - RA Flags [managed, other stateful], Prefix Flags [onlink, auto, "
+"router]"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:112
+msgid ""
+"Stateless DHCP - RA Flags [other stateful], Prefix Flags [onlink, auto, "
+"router]"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:114
+msgid "Low"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:119
+msgid ""
+"Subnets are specified in CIDR format.  Select the CIDR mask that pertains to "
+"each entry.\t/128 specifies a single IPv6 host; /64 specifies a normal IPv6 "
+"network; etc.  If no subnets are specified here, the Router Advertisement "
+"(RA) Daemon will advertise to the subnet to which the router's interface is "
+"assigned."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:126
+msgid "Select the Operating Mode for the Router Advertisement (RA) Daemon."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:129
+msgid "RADVD will not be enabled on this interface."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:130
+msgid "Router Only"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:130
+msgid "Will advertise this router."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:131
+msgid "Unmanaged"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:131
+msgid "Will advertise this router with stateless autoconfig."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:132
+msgid "Managed"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:132
+msgid ""
+"Will advertise this router with all configuration through a DHCPv6 server."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:133
+msgid "Assisted"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:133
+msgid ""
+"Will advertise this router with configuration through a DHCPv6 server and/or "
+"stateless autoconfig."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:134
+msgid "Stateless DHCP"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:134
+msgid ""
+"Will advertise this router with stateless autoconfig and other configuration "
+"information available via DHCPv6."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:136
+msgid ""
+"It is not required to activate DHCPv6 server on pfSense when set to "
+"\"Managed\", \"Assisted\" or \"Stateless DHCP\", it can be another host on "
+"the network."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:163
+#, php-format
+msgid "An invalid subnet or alias was specified. [%1$s/%2$s]"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:182
+msgid ""
+"A valid lifetime below 2 hours will be ignored by clients (RFC 4862 Section "
+"5.5.3 point e)"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:185
+msgid "Valid lifetime must be an integer."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:189
+msgid "Minimum advertisement interval must be an integer."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:192
+msgid "Minimum advertisement interval must be no less than 3."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:195
+msgid ""
+"Minimum advertisement interval must be no greater than 0.75 * Maximum "
+"advertisement interval"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:200
+msgid "Maximum advertisement interval must be an integer."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:203
+msgid ""
+"Maximum advertisement interval must be no less than 4 and no greater than "
+"1800."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:207
+msgid "Router lifetime must be an integer between 1 and 9000."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:311
+msgid "Advertisements"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:315
+msgid "*Router mode"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:322
+msgid "*Router priority"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:325
+msgid "Select the Priority for the Router Advertisement (RA) Daemon."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:349
+msgid "RA Interface"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:352
+msgid "Select the Interface for the Router Advertisement (RA) Daemon."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:357
+msgid "Default valid lifetime"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:361
+#, php-format
+msgid ""
+"The length of time in seconds (relative to the time the packet is sent) that "
+"the prefix is valid for the purpose of on-link determination.%1$sThe default "
+"is 86400 seconds."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:366
+msgid "Default preferred lifetime"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:369
+#, php-format
+msgid ""
+"Seconds. The length of time in seconds (relative to the time the packet is "
+"sent) that addresses generated from the prefix via stateless address "
+"autoconfiguration remain preferred.%1$sThe default is 14400 seconds."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:374
+msgid "Minimum RA interval"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:378
+msgid ""
+"The minimum time allowed between sending unsolicited multicast router "
+"advertisements in seconds."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:382
+msgid "Maximum RA interval"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:386
+msgid ""
+"The maximum time allowed between sending unsolicited multicast router "
+"advertisements in seconds."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:390
+msgid "Router lifetime"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:394
+msgid "The lifetime associated with the default router in seconds."
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:397
+msgid "RA Subnets"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:413
+msgid "Subnets"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:445
+msgid "DNS Configuration"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:450
+msgid "Server "
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:461
+msgid ""
+"The RA server can optionally provide a domain search list. Use the semicolon "
+"character as separator."
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:90
+msgid "Invalid character '#' in system location"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:93
+msgid "Invalid character '#' in system contact"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:96
+msgid "Invalid character '#' in read community string"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:100
+msgid "Community"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:104
+#: src/usr/local/www/services_snmp.php:226
+msgid "Polling Port"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:112
+msgid "Invalid character '#' in SNMP trap string"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:116
+#: src/usr/local/www/services_snmp.php:275
+msgid "Trap server"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:120
+msgid "Trap server port"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:124
+msgid "Trap string"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:211
+msgid "SNMP Daemon"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:222
+msgid "SNMP Daemon Settings"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:229
+msgid "Enter the port to accept polling events on (default 161)."
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:233
+msgid "System Location"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:240
+msgid "System Contact"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:247
+msgid "Read Community String"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:250
+msgid ""
+"The community string is like a password, restricting access to querying SNMP "
+"to hosts knowing the community string. Use a strong value here to protect "
+"from unauthorized information disclosure."
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:254
+msgid "SNMP Traps Enable"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:265
+msgid "SNMP Trap Settings"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:278
+msgid "Enter the trap server name"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:282
+msgid "Trap Server Port"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:285
+msgid "Enter the port to send the traps to (default 162)"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:289
+msgid "SNMP Trap String"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:296
+msgid "SNMP Modules"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:298
+msgid "SNMP modules"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:355
+msgid "Interface Binding"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:361
+msgid "Bind Interfaces"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:106
+msgid ""
+"The DNS Forwarder is enabled using this port. Choose a non-conflicting port, "
+"or disable the DNS Forwarder."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:131
+msgid ""
+"At least one DNS server must be specified under System &gt; General Setup to "
+"enable Forwarding mode."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:136
+msgid "One or more Network Interfaces must be selected for binding."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:138
+msgid ""
+"This system is configured to use the DNS Resolver as its DNS server, so "
+"Localhost or All must be selected in Network Interfaces."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:142
+msgid "One or more Outgoing Network Interfaces must be selected."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:164
+msgid ""
+"The generated config file cannot be parsed by unbound. Please correct the "
+"following errors:"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:180
+#: src/usr/local/www/services_unbound_advanced.php:180
+msgid "DNS Resolver configured."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:238
+#: src/usr/local/www/services_unbound.php:257
+#: src/usr/local/www/services_unbound_acls.php:198
+#: src/usr/local/www/services_unbound_advanced.php:205
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:112
+#: src/usr/local/www/services_unbound_host_edit.php:200
+msgid "General Settings"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:253
+#: src/usr/local/www/services_unbound_acls.php:194
+#: src/usr/local/www/services_unbound_advanced.php:201
+msgid "The DNS resolver configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:258
+#: src/usr/local/www/services_unbound_acls.php:199
+#: src/usr/local/www/services_unbound_advanced.php:187
+#: src/usr/local/www/services_unbound_advanced.php:206
+#: src/usr/local/www/vpn_ipsec.php:229 src/usr/local/www/vpn_ipsec_keys.php:90
+#: src/usr/local/www/vpn_ipsec_mobile.php:426
+#: src/usr/local/www/vpn_ipsec_phase1.php:646
+#: src/usr/local/www/vpn_ipsec_phase2.php:490
+#: src/usr/local/www/vpn_ipsec_settings.php:186
+#: src/usr/local/www/vpn_ipsec_settings.php:220
+msgid "Advanced Settings"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:259
+#: src/usr/local/www/services_unbound_acls.php:176
+#: src/usr/local/www/services_unbound_acls.php:200
+#: src/usr/local/www/services_unbound_advanced.php:207
+msgid "Access Lists"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:264
+msgid "General DNS Resolver Options"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:285
+msgid "*Network Interfaces"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:289
+msgid ""
+"Interface IPs used by the DNS Resolver for responding to queries from "
+"clients. If an interface has both IPv4 and IPv6 IPs, both are used. Queries "
+"to other interface IPs not selected below are discarded. The default "
+"behavior is to respond to queries on every available IPv4 and IPv6 address."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:296
+msgid "*Outgoing Network Interfaces"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:300
+msgid ""
+"Utilize different network interface(s) that the DNS Resolver will use to "
+"send queries to authoritative servers and receive their replies. By default "
+"all interfaces are used."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:304
+msgid "*System Domain Local Zone Type"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:307
+msgid ""
+"The local-zone type used for the pfSense system domain (System | General "
+"Setup | Domain).  Transparent is the default.  Local-Zone type descriptions "
+"are available in the unbound.conf(5) manual pages."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:311
+msgid "DNSSEC"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:321
+#, php-format
+msgid ""
+"If this option is set, DNS queries will be forwarded to the upstream DNS "
+"servers defined under %1$sSystem &gt; General Setup%2$s or those obtained "
+"via DHCP/PPP on WAN (if DNS Server Override is enabled there)."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:330
+#, php-format
+msgid ""
+"If this option is set, then machines that specify their hostname when "
+"requesting a DHCP lease will be registered in the DNS Resolver, so that "
+"their name can be resolved. The domain in %1$sSystem &gt; General Setup%2$s "
+"should also be set to the proper value."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:339
+#, php-format
+msgid ""
+"If this option is set, then DHCP static mappings will be registered in the "
+"DNS Resolver, so that their name can be resolved. The domain in %1$sSystem "
+"&gt; General Setup%2$s should also be set to the proper value."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:352
+#: src/usr/local/www/services_unbound.php:388
+msgid "Display Custom Options"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:360
+msgid ""
+"Enter any additional configuration parameters to add to the DNS Resolver "
+"configuration here, separated by a newline."
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:386
+msgid "Hide Custom Options"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:557
+#, php-format
+msgid ""
+"If the DNS Resolver is enabled, the DHCP service (if enabled) will "
+"automatically serve the LAN IP address as a DNS server to DHCP clients so "
+"they will use the DNS Resolver. If Forwarding is enabled, the DNS Resolver "
+"will use the DNS servers entered in %1$sSystem &gt; General Setup%2$s or "
+"those obtained via DHCP or PPP on WAN if &quot;Allow DNS server list to be "
+"overridden by DHCP/PPP on WAN&quot; is checked."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:117
+#: src/usr/local/www/services_unbound_acls.php:131
+msgid "A valid IP address must be entered for each row under Networks."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:122
+msgid "A valid IPv4 netmask must be entered for each IPv4 row under Networks."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:128
+msgid "A valid IPv6 netmask must be entered for each IPv6 row under Networks."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:139
+msgid "save"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:169
+#, php-format
+msgid ""
+"%1$sDeny:%2$s Stops queries from hosts within the netblock defined below."
+"%3$s"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:170
+#, php-format
+msgid ""
+"%1$sRefuse:%2$s Stops queries from hosts within the netblock defined below, "
+"but sends a DNS rcode REFUSED error message back to the client.%3$s"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:171
+#, php-format
+msgid ""
+"%1$sAllow:%2$s Allow queries from hosts within the netblock defined below."
+"%3$s"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:172
+#, php-format
+msgid ""
+"%1$sAllow Snoop:%2$s Allow recursive and nonrecursive access from hosts "
+"within the netblock defined below. Used for cache snooping and ideally "
+"should only be configured for the administrative host.%3$s"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:173
+#, php-format
+msgid ""
+"%1$sDeny Nonlocal:%2$s Allow only authoritative local-data queries from "
+"hosts within the netblock defined below. Messages that are disallowed are "
+"dropped.%3$s"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:174
+#, php-format
+msgid ""
+"%1$sRefuse Nonlocal:%2$s Allow only authoritative local-data queries from "
+"hosts within the netblock defined below. Sends a DNS rcode REFUSED error "
+"message back to the client for messages that are disallowed."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:207
+msgid "New Access List"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:225
+msgid "Access List name"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:228
+msgid "Provide an Access List name."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:234
+msgid "Allow Snoop"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:234
+msgid "Deny Nonlocal"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:234
+msgid "Refuse Nonlocal"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:252
+msgid "*Networks"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:293
+msgid "Access Lists to Control Access to the DNS Resolver"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:299
+msgid "Access List Name"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:321
+msgid "Edit ACL"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_acls.php:322
+msgid "Delete ACL"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:90
+msgid "A valid value for Message Cache Size must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:93
+msgid "A valid value must be specified for Outgoing TCP Buffers."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:96
+msgid "A valid value must be specified for Incoming TCP Buffers."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:99
+msgid "A valid value must be specified for EDNS Buffer Size."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:102
+msgid "A valid value must be specified for Number of Queries per Thread."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:105
+msgid "A valid value must be specified for Jostle Timeout."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:108
+msgid "'Maximum TTL for RRsets and Messages' must be a positive integer."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:111
+msgid "'Minimum TTL for RRsets and Messages' must be a positive integer."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:114
+msgid "A valid value must be specified for TTL for Host Cache Entries."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:117
+msgid "A valid value must be specified for Number of Hosts to Cache."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:120
+msgid "A valid value must be specified for Unwanted Reply Threshold."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:123
+msgid "A valid value must be specified for Log Level."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:126
+msgid ""
+"Harden DNSSEC Data option can only be enabled if DNSSEC support is enabled."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:212
+msgid "Advanced Resolver Options"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:216
+msgid "Hide Identity"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:223
+msgid "Hide Version"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:230
+msgid "Prefetch Support"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:233
+msgid ""
+"When enabled, this option can cause an increase of around 10% more DNS "
+"traffic and load on the server, but frequently requested items will not "
+"expire from the cache."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:237
+msgid "Prefetch DNS Key Support"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:240
+#, php-format
+msgid ""
+"This helps lower the latency of requests but does utilize a little more CPU. "
+"See: %1$sWikipedia%2$s"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:244
+msgid "Harden DNSSEC Data"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:247
+msgid ""
+"If such data is absent, the zone becomes bogus. If Disabled and no DNSSEC "
+"data is received, then the zone is made insecure. "
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:251
+msgid "Message Cache Size"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:254
+msgid ""
+"Size of the message cache. The message cache stores DNS response codes and "
+"validation statuses. The Resource Record Set (RRSet) cache will "
+"automatically be set to twice this amount. The RRSet cache contains the "
+"actual RR data. The default is 4 megabytes."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:258
+msgid "Outgoing TCP Buffers"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:261
+msgid ""
+"The number of outgoing TCP buffers to allocate per thread. The default value "
+"is 10. If 0 is selected then TCP queries are not sent to authoritative "
+"servers."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:265
+msgid "Incoming TCP Buffers"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:268
+msgid ""
+"The number of incoming TCP buffers to allocate per thread. The default value "
+"is 10. If 0 is selected then TCP queries are not accepted from clients."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:272
+msgid "EDNS Buffer Size"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:275
+msgid ""
+"Number of bytes size to advertise as the EDNS reassembly buffer size. This "
+"is the value that is used in UDP datagrams sent to peers. RFC recommendation "
+"is 4096 (which is the default). If fragmentation reassemble problems occur, "
+"usually seen as timeouts, then a value of 1480 should help. The 512 value "
+"bypasses most MTU path problems, but it can generate an excessive amount of "
+"TCP fallback."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:281
+msgid "Number of Queries per Thread"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:284
+msgid ""
+"The number of queries that every thread will service simultaneously. If more "
+"queries arrive that need to be serviced, and no queries can be jostled, then "
+"these queries are dropped."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:288
+msgid "Jostle Timeout"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:291
+msgid ""
+"This timeout is used for when the server is very busy. This protects against "
+"denial of service by slow queries or high query rates. The default value is "
+"200 milliseconds. "
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:295
+msgid "Maximum TTL for RRsets and Messages"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:298
+msgid ""
+"The Maximum Time to Live for RRsets and messages in the cache. The default "
+"is 86400 seconds (1 day). When the internal TTL expires the cache item is "
+"expired. This can be configured to force the resolver to query for data more "
+"often and not trust (very large) TTL values."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:303
+msgid "Minimum TTL for RRsets and Messages"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:306
+msgid ""
+"The Minimum Time to Live for RRsets and messages in the cache. The default "
+"is 0 seconds. If the minimum value kicks in, the data is cached for longer "
+"than the domain owner intended, and thus less queries are made to look up "
+"the data. The 0 value ensures the data in the cache is as the domain owner "
+"intended. High values can lead to trouble as the data in the cache might not "
+"match up with the actual data anymore."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:310
+msgid "minutes"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:313
+msgid "TTL for Host Cache Entries"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:316
+msgid ""
+"Time to Live, in seconds, for entries in the infrastructure host cache. The "
+"infrastructure host cache contains round trip timing, lameness, and EDNS "
+"support information for DNS servers. The default value is 15 minutes."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:320
+msgid "Number of Hosts to Cache"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:323
+msgid ""
+"Number of infrastructure hosts for which information is cached. The default "
+"is 10,000."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:325
+msgid "million"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:328
+msgid "Unwanted Reply Threshold"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:332
+msgid ""
+"If enabled, a total number of unwanted replies is kept track of in every "
+"thread. When it reaches the threshold, a defensive action is taken and a "
+"warning is printed to the log file. This defensive action is to clear the "
+"RRSet and message caches, hopefully flushing away any poison. The default is "
+"disabled, but if enabled a value of 10 million is suggested."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:336
+msgid "level"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:339
+msgid "Log Level"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:342
+msgid "Select the log verbosity."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:346
+msgid "Disable Auto-added Access Control"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:349
+msgid ""
+"By default, IPv4 and IPv6 networks residing on internal interfaces of this "
+"system are permitted. Allowed networks must be manually configured on the "
+"Access Lists tab if the auto-added entries are disabled."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:354
+msgid "Experimental Bit 0x20 Support"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:357
+#, php-format
+msgid "See the implementation %1$sdraft dns-0x20%2$s for more information."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:84
+msgid ""
+"A valid IP address and port must be specified, for example 192.168.100."
+"10@5353."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:87
+msgid "A valid IP address must be specified, for example 192.168.100.10."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:123
+msgid "Domain Override"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:130
+msgid ""
+"Domain to override (NOTE: this does not have to be a valid TLD!) e.g.: test "
+"or mycompany.localdomain or 1.168.192.in-addr.arpa"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_domainoverride_edit.php:136
+#, php-format
+msgid ""
+"IP address of the authoritative DNS server for this domain. e.g.: 192.168."
+"100.100%1$sTo use a non-default port for communication, append an '@' with "
+"the port number."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_host_edit.php:84
+msgid ""
+"The hostname can only contain the characters A-Z, 0-9, '_' and '-'. It may "
+"not start or end with '-'."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:53
+#, php-format
+msgid "Sent magic packet to %1$s (%2$s)."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:56
+#, php-format
+msgid ""
+"Please check the %1$ssystem log%2$s, the wol command for %3$s (%4$s) did not "
+"complete successfully."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:82
+msgid "A valid interface must be specified."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:89
+msgid "A valid ip could not be found!"
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:94
+#, php-format
+msgid "Sent magic packet to %s."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:97
+#, php-format
+msgid ""
+"Please check the %1$ssystem log%2$s, the wol command for %3$s did not "
+"complete successfully."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:118
+msgid ""
+"This service can be used to wake up (power on) computers by sending special "
+"\"Magic Packets\"."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:119
+msgid ""
+"The NIC in the computer that is to be woken up must support Wake-on-LAN and "
+"must be properly configured (WOL cable, BIOS settings)."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:143
+msgid "Choose which interface the host to be woken up is connected to."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:147
+#: src/usr/local/www/services_wol_edit.php:141
+msgid "*MAC address"
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:150
+#: src/usr/local/www/services_wol_edit.php:144
+msgid "Enter a MAC address in the following format: xx:xx:xx:xx:xx:xx"
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:166
+msgid "Wake-on-LAN Devices"
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:170
+msgid "Click the MAC address to wake up an individual device."
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:194
+msgid "Edit Device"
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:195
+msgid "Delete Device"
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:196
+msgid "Wake Device"
+msgstr ""
+
+#: src/usr/local/www/services_wol.php:212
+msgid "Wake All Devices"
+msgstr ""
+
+#: src/usr/local/www/services_wol_edit.php:86
+msgid "This interface and MAC address wake-on-LAN entry already exists."
+msgstr ""
+
+#: src/usr/local/www/services_wol_edit.php:130
+msgid "Edit WOL Entry"
+msgstr ""
+
+#: src/usr/local/www/services_wol_edit.php:137
+msgid "Choose which interface this host is connected to."
+msgstr ""
+
+#: src/usr/local/www/shortcuts.inc:90
+msgid "Related settings"
+msgstr ""
+
+#: src/usr/local/www/shortcuts.inc:119
+msgid "Related status"
+msgstr ""
+
+#: src/usr/local/www/shortcuts.inc:128
+msgid "Related log entries"
+msgstr ""
+
+#: src/usr/local/www/status.php:141
+#, php-format
+msgid "Firewall Status on %s"
+msgstr ""
+
+#: src/usr/local/www/status.php:144
+msgid "This status page includes the following information"
+msgstr ""
+
+#: src/usr/local/www/status.php:329
+msgid ""
+"Make sure all sensitive information is removed! (Passwords, etc.) before "
+"posting information from this page in public places (like mailing lists)."
+msgstr ""
+
+#: src/usr/local/www/status.php:331
+msgid "Common password fields in config.xml have been automatically redacted."
+msgstr ""
+
+#: src/usr/local/www/status.php:333
+#, php-format
+msgid ""
+"When the page has finished loading, the output will be stored in %1$s. It "
+"may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
+msgstr ""
+
+#: src/usr/local/www/status.php:341
+msgid "Saving output to archive..."
+msgstr ""
+
+#: src/usr/local/www/status.php:349
+msgid "Done."
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:42
+msgid "Session details"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:46
+#, php-format
+msgid "Session duration: %s"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:51
+#: src/usr/local/www/status_captiveportal.php:54
+#: src/usr/local/www/status_captiveportal.php:57
+#, php-format
+msgid "Session time left: %s"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:68
+#, php-format
+msgid "Idle time: %s"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:72
+#, php-format
+msgid "Idle time left: %s"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:80
+#: src/usr/local/www/status_captiveportal.php:82
+#, php-format
+msgid "Bytes sent: %s"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:80
+#: src/usr/local/www/status_captiveportal.php:82
+#, php-format
+msgid "Bytes received: %s"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:140
+#: src/usr/local/www/status_captiveportal.php:150
+#: src/usr/local/www/status_captiveportal_expire.php:73
+#: src/usr/local/www/status_captiveportal_test.php:81
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:70
+#: src/usr/local/www/status_captiveportal_vouchers.php:96
+msgid "Active Users"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:151
+#: src/usr/local/www/status_captiveportal_expire.php:74
+#: src/usr/local/www/status_captiveportal_test.php:82
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:71
+#: src/usr/local/www/status_captiveportal_vouchers.php:57
+#: src/usr/local/www/status_captiveportal_vouchers.php:97
+msgid "Active Vouchers"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:153
+#: src/usr/local/www/status_captiveportal_expire.php:76
+#: src/usr/local/www/status_captiveportal_test.php:57
+#: src/usr/local/www/status_captiveportal_test.php:84
+#: src/usr/local/www/status_captiveportal_test.php:90
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:73
+#: src/usr/local/www/status_captiveportal_vouchers.php:99
+msgid "Test Vouchers"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:154
+#: src/usr/local/www/status_captiveportal_expire.php:57
+#: src/usr/local/www/status_captiveportal_expire.php:77
+#: src/usr/local/www/status_captiveportal_expire.php:82
+#: src/usr/local/www/status_captiveportal_test.php:85
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:74
+#: src/usr/local/www/status_captiveportal_vouchers.php:100
+msgid "Expire Vouchers"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:164
+msgid "Captive Portal Zone"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:174
+msgid "Display Zone"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:187
+#, php-format
+msgid "Users Logged In (%d)"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:201
+#: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:85
+msgid "Session start"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:205
+#: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:86
+msgid "Last activity"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:257
+msgid "Disconnect this User"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:271
+#, php-format
+msgid ""
+"No Captive Portal zones have been configured. New zones may be added here: "
+"%1$sServices > Captive Portal%2$s."
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:280
+msgid "Don't show last activity"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:282
+msgid "Hide Last Activity"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:287
+msgid "Show last activity"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:289
+msgid "Show Last Activity"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:294
+msgid "Disconnect all active users"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal.php:296
+msgid "Disconnect All Users"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_expire.php:65
+msgid "Voucher(s) successfully marked."
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_expire.php:67
+msgid "Voucher(s) could not be processed."
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_expire.php:86
+#: src/usr/local/www/status_captiveportal_test.php:94
+msgid "*Vouchers"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_expire.php:88
+msgid ""
+"Enter multiple vouchers separated by space or newline. All valid vouchers "
+"will be marked as expired."
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_expire.php:101
+msgid "Expire"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_test.php:96
+msgid ""
+"Enter multiple vouchers separated by space or newline. The remaining time, "
+"if valid, will be shown for each voucher."
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:82
+msgid "Roll#"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:86
+msgid "used"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:87
+#: src/usr/local/www/status_dhcp_leases.php:143
+#: src/usr/local/www/status_dhcpv6_leases.php:196
+msgid "active"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_voucher_rolls.php:88
+msgid "ready"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_vouchers.php:105
+#, php-format
+msgid "Vouchers in Use (%d)"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_vouchers.php:110
+msgid "Voucher"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_vouchers.php:111
+msgid "Roll"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_vouchers.php:112
+msgid "Activated at"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_vouchers.php:113
+msgid "Expires in"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_vouchers.php:114
+msgid "Expires at"
+msgstr ""
+
+#: src/usr/local/www/status_captiveportal_vouchers.php:125
+msgid "min"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:73
+#, php-format
+msgid ""
+"%s IPs have been disabled. Please note that disabling does not survive a "
+"reboot and some configuration changes will re-enable."
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:76
+msgid "CARP has been enabled."
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:132
+msgid "No CARP interfaces have been defined."
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:134
+msgid "High availability sync settings can be configured here."
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:149
+msgid ""
+"CARP has detected a problem and this unit has been demoted to BACKUP status."
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:151
+msgid "Check the link status on all interfaces with configured CARP VIPs."
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:153
+#, php-format
+msgid "Search the %1$sSystem Log%2$s for CARP demotion-related events."
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:156 src/usr/local/www/status_carp.php:158
+msgid "Reset CARP Demotion Status."
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:165
+msgid "Temporarily Disable CARP"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:165
+msgid "Enable CARP"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:166
+msgid "Leave Persistent CARP Maintenance Mode"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:166
+msgid "Enter Persistent CARP Maintenance Mode"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:171
+msgid "CARP Interfaces"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:176
+#: src/usr/local/www/widgets/widgets/carp_status.widget.php:37
+msgid "CARP Interface"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:177
+#: src/usr/local/www/system_gateway_groups_edit.php:288
+#: src/usr/local/www/system_gateway_groups_edit.php:308
+#: src/usr/local/www/system_gateway_groups_edit.php:320
+msgid "Virtual IP"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:226
+msgid "pfSync Nodes"
+msgstr ""
+
+#: src/usr/local/www/status_carp.php:230
+msgid "pfSync nodes"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:141
+#: src/usr/local/www/status_dhcpv6_leases.php:194
+msgid "online"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:142
+#: src/usr/local/www/status_dhcpv6_leases.php:195
+msgid "offline"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:144
+#: src/usr/local/www/status_dhcpv6_leases.php:197
+msgid "expired"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:145
+#: src/usr/local/www/status_dhcpv6_leases.php:198
+msgid "reserved"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:146
+#: src/usr/local/www/status_dhcpv6_leases.php:200
+msgid "dynamic"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:147
+#: src/usr/local/www/status_dhcpv6_leases.php:201
+msgid "static"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:315
+#: src/usr/local/www/status_dhcpv6_leases.php:395
+msgid "Pool Status"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:320
+#: src/usr/local/www/status_dhcpv6_leases.php:400
+msgid "Failover Group"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:321
+#: src/usr/local/www/status_dhcpv6_leases.php:401
+msgid "My State"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:322
+#: src/usr/local/www/status_dhcp_leases.php:324
+#: src/usr/local/www/status_dhcpv6_leases.php:402
+#: src/usr/local/www/status_dhcpv6_leases.php:404
+msgid "Since"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:323
+#: src/usr/local/www/status_dhcpv6_leases.php:403
+msgid "Peer State"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:346
+#: src/usr/local/www/status_dhcpv6_leases.php:431
+#: src/usr/local/www/status_ipsec.php:467
+#: src/usr/local/www/status_ipsec_leases.php:32
+#: src/usr/local/www/status_ipsec_leases.php:41
+#: src/usr/local/www/status_ipsec_sad.php:55
+#: src/usr/local/www/status_ipsec_spd.php:48
+msgid "Leases"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:365
+#: src/usr/local/www/status_dhcpv6_leases.php:443
+#: src/usr/local/www/status_dhcpv6_leases.php:538
+msgid "End"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:366
+#: src/usr/local/www/status_dhcpv6_leases.php:444
+#: src/usr/local/www/status_gateway_groups.php:129
+#: src/usr/local/www/status_gateways.php:147
+#: src/usr/local/www/status_ipsec_leases.php:54
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:301
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:91
+msgid "Online"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:367
+#: src/usr/local/www/status_dhcpv6_leases.php:445
+msgid "Lease Type"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:456
+#: src/usr/local/www/status_dhcp_leases.php:457
+msgid "n/a"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:463
+#: src/usr/local/www/status_dhcpv6_leases.php:513
+msgid "Add static mapping"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:467
+#: src/usr/local/www/status_dhcpv6_leases.php:515
+msgid "Add WOL mapping"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:469
+msgid "Send WOL packet"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:473
+#: src/usr/local/www/status_dhcpv6_leases.php:517
+msgid "Delete lease"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:481
+msgid "No leases to display"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:490
+msgid "Leases in Use"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:498
+msgid "# of leases in use"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:518
+msgid "No leases are in use"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:527
+#: src/usr/local/www/status_dhcpv6_leases.php:607
+msgid "Show active and static leases only"
+msgstr ""
+
+#: src/usr/local/www/status_dhcp_leases.php:529
+#: src/usr/local/www/status_dhcpv6_leases.php:609
+msgid "Show all configured leases"
+msgstr ""
+
+#: src/usr/local/www/status_dhcpv6_leases.php:199
+msgid "released"
+msgstr ""
+
+#: src/usr/local/www/status_dhcpv6_leases.php:426
+msgid "No leases file found. Is the DHCPv6 server active?"
+msgstr ""
+
+#: src/usr/local/www/status_dhcpv6_leases.php:438
+#: src/usr/local/www/status_dhcpv6_leases.php:535
+msgid "IAID"
+msgstr ""
+
+#: src/usr/local/www/status_dhcpv6_leases.php:528
+msgid "Delegated Prefixes"
+msgstr ""
+
+#: src/usr/local/www/status_dhcpv6_leases.php:534
+msgid "IPv6 Prefix"
+msgstr ""
+
+#: src/usr/local/www/status_dhcpv6_leases.php:586
+msgid "Routed To"
+msgstr ""
+
+#: src/usr/local/www/status_filter_reload.php:63
+msgid "Reload Filter"
+msgstr ""
+
+#: src/usr/local/www/status_filter_reload.php:66
+msgid "Force Config Sync"
+msgstr ""
+
+#: src/usr/local/www/status_filter_reload.php:75
+msgid "Reload status"
+msgstr ""
+
+#: src/usr/local/www/status_filter_reload.php:82
+msgid ""
+"This page will automatically refresh every 3 seconds until the filter is "
+"done reloading."
+msgstr ""
+
+#: src/usr/local/www/status_filter_reload.php:104
+msgid "Obtaining filter status..."
+msgstr ""
+
+#: src/usr/local/www/status_filter_reload.php:110
+msgid "Queue Status"
+msgstr ""
+
+#: src/usr/local/www/status_gateway_groups.php:43
+#: src/usr/local/www/status_gateway_groups.php:47
+#: src/usr/local/www/status_gateway_groups.php:54
+#: src/usr/local/www/status_gateway_groups.php:58
+#: src/usr/local/www/status_gateways.php:49
+#: src/usr/local/www/system_gateway_groups.php:42
+#: src/usr/local/www/system_gateway_groups.php:103
+#: src/usr/local/www/system_gateway_groups.php:120
+#: src/usr/local/www/system_gateway_groups.php:124
+#: src/usr/local/www/system_gateway_groups_edit.php:147
+#: src/usr/local/www/system_gateways.php:245
+#: src/usr/local/www/system_routes.php:231
+msgid "Gateway Groups"
+msgstr ""
+
+#: src/usr/local/www/status_gateway_groups.php:92
+#, php-format
+msgid "Tier %s"
+msgstr ""
+
+#: src/usr/local/www/status_gateway_groups.php:120
+#: src/usr/local/www/status_gateways.php:129
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:283
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:95
+#: src/usr/local/www/diag_smart.php:300
+msgid "Offline"
+msgstr ""
+
+#: src/usr/local/www/status_gateway_groups.php:123
+#: src/usr/local/www/status_gateways.php:135
+msgid "Warning, Packetloss"
+msgstr ""
+
+#: src/usr/local/www/status_gateway_groups.php:126
+#: src/usr/local/www/status_gateways.php:141
+msgid "Warning, Latency"
+msgstr ""
+
+#: src/usr/local/www/status_gateway_groups.php:132
+msgid "Gathering data"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:63
+msgid "RTT"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:64
+msgid "RTTsd"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:65
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:79
+msgid "Loss"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:96
+#: src/usr/local/www/status_gateways.php:107
+#: src/usr/local/www/status_gateways.php:118
+#: src/usr/local/www/status_gateways.php:157
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:305
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:313
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:314
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:315
+msgid "Pending"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:126
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:280
+msgid "Offline (forced)"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:132
+msgid "Danger, Packetloss"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:138
+msgid "Danger, Latency"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:145
+#: src/usr/local/www/status_gateways.php:154
+msgid "Online (unmonitored)"
+msgstr ""
+
+#: src/usr/local/www/status_gateways.php:171
+msgid "Last checked"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:132
+msgid "Graph Settings"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:148
+#: src/usr/local/www/status_graph.php:366
+msgid "Bandwidth In"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:149
+#: src/usr/local/www/status_graph.php:367
+msgid "Bandwidth Out"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:158
+#: src/usr/local/www/system_groupmanager.php:410
+msgid "Local"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:159
+#: src/usr/local/www/system_groupmanager.php:410
+msgid "Remote"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:172
+msgid "FQDN"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:174
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:94
+msgid "Display"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:181
+msgid "Clear graphs when not visible."
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:182
+msgid "Keep graphs updated on inactive tab. (increases cpu usage)"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:184
+#: src/usr/local/www/widgets/widgets/traffic_graphs.widget.php:458
+msgid "Background updates"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:323
+#: src/usr/local/www/status_graph.php:324
+msgid "Bits/sec"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:365
+msgid "Host IP"
+msgstr ""
+
+#: src/usr/local/www/status_graph.php:365
+msgid "Host Name or IP"
+msgstr ""
+
+#: src/usr/local/www/status_graph_cpu.php:33
+#: src/usr/local/www/status_graph_cpu.php:39
+msgid "CPU Load Graph"
+msgstr ""
+
+#: src/usr/local/www/status_graph_cpu.php:46
+msgid "Note"
+msgstr ""
+
+#: src/usr/local/www/status_graph_cpu.php:47
+#, php-format
+msgid ""
+"If the graph cannot be seen, the %1$sAdobe SVG viewer%2$s may need to be "
+"installed"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:104
+msgid "Send a gratuitous DHCP release packet to the server."
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:104
+msgid "Relinquish Lease"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:111
+msgid " Interface "
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:116
+#: src/usr/local/www/status_interfaces.php:117
+msgid "Release"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:116
+#: src/usr/local/www/status_interfaces.php:117
+msgid "Renew"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:118
+#: src/usr/local/www/status_interfaces.php:119
+#: src/usr/local/www/status_interfaces.php:120
+#: src/usr/local/www/status_interfaces.php:121
+#: src/usr/local/www/status_ipsec.php:233
+#: src/usr/local/www/status_ipsec.php:347
+msgid "Disconnect"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:118
+#: src/usr/local/www/status_interfaces.php:119
+#: src/usr/local/www/status_interfaces.php:120
+#: src/usr/local/www/status_interfaces.php:121
+msgid "Connect"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:122
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:39
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:210
+msgid "Uptime"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:122
+msgid "(historical)"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:123
+msgid "Cell Signal (RSSI)"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:124
+msgid "Cell Mode"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:125
+msgid "Cell SIM State"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:126
+msgid "Cell Service"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:127
+msgid "Cell Upstream"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:128
+msgid "Cell Downstream"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:129
+msgid "Cell Current Up"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:130
+msgid "Cell Current Down"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:140
+msgid "IPv4 Address"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:141
+msgid "Subnet mask IPv4"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:143
+msgid "IPv6 Link Local"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:144
+msgid "IPv6 Address"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:145
+msgid "Subnet mask IPv6"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:159
+msgid "Media"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:160
+msgid "LAGG Protocol"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:161
+msgid "LAGG Ports"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:164
+msgid "BSSID"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:166
+msgid "RSSI"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:167
+msgid "In/out packets"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:169
+msgid "In/out packets (pass)"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:171
+msgid "In/out packets (block)"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:173
+msgid "In/out errors"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:174
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:48
+msgid "Collisions"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:177
+#, php-format
+msgid "Bridge (%1$s)"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:194
+msgid "Total interrupts"
+msgstr ""
+
+#: src/usr/local/www/status_interfaces.php:205
+#, php-format
+msgid ""
+"Using dial-on-demand will bring the connection up again if any packet "
+"triggers it. To substantiate this point: disconnecting manually will "
+"%1$snot%2$s prevent dial-on-demand from making connections to the outside! "
+"Don't use dial-on-demand if the line is to be kept disconnected."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:108
+#: src/usr/local/www/status_ipsec.php:141
+msgid "Any identifier"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:192
+msgid " seconds ("
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:215
+#, php-format
+msgid "%1$s seconds (%2$s) ago"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:224
+#: src/usr/local/www/status_ipsec.php:226
+#: src/usr/local/www/status_ipsec.php:447
+msgid "Connect VPN"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:231
+msgid "Disconnect VPN"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:248
+msgid "Show child SA entries"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:282
+msgid "Local: "
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:286
+msgid "Remote: "
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:303
+#, php-format
+msgid "Rekey: %1$s seconds (%2$s)"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:305
+#, php-format
+msgid "Life: %1$s seconds (%2$s)"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:307
+#, php-format
+msgid "Install: %1$s seconds (%2$s)"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:328
+msgid "IPComp: "
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:338
+msgid "Bytes-In: "
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:339
+msgid "Packets-In: "
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:340
+msgid "Bytes-Out: "
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:341
+msgid "Packets-Out: "
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:345
+msgid "Disconnect Child SA"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:434
+msgid "Awaiting connections"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:442
+msgid "Disconnected"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:459
+#: src/usr/local/www/status_ipsec.php:466
+#: src/usr/local/www/status_ipsec_leases.php:40
+#: src/usr/local/www/status_ipsec_sad.php:54
+#: src/usr/local/www/status_ipsec_spd.php:47
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:175
+msgid "Overview"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:468
+#: src/usr/local/www/status_ipsec_leases.php:42
+#: src/usr/local/www/status_ipsec_sad.php:36
+#: src/usr/local/www/status_ipsec_sad.php:56
+#: src/usr/local/www/status_ipsec_spd.php:49
+msgid "SADs"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:469
+#: src/usr/local/www/status_ipsec_leases.php:43
+#: src/usr/local/www/status_ipsec_sad.php:57
+#: src/usr/local/www/status_ipsec_spd.php:39
+#: src/usr/local/www/status_ipsec_spd.php:50
+msgid "SPDs"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:474
+msgid "IPsec Status"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:480
+msgid "Local ID"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:482
+msgid "Remote ID"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:483
+msgid "Remote IP"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:484
+msgid "Role"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:485
+msgid "Reauth"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:486
+msgid "Algo"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:494
+msgid "Collecting IPsec status information."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:511
+#: src/usr/local/www/status_ipsec_leases.php:129
+#: src/usr/local/www/status_ipsec_sad.php:129
+#: src/usr/local/www/status_ipsec_spd.php:113
+#, php-format
+msgid "IPsec can be configured %1$shere%2$s."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec.php:544
+msgid "No IPsec status information available."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_leases.php:53
+msgid "Usage"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_leases.php:106
+msgid "No leases from this pool yet."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_leases.php:117
+msgid "No IPsec pools."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_sad.php:69
+msgid "SPI"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_sad.php:70
+msgid "Enc. alg."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_sad.php:71
+msgid "Auth. alg."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_sad.php:72
+msgid "Data"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_sad.php:106
+msgid "Remove this SPD Entry"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_sad.php:117
+msgid "No IPsec security associations."
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_spd.php:61
+msgid "Direction"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_spd.php:63
+msgid "Tunnel endpoints"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_spd.php:71
+msgid " Inbound"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_spd.php:73
+msgid " Outbound"
+msgstr ""
+
+#: src/usr/local/www/status_ipsec_spd.php:101
+msgid "No IPsec security policies configured."
+msgstr ""
+
+#: src/usr/local/www/status_lb_pool.php:105
+msgid "Updated load balancer pools via status screen."
+msgstr ""
+
+#: src/usr/local/www/status_lb_pool.php:128
+msgid "Load Balancer Pools"
+msgstr ""
+
+#: src/usr/local/www/status_lb_pool.php:153
+msgid "Load balancing"
+msgstr ""
+
+#: src/usr/local/www/status_lb_pool.php:156
+msgid "Manual failover"
+msgstr ""
+
+#: src/usr/local/www/status_lb_pool.php:159
+msgid "(default)"
+msgstr ""
+
+#: src/usr/local/www/status_lb_vs.php:56
+msgid "No load balancers have been configured."
+msgstr ""
+
+#: src/usr/local/www/status_lb_vs.php:64 src/usr/local/www/system.php:456
+#: src/usr/local/www/vpn_ipsec_phase2.php:523
+#: src/usr/local/www/vpn_ipsec_phase2.php:530
+#: src/usr/local/www/vpn_ipsec_phase2.php:543
+#: src/usr/local/www/vpn_ipsec_phase2.php:556
+#: src/usr/local/www/vpn_ipsec_phase2.php:569
+#: src/usr/local/www/vpn_ipsec_phase2.php:576
+msgid "Address"
+msgstr ""
+
+#: src/usr/local/www/status_lb_vs.php:98
+#: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:72
+#: src/etc/inc/pfsense-utils.inc:318
+msgid "Active"
+msgstr ""
+
+#: src/usr/local/www/status_lb_vs.php:102
+#: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:76
+msgid "Down"
+msgstr ""
+
+#: src/usr/local/www/status_lb_vs.php:106
+#: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:80
+msgid "Unknown - relayd not running?"
+msgstr ""
+
+#: src/usr/local/www/status_lb_vs.php:118
+#, php-format
+msgid "Total Sessions: %s"
+msgstr ""
+
+#: src/usr/local/www/status_lb_vs.php:121
+#, php-format
+msgid "Last: %s"
+msgstr ""
+
+#: src/usr/local/www/status_lb_vs.php:124
+#, php-format
+msgid "Average: %s"
+msgstr ""
+
+#: src/usr/local/www/status_logs.php:41
+#: src/usr/local/www/status_logs_common.inc:103
+msgid "General"
+msgstr ""
+
+#: src/usr/local/www/status_logs.php:45
+#: src/usr/local/www/status_logs_common.inc:91
+#: src/usr/local/www/status_logs_settings.php:219
+msgid "Captive Portal Auth"
+msgstr ""
+
+#: src/usr/local/www/status_logs.php:141 src/usr/local/www/status_logs.php:193
+#: src/usr/local/www/status_logs_common.inc:243
+#: src/usr/local/www/status_logs_common.inc:429
+#: src/usr/local/www/status_logs_filter.php:150
+#: src/usr/local/www/status_logs_filter.php:298
+#: src/usr/local/www/status_logs_filter_dynamic.php:390
+#: src/usr/local/www/status_logs_vpn.php:138
+#: src/usr/local/www/status_logs_vpn.php:177
+#: src/usr/local/www/status_logs_vpn.php:359
+#: src/usr/local/www/status_logs_vpn.php:401
+#: src/usr/local/www/widgets/widgets/log.widget.php:102
+msgid "Time"
+msgstr ""
+
+#: src/usr/local/www/status_logs.php:142
+#: src/usr/local/www/status_logs_common.inc:250
+msgid "Process"
+msgstr ""
+
+#: src/usr/local/www/status_logs.php:143
+#: src/usr/local/www/status_logs_common.inc:257
+#: src/usr/local/www/status_logs_vpn.php:179
+#: src/usr/local/www/status_logs_vpn.php:415
+msgid "PID"
+msgstr ""
+
+#: src/usr/local/www/status_logs.php:144 src/usr/local/www/status_logs.php:194
+#: src/usr/local/www/status_logs_common.inc:276
+#: src/usr/local/www/status_logs_filter.php:299
+msgid "Message"
+msgstr ""
+
+#: src/usr/local/www/status_logs.php:172 src/usr/local/www/status_logs.php:220
+#: src/usr/local/www/status_logs_filter.php:276
+#: src/usr/local/www/status_logs_filter.php:319
+#: src/usr/local/www/status_logs_filter_dynamic.php:452
+#: src/usr/local/www/status_logs_vpn.php:211
+#: src/usr/local/www/status_logs_vpn.php:243
+msgid "No logs to display."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:94
+#: src/usr/local/www/status_logs_settings.php:222
+#: src/usr/local/www/status_logs_vpn.php:84 src/usr/local/www/vpn_ipsec.php:219
+#: src/usr/local/www/vpn_ipsec_keys.php:72
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:122
+#: src/usr/local/www/vpn_ipsec_mobile.php:305
+#: src/usr/local/www/vpn_ipsec_phase1.php:627
+#: src/usr/local/www/vpn_ipsec_phase1.php:630
+#: src/usr/local/www/vpn_ipsec_phase2.php:403
+#: src/usr/local/www/vpn_ipsec_phase2.php:407
+#: src/usr/local/www/vpn_ipsec_settings.php:186
+#: src/usr/local/www/vpn_l2tp.php:168 src/usr/local/www/vpn_l2tp_users.php:29
+#: src/usr/local/www/vpn_l2tp_users_edit.php:29
+#: src/usr/local/www/vpn_openvpn_client.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:283
+#: src/usr/local/www/vpn_openvpn_server.php:633
+msgid "VPN"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:110
+#: src/usr/local/www/status_logs_filter.php:76
+#: src/usr/local/www/status_logs_filter_dynamic.php:65
+#: src/usr/local/www/status_logs_filter_summary.php:58
+msgid "Normal View"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:111
+#: src/usr/local/www/status_logs_filter.php:77
+#: src/usr/local/www/status_logs_filter_dynamic.php:66
+#: src/usr/local/www/status_logs_filter_summary.php:59
+msgid "Dynamic View"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:112
+#: src/usr/local/www/status_logs_filter.php:78
+#: src/usr/local/www/status_logs_filter_dynamic.php:67
+#: src/usr/local/www/status_logs_filter_summary.php:60
+msgid "Summary View"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:115
+#: src/usr/local/www/status_logs_vpn.php:64
+msgid "PPPoE Logins"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:118
+#: src/usr/local/www/status_logs_vpn.php:44
+msgid "PPPoE Service"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:121
+#: src/usr/local/www/status_logs_vpn.php:65
+msgid "L2TP Logins"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:124
+#: src/usr/local/www/status_logs_vpn.php:46
+msgid "L2TP Service"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:143
+#, php-format
+msgid "%1$s Matched %2$s Log Entries."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:145
+#, php-format
+msgid "Last %1$s %2$s Log Entries."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:149
+#, php-format
+msgid "%1$d Matched %2$s Log Entries."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:151
+#, php-format
+msgid "Last %1$d %2$s Log Entries."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:155
+#, php-format
+msgid "Maximum %d"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:234
+#: src/usr/local/www/status_logs_common.inc:395
+#: src/usr/local/www/status_logs_vpn.php:349
+msgid "Advanced Log Filter"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:265
+#: src/usr/local/www/status_logs_common.inc:305
+#: src/usr/local/www/status_logs_common.inc:451
+#: src/usr/local/www/status_logs_common.inc:513
+#: src/usr/local/www/status_logs_vpn.php:374
+#: src/usr/local/www/status_logs_vpn.php:423
+#: src/usr/local/www/status_logs_vpn.php:464
+msgid "Quantity"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:280
+#: src/usr/local/www/status_logs_common.inc:309
+#: src/usr/local/www/status_logs_common.inc:488
+#: src/usr/local/www/status_logs_common.inc:528
+#: src/usr/local/www/status_logs_vpn.php:439
+#: src/usr/local/www/status_logs_vpn.php:468
+msgid "Apply Filter"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:288
+#: src/usr/local/www/status_logs_common.inc:496
+#: src/usr/local/www/status_logs_vpn.php:447 src/etc/inc/pfsense-utils.inc:281
+msgid "Log Filter"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:297
+#: src/usr/local/www/status_logs_common.inc:524
+#: src/usr/local/www/status_logs_vpn.php:456
+msgid "Filter Expression"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:322
+#: src/usr/local/www/status_logs_common.inc:541
+#: src/usr/local/www/status_logs_vpn.php:481
+msgid "Regular expression reference"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:322
+#: src/usr/local/www/status_logs_common.inc:541
+#: src/usr/local/www/status_logs_vpn.php:481
+msgid "Precede with exclamation (!) to exclude match."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:322
+#: src/usr/local/www/status_logs_common.inc:541
+#: src/usr/local/www/status_logs_vpn.php:481
+msgid "<a target=\"_blank\" href=\"http://www.php.net/manual/en/book.pcre.php\">"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:404
+msgid "Source IP Address"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:411
+msgid "Destination IP Address"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:484
+msgid "Protocol Flags"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:645
+#: src/usr/local/www/status_logs_settings.php:100
+msgid "Number of log entries to show must be between 5 and 2000."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:651
+#: src/usr/local/www/status_logs_settings.php:105
+msgid "Log file size must be numeric and greater than or equal to 100000."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:721
+msgid "Log Display Settings Saved: "
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:724
+msgid "Log Display Settings Saved (no backup, no sync): "
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:732
+#: src/usr/local/www/status_logs_settings.php:178
+#: src/usr/local/www/system_advanced_admin.php:562
+msgid "webConfigurator configuration has changed. Restarting webConfigurator."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:734
+#: src/usr/local/www/status_logs_settings.php:180
+msgid "WebGUI process is restarting."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:782
+#, php-format
+msgid "Manage %1$s Log"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:791
+#: src/usr/local/www/status_logs_settings.php:235
+msgid "Forward/Reverse Display"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:799
+msgid "(newest at bottom)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:807
+msgid "(newest at top)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:817
+msgid "Show log entries in forward or reverse order."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:820
+#: src/usr/local/www/status_logs_common.inc:825
+#: src/usr/local/www/status_logs_settings.php:242
+msgid "GUI Log Entries"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:831
+msgid ""
+"This is the number of log entries displayed in the GUI. It does not affect "
+"how many entries are contained in the log."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:834
+#: src/usr/local/www/status_logs_common.inc:839
+#: src/usr/local/www/status_logs_settings.php:250
+msgid "Log file size (Bytes)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:844
+#, php-format
+msgid ""
+"The log is held in a constant-size circular log file. This field controls "
+"how large the log file is, and thus how many entries may exist inside the "
+"log. The default is approximately 500KB.%1$sNOTE: The log size is changed "
+"the next time it is cleared. To immediately change the log size, first save "
+"the options to set the size, then clear the log using the \"Clear Log\" "
+"action below. "
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:849
+msgid "Formatted/Raw Display"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:875
+msgid ""
+"Show the log entries as formatted or raw output as generated by the service. "
+"The raw output will reveal more detailed information, but it is more "
+"difficult to read."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:883
+#: src/usr/local/www/status_logs_settings.php:286
+msgid "Web Server Log"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:886
+msgid ""
+"If this is checked, errors from the nginx web server process for the GUI or "
+"Captive Portal will appear in the system log."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:894
+#: src/usr/local/www/status_logs_settings.php:258
+msgid "Log firewall default blocks"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:897
+msgid ""
+"Packets that are blocked by the implicit default block rule will not be "
+"logged if this option is unchecked. Per-rule logging options are still "
+"respected."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:904
+msgid ""
+"Packets that are allowed by the implicit default pass rule will be logged if "
+"this option is checked. Per-rule logging options are still respected. "
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:925
+#: src/usr/local/www/status_logs_settings.php:310
+msgid "Dont load descriptions"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:926
+#: src/usr/local/www/status_logs_settings.php:311
+msgid "Display as column"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:927
+#: src/usr/local/www/status_logs_settings.php:312
+msgid "Display as second row"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:922
+#: src/usr/local/www/status_logs_settings.php:307
+msgid "Where to show rule descriptions"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:929
+#: src/usr/local/www/status_logs_settings.php:314
+#, php-format
+msgid ""
+"Show the applied rule description below or in the firewall log rows."
+"%1$sDisplaying rule descriptions for all lines in the log might affect "
+"performance with large rule sets."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:950
+msgid "Saves changed settings."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:955
+msgid "Clear log"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:965
+msgid ""
+"Clears local log file and reinitializes it as an empty log. Save any "
+"settings changes first."
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:45
+msgid "Cannot resolve"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:85
+msgid "The rule that triggered this action is"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:156
+msgid "Rule"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:235
+#: src/usr/local/www/status_logs_filter.php:244
+msgid "Click to resolve"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:238
+msgid "Easy Rule: Add to Block List"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:247
+msgid "Easy Rule: Pass this traffic"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:332
+msgid "Add to block list"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:332
+msgid "Pass traffic"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter.php:332
+msgid "Resolve"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter_dynamic.php:381
+msgid "Pause"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter_summary.php:85
+msgid "Protocols"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter_summary.php:86
+msgid "Source IPs"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter_summary.php:87
+msgid "Destination IPs"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter_summary.php:89
+msgid "Destination Ports"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter_summary.php:123
+#, php-format
+msgid ""
+"This is a summary of the last %1$s lines of the firewall log (Max %2$s)."
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter_summary.php:166
+msgid "Data points"
+msgstr ""
+
+#: src/usr/local/www/status_logs_filter_summary.php:176
+#: src/usr/local/www/widgets/widgets/log.widget.php:145
+#: src/usr/local/www/widgets/widgets/log.widget.php:148
+msgid "Reverse Resolve with DNS"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:81
+#: src/usr/local/www/status_logs_settings.php:327
+msgid "Reset Log Files"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:83
+msgid "The log files have been reset."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:90
+msgid ""
+"A valid IP address/hostname or IP/hostname:port must be specified for remote "
+"syslog server #1."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:93
+msgid ""
+"A valid IP address/hostname or IP/hostname:port must be specified for remote "
+"syslog server #2."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:96
+msgid ""
+"A valid IP address/hostname or IP/hostname:port must be specified for remote "
+"syslog server #3."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:191
+msgid ""
+"Logs are held in constant-size circular log files. This field controls how "
+"large each log file is, and thus how many entries may exist inside the log. "
+"By default this is approximately 500KB per log file, and there are nearly 20 "
+"such log files."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:193
+msgid ""
+"NOTE: Log sizes are changed the next time a log file is cleared or deleted. "
+"To immediately increase the size of the log files, first save the options to "
+"set the size, then clear all logs using the \"Reset Log Files\" option "
+"farther down this page. "
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:194
+msgid ""
+"Be aware that increasing this value increases every log file size, so disk "
+"usage will increase significantly."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:195
+msgid "Disk space currently used by log files is: "
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:196
+msgid " Remaining disk space for log files: "
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:198
+msgid ""
+"This option will allow the logging daemon to bind to a single IP address, "
+"rather than all IP addresses."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:199
+msgid ""
+"If a single IP is picked, remote syslog servers must all be of that IP type. "
+"To mix IPv4 and IPv6 remote syslog servers, bind to all interfaces."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:201
+msgid ""
+"NOTE: If an IP address cannot be located on the chosen interface, the daemon "
+"will bind to all addresses."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:231
+msgid "General Logging Options"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:246
+msgid ""
+"This is only the number of log entries displayed in the GUI. It does not "
+"affect how many entries are contained in the actual log files."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:261
+#, php-format
+msgid ""
+"Log packets that are %1$sblocked%2$s by the implicit default block rule. - "
+"Per-rule logging options are still respected."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:268
+#, php-format
+msgid ""
+"Log packets that are %1$sallowed%2$s by the implicit default pass rule. - "
+"Per-rule logging options are still respected. "
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:289
+msgid ""
+"If this is checked, errors from the web server process for the GUI or "
+"Captive Portal will appear in the main system log."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:293
+msgid "Raw Logs"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:296
+msgid ""
+"If this is checked, filter logs are shown as generated by the packet filter, "
+"without any formatting. This will reveal more detailed information, but it "
+"is more difficult to read."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:320
+msgid "Local Logging"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:330
+msgid ""
+"Clears all local log files and reinitializes them as empty logs. This also "
+"restarts the DHCP daemon. Use the Save button first if any setting changes "
+"have been made."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:333
+msgid "Remote Logging Options"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:338
+msgid "Enable Remote Logging"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:347
+msgid "Default (any)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:355
+msgid ""
+"This option is only used when a non-default address is chosen as the source "
+"above. This option only expresses a preference; If an IP address of the "
+"selected type is not found on the chosen interface, the other type will be "
+"tried."
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:359
+msgid "Remote log servers"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:364
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
+msgid "Server 1"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:372
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
+msgid "Server 2"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:380
+#: src/usr/local/www/vpn_openvpn_csc.php:490
+msgid "Server 3"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:388
+msgid "Remote Syslog Contents"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:482
+msgid ""
+"Syslog sends UDP datagrams to port 514 on the specified remote syslog "
+"server, unless another port is specified. Be sure to set syslogd on the "
+"remote server to accept syslog messages from pfSense."
+msgstr ""
+
+#: src/usr/local/www/status_logs_vpn.php:42
+msgid "VPN Logins"
+msgstr ""
+
+#: src/usr/local/www/status_logs_vpn.php:140
+#: src/usr/local/www/status_logs_vpn.php:385
+#: src/usr/local/www/vpn_l2tp_users_edit.php:149
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:221
+#: src/usr/local/www/services_rfc2136_edit.php:220
+msgid "User"
+msgstr ""
+
+#: src/usr/local/www/status_logs_vpn.php:180
+#: src/usr/local/www/status_logs_vpn.php:434
+msgid "Log Message"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:66
+msgid "Pool Placeholder"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:68
+msgid "Unreach/Pending"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:72
+msgid "Active Peer"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:75
+msgid "Candidate"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:78
+msgid "PPS Peer"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:81
+msgid "Selected"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:84
+msgid "Excess Peer"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:87
+msgid "False Ticker"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:90
+msgid "Outlier"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:201
+#, php-format
+msgid ""
+"Statistics unavailable because ntpq and ntpdc queries are disabled in the "
+"%1$sNTP service settings%2$s"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:207
+#, php-format
+msgid "No peers found, %1$sis the ntp service running?%2$s"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:264
+msgid "in view "
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:271
+msgid "in use "
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:279
+msgid "Google Maps Link"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:290
+msgid "Network Time Protocol Status"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:297
+msgid "Ref ID"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:300
+msgid "When"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:301
+msgid "Poll"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:302
+msgid "Reach"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:303
+#: src/usr/local/www/vpn_ipsec_phase1.php:895
+msgid "Delay"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:304
+msgid "Offset"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:305
+msgid "Jitter"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:327
+msgid "GPS Information"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:332
+msgid "Clock Latitude"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:333
+msgid "Clock Longitude"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:337
+msgid "Clock Altitude"
+msgstr ""
+
+#: src/usr/local/www/status_ntpd.php:344
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:198
+msgid "Satellites"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:81
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:327
+msgid "An error occurred."
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:98
+msgid "Client Connections"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:103
+#: src/usr/local/www/status_openvpn.php:188
+#: src/usr/local/www/vpn_openvpn_csc.php:663
+msgid "Common Name"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:104
+#: src/usr/local/www/status_openvpn.php:189
+msgid "Real Address"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:105
+#: src/usr/local/www/status_openvpn.php:239
+#: src/usr/local/www/status_openvpn.php:300
+msgid "Virtual Address"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:106
+#: src/usr/local/www/status_openvpn.php:238
+#: src/usr/local/www/status_openvpn.php:298
+msgid "Connected Since"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:107
+#: src/usr/local/www/status_openvpn.php:302
+msgid "Bytes Sent/Received"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:140
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:122
+#, php-format
+msgid "Kill client connection from %s"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:175
+#: src/usr/local/www/status_openvpn.php:177
+msgid "Show Routing Table"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:179
+msgid "Display OpenVPN's internal routing table for this server."
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:183
+msgid "Routing Table"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:190
+msgid "Target Network"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:191
+msgid "Last Used"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:211
+msgid ""
+"An IP address followed by C indicates a host currently connected through the "
+"VPN."
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:231
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:166
+msgid "Peer to Peer Server Instance Statistics"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:240
+#: src/usr/local/www/status_openvpn.php:301
+msgid "Remote Host"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:241
+msgid "Bytes Sent / Received"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:291
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:243
+msgid "Client Instance Statistics"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:299
+msgid "Local Address"
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:361
+msgid ""
+"If there are custom options that override the management features of OpenVPN "
+"on a client or server, they will cause that OpenVPN instance to not work "
+"correctly with this status page."
+msgstr ""
+
+#: src/usr/local/www/status_openvpn.php:365
+msgid "No OpenVPN instances defined."
+msgstr ""
+
+#: src/usr/local/www/status_pkglogs.php:81
+msgid "No packages with logging facilities are currently installed."
+msgstr ""
+
+#: src/usr/local/www/status_pkglogs.php:102
+#, php-format
+msgid "Last %1$s %2$s Log Entries"
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:53
+msgid "Something wrong happened during communication with stat gathering."
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:63
+msgid "No queue statistics could be read."
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:115
+msgid "Traffic shaping is not configured."
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:154
+msgid "Status Queues"
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:160
+msgid "Statistics"
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:168
+msgid "Borrows"
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:169
+msgid "Suspends"
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:170
+msgid "Drops"
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:171
+msgid "Length"
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:185
+msgid "Queue graphs take 5 seconds to sample data."
+msgstr ""
+
+#: src/usr/local/www/status_queues.php:248
+msgid "Loading"
+msgstr ""
+
+#: src/usr/local/www/status_services.php:144
+msgid "No services found."
+msgstr ""
+
+#: src/usr/local/www/status_upnp.php:35
+msgid "Rules have been cleared and the daemon restarted."
+msgstr ""
+
+#: src/usr/local/www/status_upnp.php:55
+#, php-format
+msgid "UPnP is currently disabled. It can be enabled here: %1$s%2$s%3$s."
+msgstr ""
+
+#: src/usr/local/www/status_upnp.php:55
+msgid "Services &gt; UPnP &amp; NAT-PMP"
+msgstr ""
+
+#: src/usr/local/www/status_upnp.php:63
+msgid "UPnP &amp; NAT-PMP Rules"
+msgstr ""
+
+#: src/usr/local/www/status_upnp.php:72
+msgid "Int. Port"
+msgstr ""
+
+#: src/usr/local/www/status_upnp.php:120 src/usr/local/www/status_upnp.php:122
+msgid "Clear all sessions"
+msgstr ""
+
+#: src/usr/local/www/status_wireless.php:70
+msgid ""
+"Rescan has been initiated in the background. Refresh this page in 10 seconds "
+"to see the results."
+msgstr ""
+
+#: src/usr/local/www/status_wireless.php:81
+msgid "Nearby Access Points or Ad-Hoc Peers"
+msgstr ""
+
+#: src/usr/local/www/status_wireless.php:150
+msgid "Associated or Ad-Hoc Peers"
+msgstr ""
+
+#: src/usr/local/www/status_wireless.php:207
+msgid "Rescan"
+msgstr ""
+
+#: src/usr/local/www/status_wireless.php:213
+#, php-format
+msgid ""
+"%1$sFlags:%2$s A = authorized, E = Extended Rate (802.11g), P = Power saving "
+"mode.%3$s%1$sCapabilities:%2$s E = ESS (infrastructure mode), I = IBSS (ad-"
+"hoc mode), P = privacy (WEP/TKIP/AES), S = Short preamble, s = Short slot "
+"time."
+msgstr ""
+
+#: src/usr/local/www/system.php:119
+msgid "AHEAD of"
+msgstr ""
+
+#: src/usr/local/www/system.php:122
+msgid "BEHIND"
+msgstr ""
+
+#: src/usr/local/www/system.php:130
+#, php-format
+msgid "(%1$s hour %2$s GMT)"
+msgid_plural "(%1$s hours %2$s GMT)"
+msgstr[0] ""
+msgstr[1] ""
+
+#: src/usr/local/www/system.php:196
+msgid "The domain may only contain the characters a-z, 0-9, '-' and '.'."
+msgstr ""
+
+#: src/usr/local/www/system.php:209
+#, php-format
+msgid "A valid IP address must be specified for DNS server %s."
+msgstr ""
+
+#: src/usr/local/www/system.php:215
+#, php-format
+msgid ""
+"The IPv6 gateway \"%1$s\" can not be specified for IPv4 DNS server \"%2$s\"."
+msgstr ""
+
+#: src/usr/local/www/system.php:218
+#, php-format
+msgid ""
+"The IPv4 gateway \"%1$s\" can not be specified for IPv6 DNS server \"%2$s\"."
+msgstr ""
+
+#: src/usr/local/www/system.php:231
+msgid ""
+"Each configured DNS server must have a unique IP address. Remove the "
+"duplicated IP."
+msgstr ""
+
+#: src/usr/local/www/system.php:243
+#, php-format
+msgid ""
+"A gateway can not be assigned to DNS '%s' server which is on a directly "
+"connected network."
+msgstr ""
+
+#: src/usr/local/www/system.php:256
+msgid ""
+"A NTP Time Server name may only contain the characters a-z, 0-9, '-' and '.'."
+""
+msgstr ""
+
+#: src/usr/local/www/system.php:434
+msgid "Name of the firewall host, without domain part"
+msgstr ""
+
+#: src/usr/local/www/system.php:442
+msgid ""
+"Do not use 'local' as a domain name. It will cause local hosts running mDNS "
+"(avahi, bonjour, etc.) to be unable to resolve local hosts not running mDNS."
+msgstr ""
+
+#: src/usr/local/www/system.php:448
+msgid "DNS Server Settings"
+msgstr ""
+
+#: src/usr/local/www/system.php:456
+msgid "Enter IP addresses to be used by the system for DNS resolution."
+msgstr ""
+
+#: src/usr/local/www/system.php:457
+msgid ""
+"These are also used for the DHCP service, DNS Forwarder and DNS Resolver "
+"when it has DNS Query Forwarding enabled."
+msgstr ""
+
+#: src/usr/local/www/system.php:458
+msgid "Optionally select the gateway for each DNS server."
+msgstr ""
+
+#: src/usr/local/www/system.php:459
+msgid ""
+"When using multiple WAN connections there should be at least one unique DNS "
+"server per gateway."
+msgstr ""
+
+#: src/usr/local/www/system.php:474
+msgid "DNS Server"
+msgstr ""
+
+#: src/usr/local/www/system.php:515
+msgid "Add DNS Server"
+msgstr ""
+
+#: src/usr/local/www/system.php:522
+msgid "DNS Server Override"
+msgstr ""
+
+#: src/usr/local/www/system.php:525
+#, php-format
+msgid ""
+"If this option is set, %s will use DNS servers assigned by a DHCP/PPP server "
+"on WAN for its own purposes (including the DNS Forwarder/DNS Resolver). "
+"However, they will not be assigned to DHCP clients."
+msgstr ""
+
+#: src/usr/local/www/system.php:532
+msgid "Disable DNS Forwarder"
+msgstr ""
+
+#: src/usr/local/www/system.php:535
+msgid ""
+"By default localhost (127.0.0.1) will be used as the first DNS server where "
+"the DNS Forwarder or DNS Resolver is enabled and set to listen on localhost, "
+"so system can use the local DNS service to perform lookups. Checking this "
+"box omits localhost from the list of DNS servers in resolv.conf."
+msgstr ""
+
+#: src/usr/local/www/system.php:542
+msgid "Localization"
+msgstr ""
+
+#: src/usr/local/www/system.php:546
+msgid "*Timezone"
+msgstr ""
+
+#: src/usr/local/www/system.php:549
+#, php-format
+msgid ""
+"Select a geographic region name (Continent/Location) to determine the "
+"timezone for the firewall. %1$sChoose a special or \"Etc\" zone only in "
+"cases where the geographic zones do not properly handle the clock offset "
+"required for this firewall."
+msgstr ""
+
+#: src/usr/local/www/system.php:554
+msgid "Timeservers"
+msgstr ""
+
+#: src/usr/local/www/system.php:557
+msgid ""
+"Use a space to separate multiple hosts (only one required). Remember to set "
+"up at least one DNS server if a host name is entered here!"
+msgstr ""
+
+#: src/usr/local/www/system.php:562
+msgid "*Language"
+msgstr ""
+
+#: src/usr/local/www/system.php:565
+msgid "Choose a language for the webConfigurator"
+msgstr ""
+
+#: src/usr/local/www/system.php:569
+#: src/usr/local/www/system_advanced_admin.php:308
+#: src/usr/local/www/system_certmanager.php:1021
+msgid "webConfigurator"
+msgstr ""
+
+#: src/usr/local/www/system.php:586
+msgid "Login hostname"
+msgstr ""
+
+#: src/usr/local/www/system.php:593
+msgid "Dashboard update period"
+msgstr ""
+
+#: src/usr/local/www/system.php:597
+msgid ""
+"Time in seconds between dashboard widget updates. Small values cause more "
+"frequent updates but increase the load on the web server. Minimum is 5 "
+"seconds, maximum 600 seconds"
+msgstr ""
+
+#: src/usr/local/www/system.php:605
+#: src/usr/local/www/system_user_settings.php:152
+#: src/usr/local/www/system_usermanager.php:958
+#, php-format
+msgid "%sUser-created themes are unsupported, use at your own risk."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:80
+msgid "A valid webConfigurator port number must be specified"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:86
+msgid "Max Processes must be a number 1 or greater"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:94
+#, php-format
+msgid "Alternate hostname %s is not a valid hostname."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:101
+msgid "A valid port number must be specified"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:271
+#, php-format
+msgid "One moment...redirecting to %s in 20 seconds."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:284
+#: src/usr/local/www/system_advanced_admin.php:297
+#: src/usr/local/www/system_advanced_firewall.php:378
+#: src/usr/local/www/system_advanced_misc.php:307
+#: src/usr/local/www/system_advanced_network.php:154
+#: src/usr/local/www/system_advanced_notifications.php:207
+#: src/usr/local/www/system_advanced_sysctl.php:136
+msgid "Admin Access"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:298
+#: src/usr/local/www/system_advanced_firewall.php:365
+#: src/usr/local/www/system_advanced_firewall.php:379
+#: src/usr/local/www/system_advanced_misc.php:308
+#: src/usr/local/www/system_advanced_network.php:155
+#: src/usr/local/www/system_advanced_notifications.php:208
+#: src/usr/local/www/system_advanced_sysctl.php:137
+msgid "Firewall & NAT"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:300
+#: src/usr/local/www/system_advanced_firewall.php:381
+#: src/usr/local/www/system_advanced_misc.php:293
+#: src/usr/local/www/system_advanced_misc.php:310
+#: src/usr/local/www/system_advanced_network.php:157
+#: src/usr/local/www/system_advanced_notifications.php:210
+#: src/usr/local/www/system_advanced_sysctl.php:139
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
+msgid "Miscellaneous"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:301
+#: src/usr/local/www/system_advanced_firewall.php:382
+#: src/usr/local/www/system_advanced_misc.php:311
+#: src/usr/local/www/system_advanced_network.php:158
+#: src/usr/local/www/system_advanced_notifications.php:211
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
+msgid "System Tunables"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:302
+#: src/usr/local/www/system_advanced_firewall.php:383
+#: src/usr/local/www/system_advanced_misc.php:312
+#: src/usr/local/www/system_advanced_network.php:159
+#: src/usr/local/www/system_advanced_notifications.php:194
+#: src/usr/local/www/system_advanced_notifications.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:141
+msgid "Notifications"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:328
+#, php-format
+msgid ""
+"No Certificates have been defined. A certificate is required before SSL can "
+"be enabled. %1$s Create or Import %2$s a Certificate."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:341
+msgid "SSL Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:348
+msgid "TCP port"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:352
+msgid ""
+"Enter a custom port number for the webConfigurator above to override the "
+"default (80 for HTTP, 443 for HTTPS). Changes will take effect immediately "
+"after save."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:358
+msgid "Max Processes"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:361
+msgid ""
+"Enter the number of webConfigurator processes to run. This defaults to 2. "
+"Increasing this will allow more users/browsers to access the GUI "
+"concurrently."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:367
+msgid "WebGUI redirect"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:370
+msgid ""
+"When this is unchecked, access to the webConfigurator is always permitted "
+"even on port 80, regardless of the listening port configured. Check this box "
+"to disable this automatically added redirect rule."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:376
+msgid "WebGUI Login Autocomplete"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:379
+msgid ""
+"When this is checked, login credentials for the webConfigurator may be saved "
+"by the browser. While convenient, some security standards require this to be "
+"disabled. Check this box to enable autocomplete on the login form so that "
+"browsers will prompt to save credentials (NOTE: Some browsers do not respect "
+"this option)."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:387
+msgid "WebGUI login messages"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:390
+msgid ""
+"When this is checked, successful logins to the webConfigurator will not be "
+"logged."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:401
+msgid "Anti-lockout"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:404
+#, php-format
+msgid ""
+"When this is unchecked, access to the webConfigurator on the %1$s interface "
+"is always permitted, regardless of the user-defined firewall rule set. Check "
+"this box to disable this automatically added rule, so access to the "
+"webConfigurator is controlled by the user-defined firewall rules (ensure a "
+"firewall rule is in place that allows access, to avoid being locked out!) "
+"%2$sHint: the &quot;Set interface(s) IP address&quot; option in the console "
+"menu resets this setting as well.%3$s"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:414
+msgid "DNS Rebind Check"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:417
+#, php-format
+msgid ""
+"When this is unchecked, the system is protected against %1$sDNS Rebinding "
+"attacks%2$s. This blocks private IP responses from the configured DNS "
+"servers. Check this box to disable this protection if it interferes with "
+"webConfigurator access or name resolution in the environment."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:425
+msgid "Alternate Hostnames"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:428
+msgid ""
+"Alternate Hostnames for DNS Rebinding and HTTP_REFERER Checks. Specify "
+"alternate hostnames by which the router may be queried, to bypass the DNS "
+"Rebinding Attack checks. Separate hostnames with spaces."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:434
+msgid "Browser HTTP_REFERER enforcement"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:437
+#, php-format
+msgid ""
+"When this is unchecked, access to the webConfigurator is protected against "
+"HTTP_REFERER redirection attempts. Check this box to disable this protection "
+"if it interferes with webConfigurator access in certain corner cases such as "
+"using external scripts to interact with this system. More information on "
+"HTTP_REFERER is available from %1$sWikipedia%2$s"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:447
+msgid "Secure Shell"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:451
+msgid "Secure Shell Server"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:458
+msgid "Authentication Method"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:461
+#, php-format
+msgid ""
+"When enabled, authorized keys need to be configured for each %1$suser%2$s "
+"that has been granted secure shell access."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:467
+msgid "SSH port"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:471
+msgid "Note: Leave this blank for the default of 22."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:475
+msgid "Serial Communications"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:480
+msgid "Serial Terminal"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:483
+#, php-format
+msgid ""
+"Note:\tThis will redirect the console output and messages to the serial port."
+" The console menu can still be accessed from the internal video card/"
+"keyboard. A %1$snull modem%2$s serial cable or adapter is required to use "
+"the serial console."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:491
+msgid "Serial Speed"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:494
+msgid "Allows selection of different speeds for the serial console port."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:502
+msgid "Serial Console"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:503
+msgid "VGA Console"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:499
+msgid "Primary Console"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:505
+msgid ""
+"Select the preferred console if multiple consoles are present. The preferred "
+"console will show pfSense boot script output. All consoles display OS boot "
+"messages, console messages, and the console menu."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:511
+msgid "Console Options"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:515
+msgid "Console menu"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:551
+msgid "secure shell configuration has changed. Stopping sshd."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:554
+msgid "secure shell configuration has changed. Restarting sshd."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:83
+msgid "The Firewall Adaptive values must be set together."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:86
+msgid "The Firewall Adaptive Start value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:89
+msgid "The Firewall Adaptive End value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:92
+msgid "The Firewall Maximum States value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:95
+msgid "The Aliases Hostname Resolve Interval value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:98
+msgid "The Firewall Maximum Table Entries value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:101
+msgid "The Firewall Maximum Fragment Entries value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:104
+msgid "The TCP idle timeout must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:107
+msgid "The Reflection timeout must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:110
+msgid "The TCP first timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:113
+msgid "The TCP opening timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:116
+msgid "The TCP established timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:119
+msgid "The TCP closing timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:122
+msgid "The TCP FIN wait timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:125
+msgid "The TCP closed timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:128
+msgid "The UDP first timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:131
+msgid "The UDP single timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:134
+msgid "The UDP multiple timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:137
+msgid "The ICMP first timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:140
+msgid "The ICMP error timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:143
+msgid "The Other first timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:146
+msgid "The Other single timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:149
+msgid "The Other multiple timeout value must be an integer."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:389
+msgid "Firewall Advanced"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:393
+msgid "IP Do-Not-Fragment compatibility"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:396
+msgid ""
+"This allows for communications with hosts that generate fragmented packets "
+"with the don't fragment (DF) bit set. Linux NFS is known to do this. This "
+"will cause the filter to not drop such packets but instead clear the don't "
+"fragment bit."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:403
+msgid "IP Random id generation"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:406
+msgid ""
+"Replaces the IP identification field of packets with random values to "
+"compensate for operating systems that use predictable values. This option "
+"only applies to packets that are not fragmented after the optional packet "
+"reassembly."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:417
+msgid "High-latency"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:418
+#: src/usr/local/www/vpn_ipsec_phase1.php:712
+msgid "Aggressive"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:419
+msgid "Conservative"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:413
+msgid "Firewall Optimization Options"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:421
+msgid "Select the type of state table optimization to use"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:425
+msgid "Disable Firewall"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:428
+#, php-format
+msgid ""
+"Note: This converts %1$s into a routing only platform!%2$sNote: This will "
+"also turn off NAT! To only disable NAT, and not firewall rules, visit the "
+"%3$sOutbound NAT%4$s page."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:434
+msgid "Disable Firewall Scrub"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:439
+msgid "Firewall Adaptive Timeouts"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:443
+msgid "Adaptive start"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:447
+#, php-format
+msgid ""
+"When the number of state entries exceeds this value, adaptive scaling begins."
+"  All timeout values are scaled linearly with factor (adaptive.end - number "
+"of states) / (adaptive.end - adaptive.start). Defaults to 60% of the "
+"Firewall Maximum States value"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:454
+msgid "Adaptive end"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:458
+#, php-format
+msgid ""
+"When reaching this number of state entries, all timeout values become zero, "
+"effectively purging all state entries immediately.  This value is used to "
+"define the scale factor, it should not actually be reached (set a lower "
+"state limit, see below). Defaults to 120% of the Firewall Maximum States "
+"value"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:464
+msgid ""
+"Timeouts for states can be scaled adaptively as the number of state table "
+"entries grows. Leave blank to use default values, set to 0 to disable "
+"Adaptive Timeouts."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:472
+msgid "Firewall Maximum States"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:476
+#, php-format
+msgid ""
+"Maximum number of connections to hold in the firewall state table. %1$sNote: "
+"Leave this blank for the default. On this system the default size is: %2$d"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:482
+msgid "Firewall Maximum Table Entries"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:486
+#, php-format
+msgid ""
+"Maximum number of table entries for systems such as aliases, sshlockout, "
+"snort, etc, combined.%1$sNote: Leave this blank for the default. On this "
+"system the default size is: %2$d"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:494
+msgid "Firewall Maximum Fragment Entries"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:497
+msgid ""
+"Maximum number of packet fragments to hold for reassembly by scrub rules. "
+"Leave this blank for the default (5000)"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:501
+msgid "Static route filtering"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:504
+msgid ""
+"This option only applies if one or more static routes have been defined. If "
+"it is enabled, traffic that enters and leaves through the same interface "
+"will not be checked by the firewall. This may be desirable in some "
+"situations where multiple subnets are connected to the same interface."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:511
+msgid "Disable Auto-added VPN rules"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:514
+msgid "Note: This disables automatically added rules for IPsec."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:521
+msgid ""
+"With Multi-WAN it is generally desired to ensure traffic leaves the same "
+"interface it arrives on, hence reply-to is added automatically by default. "
+"When using bridging, this behavior must be disabled if the WAN gateway IP is "
+"different from the gateway IP of the hosts behind the bridged interface."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:528
+msgid "Disable Negate rules"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:531
+msgid ""
+"With Multi-WAN it is generally desired to ensure traffic reaches directly "
+"connected networks and VPN networks when using policy routing. This can be "
+"disabled for special purposes but it requires manually creating rules for "
+"these networks."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:537
+msgid "Aliases Hostnames Resolve Interval"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:541
+#, php-format
+msgid ""
+"Interval, in seconds, that will be used to resolve hostnames configured on "
+"aliases. %1$sNote:\t Leave this blank for the default (300s)."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:547
+msgid "Check certificate of aliases URLs"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:550
+msgid ""
+"Make sure the certificate is valid for all HTTPS addresses on aliases. If "
+"it's not valid or is revoked, do not download it."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:554
+msgid "Bogon Networks"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:561
+msgid "Monthly"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:562
+msgid "Weekly"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:563
+msgid "Daily"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:558
+msgid "Update Frequency"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:565
+msgid ""
+"The frequency of updating the lists of IP addresses that are reserved (but "
+"not RFC 1918) or not yet assigned by IANA."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:571
+msgid "Network Address Translation"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:586
+msgid "disabled"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:587
+msgid "NAT + proxy"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:588
+msgid "Pure NAT"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:583
+msgid "NAT Reflection mode for port forwards"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:590
+#, php-format
+msgid ""
+"%1$sThe pure NAT mode uses a set of NAT rules to direct packets to the "
+"target of the port forward. It has better scalability, but it must be "
+"possible to accurately determine the interface and gateway IP used for "
+"communication with the target at the time the rules are loaded. There are no "
+"inherent limits to the number of ports other than the limits of the "
+"protocols.  All protocols available for port forwards are supported.%2$sThe "
+"NAT + proxy mode uses a helper program to send packets to the target of the "
+"port forward. It is useful in setups where the interface and/or gateway IP "
+"used for communication with the target cannot be accurately determined at "
+"the time the rules are loaded. Reflection rules are not created for ranges "
+"larger than 500 ports and will not be used for more than 1000 ports total "
+"between all port forwards. Only TCP and UDP protocols are supported."
+"%3$sIndividual rules may be configured to override this system setting on a "
+"per-rule basis."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:609
+msgid "Reflection Timeout"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:613
+#, php-format
+msgid ""
+"Enter value for Reflection timeout in seconds.%1$sNote: Only applies to "
+"Reflection on port forwards in NAT + proxy mode."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:618
+msgid "Enable NAT Reflection for 1:1 NAT"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:621
+msgid ""
+"Note: Reflection on 1:1 mappings is only for the inbound component of the 1:"
+"1 mappings. This functions the same as the pure NAT mode for port forwards. "
+"For more details, refer to the pure NAT mode description above. Individual "
+"rules may be configured to override this system setting on a per-rule basis."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:629
+msgid "Enable automatic outbound NAT for Reflection"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:632
+msgid ""
+"Required for full functionality of the pure NAT mode of NAT Reflection for "
+"port forwards or NAT Reflection for 1:1 NAT. Note: This only works for "
+"assigned interfaces.  Other interfaces require manually creating the "
+"outbound NAT rules that direct the reply packets back through the router."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:639
+msgid "TFTP Proxy"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:643
+msgid "Choose the interfaces on which to enable TFTP proxy helper."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:648
+msgid "State Timeouts (seconds - blank for default)"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:655
+msgid "TCP "
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:666
+msgid "UDP "
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:677
+msgid "ICMP "
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:688
+msgid "Other "
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:707
+msgid "The default optimization algorithm"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:709
+msgid ""
+"Used for eg. satellite links. Expires idle connections later than default"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:711
+msgid ""
+"Expires idle connections quicker. More efficient use of CPU and memory but "
+"can drop legitimate idle connections"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:713
+msgid ""
+"Tries to avoid dropping any legitimate idle connections at the expense of "
+"increased memory usage and CPU utilization"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:76
+msgid "AES-NI CPU-based Acceleration"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:79
+msgid "Intel Core* CPU on-die thermal sensor"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:80
+msgid "AMD K8, K10 and K11 CPU on-die thermal sensor"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:90
+msgid "Please select a valid Cryptographic Accelerator."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:94
+msgid "Please select a valid Thermal Hardware Sensor."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:98
+msgid "/tmp Size must be numeric and should not be less than 40MiB."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:102
+msgid "/var Size must be numeric and should not be less than 60MiB."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:106
+msgid "Proxy port must be a valid port number, 1-65535."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:110
+msgid "Proxy URL must be a valid IP address or FQDN."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:114
+msgid "The proxy username contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:118
+msgid "Proxy password and confirmation must match."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:316
+msgid "Proxy Support"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:320
+msgid "Proxy URL"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:323
+msgid ""
+"Hostname or IP address of proxy server this system will use for its outbound "
+"Internet access."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:328
+msgid "Proxy Port"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:331
+msgid "Port where proxy server is listening."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:335
+msgid "Proxy Username"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:338
+msgid ""
+"Username for authentication to proxy server. Optional, leave blank to not "
+"use authentication."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:343
+msgid "Proxy Password"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:346
+msgid "Password for authentication to proxy server."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:349
+#: src/usr/local/www/system_advanced_misc.php:351
+msgid "Load Balancing"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:355
+#: src/usr/local/www/system_advanced_misc.php:356
+msgid "Use sticky connections"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:358
+msgid ""
+"Successive connections will be redirected to the servers in a round-robin "
+"manner with connections from the same source being sent to the same web "
+"server. This \"sticky connection\" will exist as long as there are states "
+"that refer to this connection. Once the states expire, so will the sticky "
+"connection. Further connections from that host will be redirected to the "
+"next web server in the round robin. Changing this option will restart the "
+"Load Balancing service."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:368
+msgid "Source tracking timeout"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:372
+msgid ""
+"Set the source tracking timeout for sticky connections. By default this is "
+"0, so source tracking is removed as soon as the state expires. Setting this "
+"timeout higher will cause the source/destination relationship to persist for "
+"longer periods of time."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:381
+msgid "Default gateway switching"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:384
+msgid ""
+"If the default gateway goes down, switch the default gateway to another "
+"available one. This is not enabled by default, as it's unnecessary in most "
+"all scenarios, which instead use gateway groups."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:389
+msgid "Power Savings"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:393
+msgid "PowerD"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:396
+msgid ""
+"The powerd utility monitors the system state and sets various power control "
+"options accordingly.  It offers four modes (maximum, minimum, adaptive and "
+"hiadaptive) that can be individually selected while on AC power or batteries."
+" The modes maximum, minimum, adaptive and hiadaptive may be abbreviated max, "
+"min, adp, hadp.\t Maximum mode chooses the highest performance values.  "
+"Minimum mode selects the lowest performance values to get the most power "
+"savings. Adaptive mode attempts to strike a balance by degrading performance "
+"when the system appears idle and increasing it when the system is busy.  It "
+"offers a good balance between a small performance loss for greatly increased "
+"power savings.  Hiadaptive mode is alike adaptive mode, but tuned for "
+"systems where performance and interactivity are more important than power "
+"consumption.\t It raises frequency faster, drops slower and keeps twice "
+"lower CPU load."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:411
+msgid "Hiadaptive"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:412
+msgid "Adaptive"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:413
+msgid "Minimum"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:414
+msgid "Maximum"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:419
+msgid "AC Power"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:426
+msgid "Battery Power"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:433
+msgid "Unknown Power"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:439
+msgid "Cryptographic & Thermal Hardware"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:443
+msgid "Cryptographic Hardware"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:446
+msgid ""
+"A cryptographic accelerator module will use hardware support to speed up "
+"some cryptographic functions on systems which have the chip. Do not enable "
+"this option with a Hifn cryptographic acceleration card, as this will take "
+"precedence and the Hifn card will not be used. Acceleration should be "
+"automatic for IPsec when using a cipher supported by the chip, such as AES-"
+"128. OpenVPN should be set for AES-128-CBC and have cryptodev enabled for "
+"hardware acceleration. If there is not a crypto chip in the system, this "
+"option will have no effect. To unload the selected module, set this option "
+"to \"none\" and then reboot."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:458
+#: src/usr/local/www/widgets/include/thermal_sensors.inc:24
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
+msgid "Thermal Sensors"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:461
+msgid ""
+"With a supported CPU, selecting a thermal sensor will load the appropriate "
+"driver to read its temperature. Setting this to \"None\" will attempt to "
+"read the temperature from an ACPI-compliant motherboard sensor instead, if "
+"one is present. If there is not a supported thermal sensor chip in the "
+"system, this option will have no effect. To unload the selected module, set "
+"this option to \"none\" and then reboot."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:474
+msgid "Schedule States"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:477
+msgid ""
+"By default, when a schedule expires, connections permitted by that schedule "
+"are killed. This option overrides that behavior by not clearing states for "
+"existing connections."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:482
+#: src/usr/local/www/system_gateways_edit.php:646
+msgid "Gateway Monitoring"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:486
+msgid "State Killing on Gateway Failure"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:489
+msgid ""
+"The monitoring process will flush all states when a gateway goes down if "
+"this box is checked."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:494
+msgid "Skip rules when gateway is down"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:497
+msgid ""
+"By default, when a rule has a gateway specified and this gateway is down, "
+"the rule is created omitting the gateway. This option overrides that "
+"behavior by omitting the entire rule instead."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:502
+msgid "RAM Disk Settings (Reboot to Apply Changes)"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:506
+msgid "Use RAM Disks"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:509
+msgid ""
+"Set this to use /tmp and /var as RAM disks (memory file system disks) on a "
+"full install rather than use the hard disk. Setting this will cause the data "
+"in /tmp and /var to be lost, including log data. RRD and DHCP Leases will be "
+"retained. Changing this setting will cause the firewall to reboot after "
+"clicking \"Save\"."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:516
+msgid "/tmp RAM Disk Size"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:520
+msgid ""
+"Set the size, in MiB, for the /tmp RAM disk. Leave blank for 40MiB. Do not "
+"set lower than 40."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:525
+msgid "/var RAM Disk Size"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:529
+msgid ""
+"Set the size, in MiB, for the /var RAM disk. Leave blank for 60MiB. Do not "
+"set lower than 60."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:534
+msgid "Periodic RRD Backup"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:538
+msgid ""
+"This will periodically backup the RRD data so it can be restored "
+"automatically on the next boot. Keep in mind that the more frequent the "
+"backup, the more writes will happen to the media."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:544
+msgid "Periodic DHCP Leases Backup"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:548
+msgid ""
+"This will periodically backup the DHCP leases so it can be restored "
+"automatically on the next boot. Keep in mind that the more frequent the "
+"backup, the more writes will happen to the media."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:554
+msgid "Periodic Logs Backup"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:558
+msgid ""
+"This will periodically backup the log directory so it can be restored "
+"automatically on the next boot. Keep in mind that the more frequent the "
+"backup, the more writes will happen to the media."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:564
+msgid "Hardware Settings"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:573
+msgid "Always on"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:571
+msgid "Hard disk standby time"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:574
+#, php-format
+msgid ""
+"Puts the hard disk into standby mode when the selected number of minutes has "
+"elapsed since the last access.%1$s%2$sDo not set this for CF cards.%3$s"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:579
+msgid "Installation Feedback"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:583
+msgid "Host UUID"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:586
+msgid ""
+"Enable this option to not send HOST UUID to pfSense as part of User-Agent "
+"header."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:592
+msgid ""
+"The \\\"Use Ramdisk\\\" setting has been changed. This will cause the "
+"firewall\\nto reboot immediately after the new setting is saved.\\n\\nPlease "
+"confirm."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:56
+msgid "An IP address to NAT IPv6 packets must be specified."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:63
+msgid "A valid DUID must be specified"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:164
+msgid "IPv6 Options"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:168
+msgid "Allow IPv6"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:171
+msgid ""
+"NOTE: This does not disable any IPv6 features on the firewall, it only "
+"blocks traffic."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:175
+msgid "IPv6 over IPv4"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:179
+msgid "IPv6 over IPv4 Tunneling"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:186
+msgid "IPv4 address of Tunnel Peer"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:191
+#, php-format
+msgid ""
+"These options create an RFC 2893 compatible mechanism for IPv4 NAT "
+"encapsulation of IPv6 packets, that can be used to tunnel IPv6 packets over "
+"IPv4 routing infrastructures. IPv6 firewall rules are %1$salso required%2$s, "
+"to control and pass encapsulated traffic."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:200
+msgid "Prefer IPv4 over IPv6"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:203
+msgid ""
+"By default, if IPv6 is configured and a hostname resolves IPv6 and IPv4 "
+"addresses, IPv6 will be used. If this option is selected, IPv4 will be "
+"preferred over IPv6."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:206
+#: src/usr/local/www/system_advanced_network.php:210
+msgid "DHCP6 DUID"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:218
+msgid "Copy DUID"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:226
+#, php-format
+msgid ""
+"This is the DHCPv6 Unique Identifier (DUID) used by the firewall when "
+"requesting an IPv6 address. %1$sBy default, the firewall automatically "
+"creates a dynamic DUID which is not saved in the firewall configuration. To "
+"ensure the same DUID is retained by the firewall at all times, enter a DUID "
+"in this field. The new DUID will take effect after a reboot or when the WAN "
+"interface(s) are reconfigured by the firewall.%1$sIf the firewall is "
+"configured to use a RAM disk for /var, the best practice is to store a DUID "
+"here otherwise the DUID will change on each reboot.%1$s%1$sYou may use the "
+"Copy DUID button to copy the system detected DUID shown in the placeholder. "
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:236
+msgid "Network Interfaces"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:240
+msgid "Hardware Checksum Offloading"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:243
+#, php-format
+msgid ""
+"Checking this option will disable hardware checksum offloading.%1$sChecksum "
+"offloading is broken in some hardware, particularly some Realtek cards. "
+"Rarely, drivers may have problems with checksum offloading and some specific "
+"NICs. This will take effect after a machine reboot or re-configure of each "
+"interface."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:251
+msgid "Hardware TCP Segmentation Offloading"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:254
+msgid ""
+"Checking this option will disable hardware TCP segmentation offloading (TSO, "
+"TSO4, TSO6). This offloading is broken in some hardware drivers, and may "
+"impact performance with some specific NICs. This will take effect after a "
+"machine reboot or re-configure of each interface."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:261
+msgid "Hardware Large Receive Offloading"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:264
+msgid ""
+"Checking this option will disable hardware large receive offloading (LRO). "
+"This offloading is broken in some hardware drivers, and may impact "
+"performance with some specific NICs. This will take effect after a machine "
+"reboot or re-configure of each interface."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:271
+msgid "ARP Handling"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:274
+msgid ""
+"This option will suppress ARP log messages when multiple interfaces reside "
+"on the same broadcast domain."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:280
+msgid "Enable flowtable support"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:282
+msgid ""
+"Enables infrastructure for caching flows as a means of accelerating L3 and "
+"L2 lookups as well as providing stateful load balancing when used with "
+"RADIX_MPATH."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:101
+msgid "Growl passwords must match"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:134
+msgid "SMTP passwords must match"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:169
+#, php-format
+msgid "This is a test message from %s.  It is safe to ignore this message."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:171
+msgid "Growl testing notification successfully sent"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:184
+#, php-format
+msgid "This is a test message from %s. It is safe to ignore this message."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:186
+msgid "SMTP testing e-mail successfully sent"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:217
+msgid "E-Mail"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:221
+msgid "Disable SMTP"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:224
+msgid ""
+"Check this option to disable SMTP notifications but preserve the settings "
+"below. Some other mechanisms, such as packages, may need these settings in "
+"place to function."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:230
+msgid "E-Mail server"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:233
+msgid ""
+"This is the FQDN or IP address of the SMTP E-Mail server to which "
+"notifications will be sent."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:238
+msgid "SMTP Port of E-Mail server"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:241
+msgid ""
+"This is the port of the SMTP E-Mail server, typically 25, 587 (submission) "
+"or 465 (smtps)."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:246
+msgid "Connection timeout to E-Mail server"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:249
+msgid ""
+"This is how many seconds it will wait for the SMTP server to connect. "
+"Default is 20s."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:251
+msgid "Secure SMTP Connection"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:254
+msgid "Enable SSL/TLS"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:263
+msgid "From e-mail address"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:266
+msgid "This is the e-mail address that will appear in the from field."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:270
+msgid "Notification E-Mail address"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:273
+msgid "Enter the e-mail address to send email notifications to."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:278
+msgid "Notification E-Mail auth username (optional)"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:282
+msgid "Enter the e-mail address username for SMTP authentication."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:286
+msgid "Notification E-Mail auth password"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:289
+msgid "Enter the e-mail account password for SMTP authentication."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:293
+msgid "Notification E-Mail auth mechanism"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:296
+msgid ""
+"Select the authentication mechanism used by the SMTP server. Most work with "
+"PLAIN, some servers like Exchange or Office365 might require LOGIN. "
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:300
+msgid "Test SMTP Settings"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:303
+msgid ""
+"A test notification will be sent even if the service is marked as disabled.  "
+"The last SAVED values will be used, not necessarily the values entered here."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:308
+msgid "Sounds"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:312
+msgid "Startup/Shutdown Sound"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:315
+msgid "When this is checked, startup and shutdown sounds will no longer play."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:320
+msgid "Growl"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:324
+msgid "Disable Growl"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:327
+msgid ""
+"Check this option to disable growl notifications but preserve the settings "
+"below."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:332
+msgid "Registration Name"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:336
+msgid "Enter the name to register with the Growl server."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:340
+msgid "Notification Name"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:345
+msgid "Enter a name for the Growl notifications."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:352
+msgid "This is the IP address to send growl notifications to."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:359
+msgid "Enter the password of the remote growl notification device."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:363
+msgid "Test Growl Settings"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:366
+msgid ""
+"A test notification will be sent even if the service is marked as disabled."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:92
+msgid "Both a name and a value must be specified."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:94
+msgid "The value may only contain alphanumeric characters, -, _, %, and /."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:132
+msgid "The firewall tunables have changed."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:152
+msgid "NOTE: "
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:152
+msgid "The options on this page are intended for use by advanced users only."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:155
+msgid "Tunable Name"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:158
+msgid "New"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:178
+msgid "Edit tunable"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:180
+msgid "Delete/Reset tunable"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:195
+msgid "Edit Tunable"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:199
+msgid "*Tunable"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_sysctl.php:206
+msgid "*Value"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:56
+msgid "Select LDAP containers for authentication"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:57
+msgid "Containers"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:144
+#, php-format
+msgid "Authentication Server %s deleted."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:232
+#: src/usr/local/www/system_authservers.php:255
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
+#: src/usr/local/www/system_crlmanager.php:203
+#: src/usr/local/www/system_crlmanager.php:209
+#: src/usr/local/www/system_usermanager.php:186
+#: src/usr/local/www/system_usermanager.php:887
+msgid "Descriptive name"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:234
+#: src/usr/local/www/system_authservers.php:258
+msgid "Hostname or IP"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:235
+msgid "Port value"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:237
+msgid "Protocol version"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:238
+msgid "Search level"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:239
+msgid "User naming Attribute"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:240
+msgid "Group naming Attribute"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:241
+msgid "Group member attribute"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:242
+msgid "Authentication container"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:247
+msgid "Bind user DN"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:248
+msgid "Bind Password"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:257
+msgid "Radius Protocol"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:270
+#: src/usr/local/www/system_authservers.php:771
+msgid "Accounting port"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:282
+msgid "The host name contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:286
+msgid "An authentication server with the same name already exists."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:292
+#, php-format
+msgid "%s Timeout value must be numeric and positive."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:408
+#: src/usr/local/www/system_authservers.php:430
+#: src/usr/local/www/system_authservers.php:436
+#: src/usr/local/www/system_groupmanager.php:298
+#: src/usr/local/www/system_groupmanager_addprivs.php:140
+#: src/usr/local/www/system_usermanager.php:567
+#: src/usr/local/www/system_usermanager_addprivs.php:132
+#: src/usr/local/www/system_usermanager_settings.php:185
+msgid "Authentication Servers"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:427
+#: src/usr/local/www/system_groupmanager.php:295
+#: src/usr/local/www/system_groupmanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager.php:542
+#: src/usr/local/www/system_usermanager.php:564
+#: src/usr/local/www/system_usermanager.php:574
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
+#: src/usr/local/www/system_usermanager_settings.php:182
+#: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
+#: src/usr/local/www/vpn_l2tp_users.php:85
+#: src/usr/local/www/vpn_l2tp_users_edit.php:29
+msgid "Users"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:428
+#: src/usr/local/www/system_groupmanager.php:276
+#: src/usr/local/www/system_groupmanager.php:296
+#: src/usr/local/www/system_groupmanager.php:304
+#: src/usr/local/www/system_groupmanager_addprivs.php:44
+#: src/usr/local/www/system_groupmanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager.php:565
+#: src/usr/local/www/system_usermanager.php:584
+#: src/usr/local/www/system_usermanager_addprivs.php:130
+#: src/usr/local/www/system_usermanager_settings.php:183
+msgid "Groups"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:442
+msgid "Server Name"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:456
+#: src/usr/local/www/vpn_openvpn_server.php:1372
+msgid "Edit server"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:457
+#: src/usr/local/www/vpn_openvpn_server.php:1373
+msgid "Delete server"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:489
+msgid "Server Settings"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:493
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
+#: src/usr/local/www/system_crlmanager.php:363
+#: src/usr/local/www/system_crlmanager.php:428
+msgid "*Descriptive name"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:508
+msgid "LDAP Server Settings"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:516
+#: src/usr/local/www/system_authservers.php:743
+msgid "*Hostname or IP address"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:519
+msgid ""
+"NOTE: When using SSL or STARTTLS, this hostname MUST match the Common Name "
+"(CN) of the LDAP server's SSL Certificate."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:524
+msgid "*Port value"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:531
+msgid "*Transport"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:539
+#: src/usr/local/www/system_authservers.php:551
+msgid "Peer Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:554
+msgid ""
+"This option is used if 'SSL Encrypted' or 'TCP - STARTTLS' options are "
+"chosen. It must match with the CA in the AD otherwise problems will arise."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:561
+msgid "*Protocol version"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:568
+msgid "Server Timeout"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:572
+msgid "Timeout for LDAP operations (seconds)"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:574
+#: src/usr/local/www/system_authservers.php:592
+msgid "Search scope"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:578
+msgid "*Level"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:585
+msgid "Base DN"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:596
+msgid "Authentication containers"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:599
+msgid "*Containers"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:602
+#, php-format
+msgid ""
+"Note: Semi-Colon separated. This will be prepended to the search base dn "
+"above or the full container path can be specified containing a dc= component."
+"%1$sExample: CN=Users;DC=example,DC=com or OU=Staff;OU=Freelancers"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:608
+msgid "Select a container"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:617
+msgid "Extended query"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:622
+#: src/usr/local/www/system_authservers.php:627
+msgid "Query"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:630
+msgid "Example: &amp;(objectClass=inetOrgPerson)(mail=*@example.com)"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:636
+msgid "Bind anonymous"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:641
+msgid "*Bind credentials"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:646
+msgid "User DN:"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:668
+msgid "Initial Template"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:676
+msgid "*User naming attribute"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:683
+msgid "*Group naming attribute"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:690
+msgid "*Group member attribute"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:697
+msgid "RFC 2307 Groups"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:700
+msgid ""
+"RFC 2307 style group membership has members listed on the group object "
+"rather than using groups listed on user object. Leave unchecked for Active "
+"Directory style group membership (RFC 2307bis)."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:706
+msgid "Group Object Class"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:710
+msgid ""
+"Object class used for groups in RFC2307 mode. Typically \"posixGroup\" or "
+"\"group\"."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:715
+msgid "UTF8 Encode"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:718
+msgid ""
+"Required to support international characters, but may not be supported by "
+"every LDAP server."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:723
+msgid "Username Alterations"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:726
+msgid "e.g. user@host becomes user when unchecked."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:731
+msgid "RADIUS Server Settings"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:750
+msgid "*Shared Secret"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:757
+msgid "*Services offered"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:778
+msgid "Authentication Timeout"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:781
+msgid ""
+"This value controls how long, in seconds, that the RADIUS server may take to "
+"respond to an authentication request. If left blank, the default value is 5 "
+"seconds. NOTE: If using an interactive two-factor authentication system, "
+"increase this timeout to account for how long it will take the user to "
+"receive and enter a token."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:800
+msgid "LDAP containers"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:817
+msgid "Please fill the required values."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:824
+msgid "Please fill the bind username/password."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:34
+msgid "Import an existing Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:35
+msgid "Create an internal Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:36
+msgid "Create an intermediate Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:93
+#, php-format
+msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
+msgid "Certificate data"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
+msgid "This certificate does not appear to be valid."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:172
+msgid "Encrypted private keys are not yet supported."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
+msgid ""
+"The submitted private key does not match the submitted certificate data."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
+#: src/usr/local/www/system_usermanager.php:188
+#: src/usr/local/www/system_usermanager.php:901
+msgid "Key length"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
+#: src/usr/local/www/system_usermanager.php:189
+#: src/usr/local/www/system_usermanager.php:921
+#: src/usr/local/www/vpn_ipsec_phase2.php:667
+msgid "Lifetime"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
+msgid "Distinguished name Country Code"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
+msgid "Distinguished name State or Province"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
+msgid "Distinguished name City"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
+msgid "Distinguished name Organization"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
+msgid "Distinguished name Email Address"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
+msgid "Distinguished name Common Name"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:199
+msgid "Signing Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:214
+msgid "The field 'Descriptive Name' contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
+msgid ""
+"The field 'Distinguished name Email Address' contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
+msgid ""
+"The field 'Distinguished name Common Name' contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
+msgid "Please select a valid Key Length."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
+msgid "Please select a valid Digest Algorithm."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_crlmanager.php:258
+msgid "Certificate Manager"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
+#: src/usr/local/www/system_crlmanager.php:341
+msgid "CAs"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
+#: src/usr/local/www/system_crlmanager.php:342
+#: src/usr/local/www/system_crlmanager.php:585
+msgid "Certificates"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
+#: src/usr/local/www/system_crlmanager.php:258
+#: src/usr/local/www/system_crlmanager.php:343
+msgid "Certificate Revocation"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:354
+msgid "Certificate Authorities"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:361
+#: src/usr/local/www/system_crlmanager.php:584
+msgid "Internal"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
+msgid "Issuer"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
+msgid "Distinguished Name"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
+msgid "self-signed"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
+msgid "external"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
+msgid "Valid From"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
+msgid "Valid Until"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
+msgid "IPsec Tunnel"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:425
+msgid "LDAP Server"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:429
+msgid "Edit CA"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:430
+msgid "Export CA"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:432
+msgid "Export key"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:435
+msgid "Delete CA and its CRLs"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:477
+msgid "Create / Edit CA"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
+#: src/usr/local/www/system_crlmanager.php:354
+msgid "*Method"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:497
+msgid "Existing Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
+msgid "*Certificate data"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
+msgid "Paste a certificate in X.509 PEM format here."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:508
+msgid "Certificate Private Key (optional)"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:510
+msgid ""
+"Paste the private key for the above certificate here. This is optional in "
+"most cases, but is required when generating a Certificate Revocation List "
+"(CRL)."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:516
+msgid "Serial for next certificate"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:519
+msgid ""
+"Enter a decimal number to be used as the serial number for the next "
+"certificate to be created using this CA."
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:524
+msgid "Internal Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:536
+msgid "*Signing Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:548
+msgid "*Key length (bits)"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
+msgid "*Digest Algorithm"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
+msgid ""
+"NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
+""
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
+msgid "*Lifetime (days)"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
+msgid "*Country Code"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
+msgid "*State or Province"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
+msgid "*City"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
+msgid "*Organization"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
+msgid "Organizational Unit"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
+msgid "*Email Address"
+msgstr ""
+
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/vpn_openvpn_csc.php:342
+msgid "*Common Name"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:34
+msgid "Import an existing Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:35
+msgid "Create an internal Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:36
+msgid "Create a Certificate Signing Request"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:52
+msgid "Choose an existing certificate"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:94
+#, php-format
+msgid "Certificate %s successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:221
+msgid "Key data"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:236
+#: src/usr/local/www/system_usermanager.php:187
+#: src/usr/local/www/system_usermanager.php:894
+msgid "Certificate authority"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:238
+msgid "Certificate Type"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:265
+msgid "Existing Certificate Choice"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:466
+msgid "Final Certificate data"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:490
+#, php-format
+msgid "The certificate modulus does not match the signing request modulus."
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:568
+msgid "Add a New Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:587
+msgid "Import Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:598
+msgid "*Private key data"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:600
+msgid "Paste a private key in X.509 PEM format here."
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:603
+msgid "Internal Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:609
+msgid "No internal Certificate Authorities have been defined. "
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:610
+msgid ""
+"An internal CA must be defined in order to create an internal certificate. "
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:611
+#, php-format
+msgid "%1$sCreate%2$s an internal CA."
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
+msgid "*Certificate authority"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
+msgid "*Key length"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:648
+msgid "*Certificate Type"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:651
+msgid ""
+"Type of certificate to generate. Used for placing restrictions on the usage "
+"of the generated certificate."
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:727
+msgid "Alternative Names"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:734
+msgid "FQDN or Hostname"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:736
+msgid "URI"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:737
+msgid "email address"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:771
+msgid "External Signing Request"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:786
+msgid ""
+"NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:845
+msgid "Choose an Existing Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:874
+msgid "*Existing Certificates"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:886
+msgid "Complete Signing Request for "
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:897
+msgid "Signing request data"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:901
+msgid ""
+"Copy the certificate signing data from here and forward it to a certificate "
+"authority for signing."
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:905
+msgid "*Final certificate data"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:908
+msgid "Paste the certificate received from the certificate authority here."
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:983
+msgid "private key only"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:988
+msgid "external - signature pending"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:1024
+msgid "User Cert"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:1060
+msgid "Export Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
+msgid "Export Key"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:1062
+msgid "Export P12"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:1064
+msgid "Update CSR"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:1065
+msgid "Export Request"
+msgstr ""
+
+#: src/usr/local/www/system_certmanager.php:1069
+msgid "Delete Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:37
+msgid "Create an internal Certificate Revocation List"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:38
+msgid "Import an existing Certificate Revocation List"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:84
+msgid "Invalid CRL reference."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:91
+#, php-format
+msgid "Certificate Revocation List %s is in use and cannot be deleted."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:100
+#, php-format
+msgid "Certificate Revocation List %s successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:140
+msgid "Both the Certificate and CRL must be specified."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:144
+msgid "CA mismatch between the Certificate and CRL. Unable to Revoke."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:147
+msgid "Cannot revoke certificates for an imported/external CRL."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:182
+#, php-format
+msgid "Deleted Certificate %1$s from CRL %2$s."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:189
+#, php-format
+msgid "Failed to delete Certificate %1$s from CRL %2$s."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:204
+msgid "Certificate Revocation List data"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:210
+#: src/usr/local/www/vpn_ipsec_phase1.php:220
+#: src/usr/local/www/vpn_openvpn_client.php:331
+#: src/usr/local/www/vpn_openvpn_server.php:440
+msgid "Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:350
+msgid "Create new Revocation List"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:370
+msgid "*Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:377
+msgid "Existing Certificate Revocation List"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:382
+#: src/usr/local/www/system_crlmanager.php:435
+msgid "*CRL data"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:384
+#: src/usr/local/www/system_crlmanager.php:437
+msgid "Paste a Certificate Revocation List in X.509 CRL format here."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:388
+msgid "Internal Certificate Revocation List"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:393
+msgid "Lifetime (Days)"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:401
+msgid "Serial"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:424
+msgid "Edit Imported Certificate Revocation List"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:464
+msgid "Currently Revoked Certificates for CRL"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:468
+msgid "No certificates found for this CRL."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:474
+msgid "Certificate Name"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:475
+msgid "Revocation Reason"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:476
+msgid "Revoked At"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:497
+msgid "Delete this certificate from the CRL"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:521
+msgid "No certificates found for this CA."
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:523
+msgid "Choose a Certificate to Revoke"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:531
+#: src/usr/local/www/system_usermanager.php:837
+#: src/usr/local/www/vpn_ipsec_phase1.php:220
+#: src/usr/local/www/vpn_openvpn_server.php:440
+msgid "Certificate"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:538
+msgid "Reason"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:578
+msgid "Additional Certificate Revocation Lists"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:618
+#: src/usr/local/www/system_crlmanager.php:625
+msgid "Add or Import CRL"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:645
+msgid "Export CRL"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:648
+#: src/usr/local/www/system_crlmanager.php:652
+msgid "Edit CRL"
+msgstr ""
+
+#: src/usr/local/www/system_crlmanager.php:656
+msgid "Delete CRL"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups.php:74
+#, php-format
+msgid "removed gateway group %s"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups.php:114
+#: src/usr/local/www/system_gateways.php:239
+msgid "The gateway configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups.php:119
+#: src/usr/local/www/system_gateways.php:244
+#: src/usr/local/www/system_routes.php:44
+#: src/usr/local/www/system_routes.php:212
+#: src/usr/local/www/system_routes.php:230
+#: src/usr/local/www/system_routes.php:236
+#: src/usr/local/www/system_routes_edit.php:224
+msgid "Static Routes"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups.php:170
+msgid "Edit gateway group"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups.php:171
+msgid "Copy gateway group"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups.php:172
+msgid "Delete gateway group"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups.php:193
+#, php-format
+msgid ""
+"Remember to use these Gateway Groups in firewall rules in order to enable "
+"load balancing, failover, or policy-based routing.%1$sWithout rules "
+"directing traffic into the Gateway Groups, they will not be used."
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:42
+msgid "Member Down"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:43
+#: src/usr/local/www/system_gateway_groups_edit.php:330
+msgid "Packet Loss"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:44
+#: src/usr/local/www/system_gateway_groups_edit.php:331
+msgid "High Latency"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:45
+msgid "Packet Loss or High Latency"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:81
+msgid "A valid gateway group name must be specified."
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:84
+msgid "gateway group"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:93
+msgid "Changing name on a gateway group is not allowed."
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:99
+#, php-format
+msgid "A gateway group with this name \"%s\" already exists."
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:116
+#, php-format
+msgid ""
+"A gateway group cannot have the same name as a gateway \"%s\" please choose "
+"another name."
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:121
+msgid "No gateway(s) have been selected to be used in this group"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:205
+msgid "Edit Gateway Group Entry"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:217
+msgid "*Gateway Priority"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:271
+#: src/usr/local/www/system_gateway_groups_edit.php:274
+#: src/usr/local/www/system_gateway_groups_edit.php:307
+msgid "Tier"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:313
+msgid "Link Priority"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:329
+msgid "Member down"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:332
+msgid "Packet Loss or High latency"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:326
+msgid "*Trigger Level"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:334
+msgid "When to trigger exclusion of a member"
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:83
+#, php-format
+msgid ""
+"Gateway \"%1$s\" cannot be deleted because it is in use on Gateway Group "
+"\"%2$s\""
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:85
+#: src/usr/local/www/system_gateways_edit.php:126
+#, php-format
+msgid ""
+"Gateway \"%1$s\" cannot be disabled because it is in use on Gateway Group "
+"\"%2$s\""
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:97
+#, php-format
+msgid ""
+"Gateway \"%1$s\" cannot be deleted because it is in use on Static Route "
+"\"%2$s\""
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:101
+#: src/usr/local/www/system_gateways_edit.php:138
+#, php-format
+msgid ""
+"Gateway \"%1$s\" cannot be disabled because it is in use on Static Route "
+"\"%2$s\""
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:184
+#, php-format
+msgid "Gateways: removed gateways %s"
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:260
+#: src/usr/local/www/system_gateways_edit.php:658
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:121
+msgid "Monitor IP"
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:277
+msgid "This gateway is inactive because interface is missing"
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:305
+msgid "Edit gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:306
+msgid "Copy gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:311
+msgid "Enable gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:314
+msgid "Disable gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways.php:317
+msgid "Delete gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:117
+msgid "gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:146
+msgid "A valid gateway IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:154
+msgid ""
+"Cannot add IPv4 Gateway Address because no IPv4 address could be found on "
+"the interface."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:176
+#: src/usr/local/www/system_gateways_edit.php:207
+#, php-format
+msgid ""
+"The gateway address %s does not lie within one of the chosen interface's "
+"subnets."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:185
+msgid ""
+"Cannot add IPv6 Gateway Address because no IPv6 address could be found on "
+"the interface."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:215
+msgid ""
+"Dynamic gateway values cannot be specified for interfaces with a static IPv4 "
+"configuration."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:220
+msgid ""
+"Dynamic gateway values cannot be specified for interfaces with a static IPv6 "
+"configuration."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:228
+msgid "A valid data payload must be specified."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:233
+#, php-format
+msgid "The IPv6 gateway address '%s' can not be used as a IPv4 gateway."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:236
+#, php-format
+msgid "The IPv4 gateway address '%s' can not be used as a IPv6 gateway."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:242
+#, php-format
+msgid "The IPv6 monitor address '%s' can not be used on a IPv4 gateway."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:245
+#, php-format
+msgid "The IPv4 monitor address '%s' can not be used on a IPv6 gateway."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:254
+msgid "Changing name on a gateway is not allowed."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:260
+#, php-format
+msgid "The gateway name \"%s\" already exists."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:266
+#, php-format
+msgid "The gateway IP address \"%s\" already exists."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:272
+#, php-format
+msgid ""
+"The monitor IP address \"%s\" is already in use. A different monitor IP must "
+"be chosen."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:284
+msgid "The low latency threshold needs to be a numeric value."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:286
+msgid "The low latency threshold needs to be positive."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:295
+msgid "The high latency threshold needs to be a numeric value."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:297
+msgid "The high latency threshold needs to be positive."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:306
+msgid "The low Packet Loss threshold needs to be a numeric value."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:308
+msgid "The low Packet Loss threshold needs to be positive."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:310
+msgid "The low Packet Loss threshold needs to be less than 100."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:319
+msgid "The high Packet Loss threshold needs to be a numeric value."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:321
+msgid "The high Packet Loss threshold needs to be positive."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:323
+msgid "The high Packet Loss threshold needs to be 100 or less."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:332
+msgid ""
+"The time period over which results are averaged needs to be a numeric value."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:334
+msgid "The time period over which results are averaged needs to be positive."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:343
+msgid "The probe interval needs to be a numeric value."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:345
+msgid "The probe interval needs to be positive."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:354
+msgid "The loss interval needs to be a numeric value."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:356
+msgid "The loss interval setting needs to be positive."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:365
+msgid "The alert interval needs to be a numeric value."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:367
+msgid "The alert interval setting needs to be positive."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:375
+msgid ""
+"The high latency threshold needs to be greater than the low latency "
+"threshold"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:380
+msgid ""
+"The high packet loss threshold needs to be higher than the low packet loss "
+"threshold"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:386
+msgid ""
+"The loss interval needs to be greater than or equal to the high latency "
+"threshold."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:391
+msgid ""
+"The time period needs to be greater than twice the probe interval plus the "
+"loss interval."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:397
+msgid ""
+"The alert interval needs to be greater than or equal to the probe interval."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:589
+msgid "Edit Gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:596
+msgid ""
+"Set this option to disable this gateway without removing it from the list."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:603
+msgid "Choose which interface this gateway applies to."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:613
+msgid "Choose the Internet Protocol this gateway uses."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:629
+msgid "Gateway IP address"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:639
+msgid "Default Gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:649
+msgid "This will consider this gateway as always being up."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:653
+msgid "Gateway Action"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:656
+msgid ""
+"No action will be taken on gateway events. The gateway is always considered "
+"up."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:669
+msgid ""
+"Enter an alternative address here to be used to monitor the link. This is "
+"used for the quality RRD graphs as well as the load balancer entries. Use "
+"this if the gateway does not respond to ICMP echo requests (pings)."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:677
+msgid "Force state"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:680
+msgid "This will force this gateway to be considered down."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:687
+msgid "A description may be entered here for reference (not parsed)."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:714
+msgid "Weight for this gateway when used in a Gateway Group."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:718
+msgid "Data Payload"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:722
+msgid "Define data payload to send on ICMP packets to gateway monitor IP."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:724
+msgid "Latency thresholds"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:739
+#, php-format
+msgid ""
+"Low and high thresholds for latency in milliseconds. Default is %1$d/%2$d."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:744
+msgid "Packet Loss thresholds"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:759
+#, php-format
+msgid "Low and high thresholds for packet loss in %%. Default is %1$d/%2$d."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:765
+msgid "Probe Interval"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:772
+#, php-format
+msgid "How often an ICMP probe will be sent in milliseconds. Default is %d."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:776
+msgid "Loss Interval"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:780
+#, php-format
+msgid ""
+"Time interval in milliseconds before packets are treated as lost. Default is "
+"%d."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:783
+msgid "Time Period"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:793
+#, php-format
+msgid ""
+"Time period in milliseconds over which results are averaged. Default is %d."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:797
+msgid "Alert interval"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:807
+#, php-format
+msgid ""
+"Time interval in milliseconds between checking for an alert condition. "
+"Default is %d."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:812
+msgid "Additional information"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:814
+msgid ""
+"The time period, probe interval and loss interval are closely related. The "
+"ratio between these values control the accuracy of the numbers reported and "
+"the timeliness of alerts."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:818
+msgid ""
+"A longer time period will provide smoother results for round trip time and "
+"loss, but will increase the time before a latency or loss alert is triggered."
+""
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:821
+msgid ""
+"A shorter probe interval will decrease the time required before a latency or "
+"loss alert is triggered, but will use more network resource. Longer probe "
+"intervals will degrade the accuracy of the quality graphs."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:825
+msgid ""
+"The ratio of the probe interval to the time period (minus the loss interval) "
+"also controls the resolution of loss reporting. To determine the resolution, "
+"the following formula can be used:"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:829
+msgid ""
+"&nbsp;&nbsp;&nbsp;&nbsp;100 * probe interval / (time period - loss interval)"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:831
+msgid ""
+"Rounding up to the nearest whole number will yield the resolution of loss "
+"reporting in percent. The default values provide a resolution of 1%."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:834
+msgid ""
+"The default settings are recommended for most use cases. However if changing "
+"the settings, please observe the following restrictions:"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:837
+msgid ""
+"- The time period must be greater than twice the probe interval plus the "
+"loss interval. This guarantees there is at least one completed probe at all "
+"times. "
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:840
+msgid ""
+"- The alert interval must be greater than or equal to the probe interval. "
+"There is no point checking for alerts more often than probes are done."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:843
+msgid ""
+"- The loss interval must be greater than or equal to the high latency "
+"threshold."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:849
+msgid "Use non-local gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:852
+msgid ""
+"This will allow use of a gateway outside of this interface's subnet. This is "
+"usually indicative of a configuration error, but is required for some "
+"scenarios."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:81
+#, php-format
+msgid "Group %s successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:105
+#, php-format
+msgid "Privilege %s successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:130
+msgid "Selected groups removed successfully."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:147
+#: src/usr/local/www/system_groupmanager.php:151
+#, php-format
+msgid "The (%s) group name contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:156
+msgid "The group name is longer than 16 characters."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:163
+msgid "One or more invalid group members was submitted."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:172
+msgid "Another entry with the same group name already exists."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:245
+#: src/usr/local/www/system_usermanager.php:457
+msgid "(admin privilege)"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:249
+#: src/usr/local/www/system_usermanager.php:463
+msgid "Delete Privilege"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:257
+msgid ""
+"Security notice: Users in this group effectively have administrator-level "
+"access"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:310
+msgid "Group name"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:312
+msgid "Member Count"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:387
+msgid "Group Properties"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:391
+msgid "*Group name"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:401
+#: src/usr/local/www/system_groupmanager.php:408
+msgid "*Scope"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:419
+msgid "Group description, for administrative information only"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:426
+#: src/usr/local/www/system_usermanager.php:777
+msgid "Group membership"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:447
+msgid "Not members"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:463
+msgid "Move to \"Members\""
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:470
+msgid "Move to \"Not members"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:475
+#: src/usr/local/www/system_groupmanager_addprivs.php:162
+#: src/usr/local/www/system_groupmanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager.php:830
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
+msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager.php:481
+msgid "Assigned Privileges"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:44
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+msgid "Add Privileges"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:68
+#: src/usr/local/www/system_usermanager_addprivs.php:65
+msgid "Selected privileges"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:153
+msgid "Add Privileges for "
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:157
+#: src/usr/local/www/system_usermanager_addprivs.php:141
+msgid "*Assigned privileges"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:166
+#: src/usr/local/www/system_usermanager_addprivs.php:150
+msgid "Shadow"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:178
+#: src/usr/local/www/system_usermanager_addprivs.php:162
+msgid "Show only the choices containing this term"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:181
+#: src/usr/local/www/system_usermanager_addprivs.php:165
+msgid "Privilege information"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:183
+msgid ""
+"The following privileges effectively give administrator-level access to "
+"users in the group because the user gains access to execute general "
+"commands, edit system files,  modify users, change passwords or similar:"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:189
+#: src/usr/local/www/system_usermanager_addprivs.php:173
+msgid "Please take care when granting these privileges."
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
+msgid "Select a privilege from the list above for a description"
+msgstr ""
+
+#: src/usr/local/www/system_groupmanager_addprivs.php:239
+msgid ""
+"(This privilege effectively gives administrator-level access to users in the "
+"group)"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:73
+#: src/usr/local/www/vpn_openvpn_client.php:267
+#: src/usr/local/www/vpn_openvpn_client.php:345
+msgid "Password and confirmation must match."
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:78
+msgid "pfsync Synchronize Peer IP must be an IPv4 IP."
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:102
+msgid "High Availability Sync"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:119
+msgid "State Synchronization Settings (pfsync)"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:123
+msgid "Synchronize states"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:127
+#, php-format
+msgid ""
+"Each firewall sends these messages out via multicast on a specified "
+"interface, using the PFSYNC protocol (IP Protocol 240). It also listens on "
+"that interface for similar messages from other firewalls, and imports them "
+"into the local state table.%1$sThis setting should be enabled on all members "
+"of a failover group.%1$sClicking \"Save\" will force a configuration sync if "
+"it is enabled! (see Configuration Synchronization Settings below)"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:134
+msgid "Synchronize Interface"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:137
+#, php-format
+msgid ""
+"If Synchronize States is enabled this interface will be used for "
+"communication.%1$sIt is recommended to set this to an interface other than "
+"LAN! A dedicated interface works the best.%1$sAn IP must be defined on each "
+"machine participating in this failover group.%1$sAn IP must be assigned to "
+"the interface on any participating sync nodes."
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:144
+msgid "pfsync Synchronize Peer IP"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:148
+msgid ""
+"Setting this option will force pfsync to synchronize its state table to this "
+"IP address. The default is directed multicast."
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:152
+msgid "Configuration Synchronization Settings (XMLRPC Sync)"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:156
+msgid "Synchronize Config to IP"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:160
+#, php-format
+msgid ""
+"Enter the IP address of the firewall to which the selected configuration "
+"sections should be synchronized.%1$s%1$sXMLRPC sync is currently only "
+"supported over connections using the same protocol and port as this system - "
+"make sure the remote system's port and protocol are set accordingly!%1$sDo "
+"not use the Synchronize Config to IP and password option on backup cluster "
+"members!"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:166
+msgid "Remote System Username"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:169
+#, php-format
+msgid ""
+"Enter the webConfigurator username of the system entered above for "
+"synchronizing the configuration.%1$sDo not use the Synchronize Config to IP "
+"and username option on backup cluster members!"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:174
+msgid "Remote System Password"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:177
+#, php-format
+msgid ""
+"Enter the webConfigurator password of the system entered above for "
+"synchronizing the configuration.%1$sDo not use the Synchronize Config to IP "
+"and password option on backup cluster members!"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:180
+msgid "Select options to sync"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:184
+msgid "Synchronize Users and Groups"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:192
+msgid "Synchronize Auth Servers"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:200
+msgid "Synchronize Certificates"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:208
+msgid "Synchronize Rules"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:216
+msgid "Synchronize Firewall schedules"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:224
+msgid "Synchronize Firewall aliases"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:232
+msgid "Synchronize NAT"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:240
+msgid "Synchronize IPsec"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:248
+msgid "Synchronize OpenVPN"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:256
+msgid "Synchronize DHCPD"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:264
+msgid "Synchronize Wake-on-LAN"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:272
+msgid "Synchronize Static Routes"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:280
+msgid "Synchronize Load Balancer"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:288
+msgid "Synchronize Virtual IPs"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:296
+msgid "Synchronize traffic shaper (queues)"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:304
+msgid "Synchronize traffic shaper (limiter)"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:312
+msgid "Synchronize DNS (Forwarder/Resolver)"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:320
+msgid "Synchronize Captive Portal)"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:109
+#, php-format
+msgid "removed route to %s"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:127
+#, php-format
+msgid "removed route to%s"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:140
+#, php-format
+msgid "gateway is disabled, cannot enable route to %s"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:143
+#, php-format
+msgid "enabled route to %s"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:148
+#, php-format
+msgid "disabled route to %s"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:225
+msgid "The static route configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:274
+msgid "Edit route"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:276
+msgid "Copy route"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:280
+msgid "Enable route"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:283
+msgid "Disable route"
+msgstr ""
+
+#: src/usr/local/www/system_routes.php:286
+msgid "Delete route"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:80
+msgid "Destination network"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:81
+msgid "Destination network bit count"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:87
+msgid "A valid IPv4 or IPv6 destination network must be specified."
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:90
+msgid "A valid destination network bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:96
+msgid ""
+"The gateway is disabled but the route is not. The route must be disabled in "
+"order to choose a disabled gateway."
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:100
+#, php-format
+msgid "The gateway \"%1$s\" is a different Address Family than network \"%2$s\"."
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:114
+msgid "A IPv4 subnet can not be over 32 bits."
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:163
+msgid "A route to these destination networks already exists"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:173
+#: src/usr/local/www/system_routes_edit.php:179
+#, php-format
+msgid "This network conflicts with address configured on interface %s."
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:244
+msgid "Edit Route Entry"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:248
+msgid "*Destination network"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:251
+msgid "Destination network for this static route"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:259
+msgid "*Gateway"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:262
+#, php-format
+msgid ""
+"Choose which gateway this route applies to or %1$sadd a new one first%2$s"
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:270
+msgid ""
+"Set this option to disable this static route without removing it from the "
+"list."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:101
+msgid "Changes have been saved successfully"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:153
+msgid "Firmware Branch"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:157
+msgid "*Branch"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:160
+#, php-format
+msgid ""
+"Please select the stable, or the development branch from which to update the "
+"system firmware. %1$sUse of the development version is at your own risk!"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:165
+msgid "Updates"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:169
+msgid "Dashboard check"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:177
+msgid "GitSync"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:181
+msgid "Auto sync on update"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:184
+msgid ""
+"After updating, sync with the following repository/branch before reboot."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:196
+msgid "Repository URL"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:199
+#, php-format
+msgid ""
+"The most recently used repository was %s. This repository will be used if "
+"the field is left blank."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:217
+msgid "Branch name"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:220
+#, php-format
+msgid ""
+"The most recently used branch was \"%1$s\". (Usually the branch name is "
+"master)%2$sNote: Sync will not be performed if a branch is not specified."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:223
+msgid "Sync options"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:230
+msgid "Copy of only the updated files."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:237
+msgid "Copy of only the different or missing files."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:244
+#, php-format
+msgid "Show different and missing files.%1$sWith 'Diff/Minimal' option.."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:251
+#, php-format
+msgid "Show constructed command.%1$sWith 'Diff/Minimal' option."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:258
+#, php-format
+msgid "Dry-run only.%1$sNo files copied."
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:260
+msgid ""
+"See \"playback gitsync --help\" in console \"PHP Shell + pfSense tools\" for "
+"additional information."
+msgstr ""
+
+#: src/usr/local/www/system_user_settings.php:52
+msgid "The settings cannot be managed for a non-local user."
+msgstr ""
+
+#: src/usr/local/www/system_user_settings.php:129
+#, php-format
+msgid "User settings successfully changed for user %s."
+msgstr ""
+
+#: src/usr/local/www/system_user_settings.php:146
+msgid "User Settings for "
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:89
+#: src/usr/local/www/system_usermanager.php:119
+#, php-format
+msgid ""
+"Cannot delete user %s because you are currently logged in as that user."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:95
+#: src/usr/local/www/system_usermanager.php:134
+#, php-format
+msgid "User %s successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:128
+#, php-format
+msgid "Cannot delete user %s because it is a system user."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:136
+#, php-format
+msgid "Users %s successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:155
+#, php-format
+msgid "Certificate %s association removed."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:164
+#, php-format
+msgid "Privilege %s removed."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:200
+msgid "The username is longer than 16 characters."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:204
+#: src/usr/local/www/system_usermanager_passwordmg.php:44
+#: src/usr/local/www/vpn_l2tp_users_edit.php:95
+msgid "The passwords do not match."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:208
+msgid "IPsec Pre-Shared Key contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:215
+msgid "One or more invalid groups was submitted."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:229
+#: src/usr/local/www/vpn_l2tp_users_edit.php:105
+msgid "Another entry with the same username already exists."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:240
+msgid "That username is reserved by the system."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:260
+msgid "Invalid expiration date format; use MM/DD/YYYY instead."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:267
+msgid "Invalid internal Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:435
+msgid "Inherited from"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:477
+msgid "Security notice: This user effectively has administrator-level access"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:504
+msgid "CA"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:523
+msgid "Remove this certificate association? (Certificate will not be deleted)"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:582
+#: src/usr/local/www/system_usermanager.php:750
+msgid "Full name"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:611
+#: src/usr/local/www/vpn_ipsec_keys.php:132
+#: src/usr/local/www/vpn_l2tp_users.php:111
+msgid "Edit user"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:613
+#: src/usr/local/www/vpn_l2tp_users.php:112
+msgid "Delete user"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:629
+msgid "Delete selected users"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:638
+msgid ""
+"Additional users can be added here. User permissions for accessing the "
+"webConfigurator can be assigned directly or inherited from group memberships."
+" Some system object properties can be modified but they cannot be deleted."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:641
+msgid ""
+"Accounts added here are also used for other parts of the system such as "
+"OpenVPN, IPsec, and Captive Portal."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:689
+msgid "User Properties"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:692
+msgid "Defined by"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:742
+msgid "Confirm Password"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:753
+msgid "User's full name, for administrative information only"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:761
+msgid "Expiration date"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:764
+msgid ""
+"Leave blank if the account shouldn't expire, otherwise enter the expiration "
+"date as MM/DD/YYYY"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:769
+msgid "Custom Settings"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:802
+msgid "Not member of"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:810
+msgid "Member of"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:818
+msgid "Move to \"Member of\" list"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:825
+msgid "Move to \"Not member of\" list"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:850
+msgid "Effective Privileges"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:860
+msgid "User Certificates"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:872
+msgid "Create Certificate for User"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:914
+#, php-format
+msgid ""
+"The larger the key, the more security it offers, but larger keys take "
+"considerably more time to generate, and take slightly longer to validate "
+"leading to a slight slowdown in setting up new sessions (not always "
+"noticeable). As of 2016, 2048 bit is the minimum and most common selection "
+"and 4096 is the maximum in common use. For more information see %1$s."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:932
+msgid "Keys"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:936
+msgid "Authorized keys"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:943
+msgid "Authorized SSH Keys"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:945
+msgid "Enter authorized SSH keys for this user"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:949
+msgid "IPsec Pre-Shared Key"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_addprivs.php:137
+msgid "User Privileges"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_addprivs.php:167
+msgid ""
+"The following privileges effectively give the user administrator-level "
+"access  because the user gains access to execute general commands, edit "
+"system files,  modify users, change passwords or similar:"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_addprivs.php:233
+msgid ""
+"(This privilege effectively gives administrator-level access to the user)"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_passwordmg.php:33
+msgid "User Password"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_passwordmg.php:61
+msgid "Password successfully changed."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_passwordmg.php:90
+msgid "The password cannot be changed for a non-local user."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_passwordmg.php:97
+msgid "Update Password"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_passwordmg.php:107
+msgid "*Confirmation"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_passwordmg.php:109
+msgid "Select a new password"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:44
+#, php-format
+msgid "%1$sError: Could not find settings for %2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:51
+#, php-format
+msgid "Attempting connection to %1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:53
+#: src/usr/local/www/system_usermanager_settings.php:57
+#: src/usr/local/www/system_usermanager_settings.php:63
+#: src/usr/local/www/uploadconfig.php:49
+msgid "OK"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:55
+#, php-format
+msgid "Attempting bind to %1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:59
+#, php-format
+msgid "Attempting to fetch Organizational Units from %1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:67
+msgid "Organization units found"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:77
+#: src/usr/local/www/system_usermanager_settings.php:83
+#: src/usr/local/www/system_usermanager_settings.php:87
+msgid "failed"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:121
+msgid "Session timeout must be an integer value."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:128
+msgid ""
+"Authentication refresh time must be an integer between 0 and 3600 "
+"(inclusive)."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:133
+msgid ""
+"Settings have been saved, but the test was not performed because it is not "
+"supported for local databases."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:143
+msgid ""
+"Settings have been saved, but the test was not performed because it is "
+"supported only for LDAP based backends."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:203
+msgid ""
+"Time in minutes to expire idle management sessions. The default is 4 hours "
+"(240 minutes). Enter 0 to never expire sessions. NOTE: This is a security "
+"risk!"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:221
+msgid "Auth Refresh Time"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:225
+msgid ""
+"Time in seconds to cache authentication results. The default is 30 seconds, "
+"maximum 3600 (one hour). Shorter times result in more frequent queries to "
+"authentication servers."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:230
+msgid "Save & Test"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:237
+msgid "LDAP settings"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:240
+msgid "Test results"
+msgstr ""
+
+#: src/usr/local/www/uploadconfig.php:43
+msgid "ERR Could not save configuration."
+msgstr ""
+
+#: src/usr/local/www/uploadconfig.php:52
+msgid "ERR Could not install configuration."
+msgstr ""
+
+#: src/usr/local/www/uploadconfig.php:55
+msgid "ERR Invalid configuration received."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:219 src/usr/local/www/vpn_ipsec.php:226
+#: src/usr/local/www/vpn_ipsec_keys.php:87
+#: src/usr/local/www/vpn_ipsec_mobile.php:423
+#: src/usr/local/www/vpn_ipsec_phase1.php:630
+#: src/usr/local/www/vpn_ipsec_phase1.php:643
+#: src/usr/local/www/vpn_ipsec_phase2.php:407
+#: src/usr/local/www/vpn_ipsec_phase2.php:487
+#: src/usr/local/www/vpn_ipsec_settings.php:217
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:176
+msgid "Tunnels"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:227 src/usr/local/www/vpn_ipsec_keys.php:88
+#: src/usr/local/www/vpn_ipsec_mobile.php:305
+#: src/usr/local/www/vpn_ipsec_mobile.php:424
+#: src/usr/local/www/vpn_ipsec_phase1.php:627
+#: src/usr/local/www/vpn_ipsec_phase1.php:644
+#: src/usr/local/www/vpn_ipsec_phase2.php:403
+#: src/usr/local/www/vpn_ipsec_phase2.php:488
+#: src/usr/local/www/vpn_ipsec_settings.php:218
+msgid "Mobile Clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:228 src/usr/local/www/vpn_ipsec_keys.php:72
+#: src/usr/local/www/vpn_ipsec_keys.php:89
+#: src/usr/local/www/vpn_ipsec_keys.php:95
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:122
+#: src/usr/local/www/vpn_ipsec_mobile.php:425
+#: src/usr/local/www/vpn_ipsec_phase1.php:645
+#: src/usr/local/www/vpn_ipsec_phase2.php:489
+#: src/usr/local/www/vpn_ipsec_settings.php:219
+msgid "Pre-Shared Keys"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:237 src/usr/local/www/vpn_ipsec_keys.php:83
+#: src/usr/local/www/vpn_ipsec_mobile.php:407
+msgid "The IPsec tunnel configuration has been changed."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:243
+msgid "IPsec Tunnels"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:250
+msgid "IKE"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:251
+msgid "Remote Gateway"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:253
+msgid "P1 Protocol"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:254
+msgid "P1 Transforms"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:255
+msgid "P1 Description"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:273 src/usr/local/www/vpn_ipsec.php:351
+#: src/usr/local/www/vpn_ipsec.php:352
+msgid "Move checked entries to here"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:337 src/usr/local/www/vpn_ipsec.php:453
+msgid "auto"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:339 src/usr/local/www/vpn_ipsec.php:455
+msgid "bits"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:353
+msgid "Edit phase1 entry"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:355
+msgid "Copy phase1 entry"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:357 src/usr/local/www/vpn_ipsec.php:358
+msgid "Delete phase1 entry"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:386
+#, php-format
+msgid "Show Phase 2 Entries (%s)"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:395
+msgid "Local Subnet"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:396
+msgid "Remote Subnet"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:397
+msgid "P2 Protocol"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:398
+msgid "P2 Transforms"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:399
+msgid "P2 Auth Methods"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:400
+msgid "P2 actions"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:423 src/usr/local/www/vpn_ipsec.php:474
+msgid "Move checked P2s here"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:475
+msgid "Edit phase2 entry"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:476
+msgid "Add a new Phase 2 based on this one"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:477
+msgid "Delete phase2 entry"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:478
+msgid "delete phase2 entry"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:487
+msgid "Add P2"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:516
+msgid "Add P1"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:519
+msgid "Delete selected P1s"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:521
+msgid "Delete P1s"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:528
+#, php-format
+msgid "The IPsec status can be checked at %1$s%2$s%3$s."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:528
+msgid "Status:IPsec"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:529
+#, php-format
+msgid "IPsec debug mode can be enabled at %1$s%2$s%3$s."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:529 src/usr/local/www/vpn_ipsec.php:530
+msgid "VPN:IPsec:Advanced Settings"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:530
+#, php-format
+msgid "IPsec can be set to prefer older SAs at %1$s%2$s%3$s."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:555
+msgid "Confirmation required to delete this P1 entry."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec.php:561
+msgid "Confirmation required to delete this P2 entry."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys.php:65
+msgid "Deleted IPsec Pre-Shared Key"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys.php:101
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:68
+msgid "Identifier"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys.php:113
+msgid "ANY USER"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys.php:155
+msgid "Edit key"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys.php:156
+msgid "Delete key"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys.php:174
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:171
+msgid "PSK for any user can be set by using an identifier of any."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:73
+msgid "The identifier contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:77
+msgid "A user with this name already exists. Add the key to the user instead."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:82
+#: src/usr/local/www/vpn_ipsec_phase1.php:232
+msgid "Pre-Shared Key contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:89
+msgid "Another entry with the same identifier already exists."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:108
+msgid "Edited IPsec Pre-Shared Keys"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:111
+msgid "Added IPsec Pre-Shared Keys"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:133
+msgid "Edit Pre-Shared-Secret"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:137
+msgid "*Identifier"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:140
+msgid ""
+"This can be either an IP address, fully qualified domain name or an e-mail "
+"address."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:144
+msgid "*Secret type"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_keys_edit.php:151
+#: src/usr/local/www/vpn_ipsec_phase1.php:758
+msgid "*Pre-Shared Key"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:155
+msgid "User Authentication Source"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:155
+msgid "Group Authentication Source"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:161
+msgid ""
+"A valid IP address for 'Virtual Address Pool Network' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:166
+msgid ""
+"A valid IPv6 address for 'Virtual IPv6 Address Pool Network' must be "
+"specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:171
+msgid "A valid value for 'DNS Default Domain' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:181
+msgid "A valid split DNS domain list must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:191
+msgid ""
+"At least one DNS server must be specified to enable the DNS Server option."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:194
+msgid "A valid IP address for 'DNS Server #1' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:197
+msgid "A valid IP address for 'DNS Server #2' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:200
+msgid "A valid IP address for 'DNS Server #3' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:203
+msgid "A valid IP address for 'DNS Server #4' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:209
+msgid ""
+"At least one WINS server must be specified to enable the DNS Server option."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:212
+msgid "A valid IP address for 'WINS Server #1' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:215
+msgid "A valid IP address for 'WINS Server #2' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:221
+msgid "A valid value for 'Login Banner' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:230
+msgid ""
+"Only valid RADIUS servers may be selected as a user source when using EAP-"
+"RADIUS for authentication on the Mobile IPsec VPN."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:415
+msgid ""
+"Support for IPsec Mobile Clients is enabled but a Phase 1 definition was not "
+"found"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:415
+msgid "Please click Create to define one."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:415
+msgid "Create Phase 1"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:431
+#: src/usr/local/www/vpn_ipsec_mobile.php:435
+msgid "Enable IPsec Mobile Client Support"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:434
+msgid "IKE Extensions"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:441
+msgid "Extended Authentication (Xauth)"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:451
+msgid "*User Authentication"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:463
+msgid "system"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:459
+msgid "*Group Authentication"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:469
+msgid "Client Configuration (mode-cfg)"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:473
+msgid "Virtual Address Pool"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:491
+msgid "Network configuration for Virtual Address Pool"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:510
+msgid "Virtual IPv6 Address Pool"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:525
+msgid "IPv6 Network"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:528
+msgid "Network configuration for Virtual IPv6 Address Pool"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:547
+msgid "Network List"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:554
+msgid "Save Xauth Password"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:557
+msgid ""
+"NOTE: With iPhone clients, this does not work when deployed via the iPhone "
+"configuration utility, only by manual entry."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:561
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
+msgid "DNS Default Domain"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:578
+msgid "Specify domain as DNS Default Domain"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:584
+msgid "Split DNS"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:601
+msgid ""
+"NOTE: If left blank, and a default domain is set, it will be used for this "
+"value."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:613
+#: src/usr/local/www/vpn_ipsec_mobile.php:622
+#: src/usr/local/www/vpn_ipsec_mobile.php:638
+#: src/usr/local/www/vpn_ipsec_mobile.php:647
+msgid "Server #"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:658
+msgid "Phase2 PFS Group"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:663
+#: src/usr/local/www/vpn_ipsec_mobile.php:672
+msgid "Group"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:681
+msgid "Login Banner"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:192
+msgid "EAP-MSChapv2 can only be used with IKEv2 type VPNs."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:197
+msgid "EAP-TLS can only be used with IKEv2 type VPNs."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:202
+msgid "EAP-RADIUS can only be used with IKEv2 type VPNs."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:225
+msgid "Remote gateway"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:236
+msgid "The P1 lifetime must be an integer."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:241
+msgid "A valid remote gateway address or host name must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:243
+msgid ""
+"A valid remote gateway IPv4 address must be specified or protocol needs to "
+"be changed to IPv6"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:245
+msgid ""
+"A valid remote gateway IPv6 address must be specified or protocol needs to "
+"be changed to IPv4"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:255
+#, php-format
+msgid "The remote gateway \"%1$s\" is already used by phase1 \"%2$s\"."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:266
+msgid "There is a Phase 2 using IPv6, cannot use IPv4."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:270
+msgid "There is a Phase 2 using IPv4, cannot use IPv6."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:284
+msgid "Please enter an address for 'My Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:288
+msgid "Please enter a keyid tag for 'My Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:292
+msgid "Please enter a fully qualified domain name for 'My Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:296
+msgid ""
+"Please enter a user and fully qualified domain name for 'My Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:300
+msgid "Please enter a dynamic domain name for 'My Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:304
+msgid "A valid IP address for 'My identifier' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:308
+msgid "A valid domain name for 'My identifier' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:313
+msgid "A valid FQDN for 'My identifier' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:320
+msgid ""
+"A valid User FQDN in the form of user@my.domain.com for 'My identifier' must "
+"be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:326
+msgid "A valid Dynamic DNS address for 'My identifier' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:339
+msgid "Please enter an address for 'Peer Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:343
+msgid "Please enter a keyid tag for 'Peer Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:347
+msgid "Please enter a fully qualified domain name for 'Peer Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:351
+msgid ""
+"Please enter a user and fully qualified domain name for 'Peer Identifier'"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:355
+msgid "A valid IP address for 'Peer identifier' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:359
+msgid "A valid domain name for 'Peer identifier' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:364
+msgid "A valid FQDN for 'Peer identifier' must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:371
+msgid ""
+"A valid User FQDN in the form of user@my.domain.com for 'Peer identifier' "
+"must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:378
+msgid "A numeric value must be specified for DPD delay."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:382
+msgid "A numeric value must be specified for DPD retries."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:387
+msgid "A numeric value must be specified for TFC bytes."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:391
+msgid "Valid arguments for IKE type are v1, v2 or auto"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:395
+msgid "Encryption Algorithm AES-GCM can only be used with IKEv2"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:405
+msgid ""
+"A valid RADIUS server must be selected for user authentication on the Mobile "
+"Clients tab in order to set EAP-RADIUS as the authentication method."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:537
+#, php-format
+msgid "GW Group %s"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:627
+#: src/usr/local/www/vpn_ipsec_phase1.php:630
+msgid "Edit Phase 1"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:651
+#: src/usr/local/www/vpn_ipsec_phase2.php:495
+#: src/usr/local/www/vpn_openvpn_client.php:484
+#: src/usr/local/www/vpn_openvpn_csc.php:313
+#: src/usr/local/www/vpn_openvpn_server.php:669
+msgid "General Information"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:662
+msgid "*Key Exchange version"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:665
+msgid ""
+"Select the Internet Key Exchange protocol version to be used. Auto uses "
+"IKEv2 when initiator, and accepts either IKEv1 or IKEv2 as responder."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:669
+msgid "*Internet Protocol"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:672
+msgid "Select the Internet Protocol family."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:679
+msgid "Select the interface for the local endpoint of this phase1 entry."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:684
+msgid "*Remote Gateway"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:687
+msgid "Enter the public IP address or host name of the remote gateway."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:699
+msgid "Phase 1 Proposal (Authentication)"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:703
+msgid "*Authentication Method"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:706
+#: src/usr/local/www/vpn_ipsec_phase1.php:804
+#: src/usr/local/www/vpn_ipsec_phase1.php:811
+msgid "Must match the setting chosen on the remote side."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:712
+msgid "Main"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:710
+msgid "*Negotiation mode"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:713
+msgid "Aggressive is more flexible, but less secure."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:715
+msgid "*My identifier"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:733
+msgid "*Peer identifier"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:751
+msgid ""
+"This is known as the \"group\" setting on some VPN client implementations"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:761
+msgid "Enter the Pre-Shared Key string."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:765
+msgid "*My Certificate"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:768
+msgid "Select a certificate previously configured in the Certificate Manager."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:772
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
+#: src/usr/local/www/vpn_openvpn_server.php:797
+#: src/usr/local/www/vpn_openvpn_server.php:803
+msgid "*Peer Certificate Authority"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:775
+msgid ""
+"Select a certificate authority previously configured in the Certificate "
+"Manager."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:779
+msgid "Phase 1 Proposal (Algorithms)"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:781
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
+msgid "*Encryption Algorithm"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:801
+msgid "*Hash Algorithm"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:808
+msgid "*DH Group"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:815
+msgid "*Lifetime (Seconds)"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:826
+msgid "Disable rekey"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:833
+msgid "Disable Reauth"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:840
+msgid "Responder Only"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:849
+msgid "Force"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:847
+msgid "NAT Traversal"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:850
+msgid ""
+"Set this option to enable the use of NAT-T (i.e. the encapsulation of ESP in "
+"UDP packets) if needed, which can help with clients that are behind "
+"restrictive firewalls."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:855
+msgid "MOBIKE"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:858
+msgid "Set this option to control the use of MOBIKE"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:862
+msgid "Split connections"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:888
+msgid "Dead Peer Detection"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:898
+msgid "Delay between requesting peer acknowledgement."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:902
+msgid "Max failures"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:905
+msgid "Number of consecutive failures allowed before disconnect. "
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:136
+msgid "A valid ikeid must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:141
+msgid "Local network type"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:141
+msgid "Unique Identifier"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:144
+msgid "Remote network type"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:153
+msgid "A valid local network bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:157
+msgid "A valid local network IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:159
+msgid ""
+"A valid local network IPv4 address must be specified or Mode needs to be "
+"changed to IPv6"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:161
+msgid ""
+"A valid local network IPv6 address must be specified or Mode needs to be "
+"changed to IPv4"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:172
+#: src/usr/local/www/vpn_ipsec_phase2.php:202
+msgid "Invalid Local Network."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:172
+#: src/usr/local/www/vpn_ipsec_phase2.php:202
+#, php-format
+msgid "%s has no subnet."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:180
+msgid "A valid NAT local network bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:183
+msgid ""
+"A network type address cannot be configured for NAT while only an address "
+"type is selected for local source."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:187
+msgid "A valid NAT local network IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:189
+msgid ""
+"A valid NAT local network IPv4 address must be specified or Mode needs to be "
+"changed to IPv6"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:191
+msgid ""
+"A valid NAT local network IPv6 address must be specified or Mode needs to be "
+"changed to IPv4"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:210
+msgid "A valid remote network bit count must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:214
+msgid "A valid remote network IP address must be specified."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:216
+msgid ""
+"A valid remote network IPv4 address must be specified or Mode needs to be "
+"changed to IPv6"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:218
+msgid ""
+"A valid remote network IPv6 address must be specified or Mode needs to be "
+"changed to IPv4"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:244
+msgid "Phase2 with this Local Network is already defined for mobile clients."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:277
+msgid ""
+"Phase2 with this Local/Remote networks combination is already defined for "
+"this Phase1."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:316
+#: src/usr/local/www/vpn_ipsec_phase2.php:321
+msgid ""
+"The local and remote networks of a phase 2 entry cannot overlap the outside "
+"of the tunnel (interface and remote gateway) configured in its phase 1."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:335
+msgid "At least one encryption algorithm must be selected."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:340
+msgid "At least one hashing algorithm needs to be selected."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:348
+msgid "The P2 lifetime must be an integer."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:403
+#: src/usr/local/www/vpn_ipsec_phase2.php:407
+msgid "Edit Phase 2"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:511
+msgid "*Local Network"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:534
+msgid "NAT/BINAT translation"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:558
+msgid ""
+"If NAT/BINAT is required on this network specify the address to be "
+"translated"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:562
+msgid "*Remote Network"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:590
+msgid "Phase 2 Proposal (SA/Key Exchange)"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:597
+msgid "ESP is encryption, AH is authentication only."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:603
+msgid "*Encryption Algorithms"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:634
+msgid ""
+"Use 3DES for best compatibility or for a hardware crypto accelerator card. "
+"Blowfish is usually the fastest in software encryption."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:641
+msgid "*Hash Algorithms"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:660
+msgid "PFS key group"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:670
+#: src/usr/local/www/widgets/widgets/log.widget.php:257
+msgid "Seconds"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:678
+msgid "Automatically ping host"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:54
+#, php-format
+msgid "A valid value must be specified for %s debug."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:62
+msgid "An integer must be specified for Maximum MSS."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:65
+msgid "An integer between 576 and 65535 must be specified for Maximum MSS"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:225
+msgid "IPsec Logging Controls"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:237
+msgid ""
+"Changes the log verbosity for the IPsec daemon, so that more detail will be "
+"generated to aid in troubleshooting."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:242
+msgid "Advanced IPsec Settings"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:246
+msgid "Configure Unique IDs as"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
+msgid ""
+"Whether a particular participant ID should be kept unique, with any new "
+"IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
+"IDs normally are unique, so a new IKE_SA using the same ID is almost "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
+"INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
+"Defaults to Yes."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:262
+msgid "IP Compression"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:265
+msgid "IPComp compression of content is proposed on the connection."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/services_dnsmasq.php:340
+msgid "Strict interface binding"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:272
+msgid ""
+"Enable strongSwan's interfaces_use option to bind specific interfaces only. "
+"This option is known to break IPsec with dynamic IP interfaces. This is not "
+"recommended at this time."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:276
+msgid "Unencrypted payloads in IKEv1 Main Mode"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:280
+msgid ""
+"Some implementations send the third Main Mode message unencrypted, probably "
+"to find the PSKs for the specified ID for authentication. This is very "
+"similar to Aggressive Mode, and has the same security implications: A "
+"passive attacker can sniff the negotiated Identity, and start brute forcing "
+"the PSK using the HASH payload. It is recommended to keep this option to no, "
+"unless the exact implications are known and compatibility is required for "
+"such devices (for example, some SonicWall boxes)."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:288
+msgid "Enable Maximum MSS"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
+msgid "Maximum MSS"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:306
+msgid ""
+"Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
+"PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:314
+msgid "Enable Cisco Extensions"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:317
+msgid ""
+"Enable Unity Plugin which provides Cisco Extension support such as Split-"
+"Include, Split-Exclude and Split-Dns."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:321
+msgid "Strict CRL Checking"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:324
+msgid ""
+"Check this to require availability of a fresh CRL for peer authentication "
+"based on RSA signatures to succeed."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:328
+msgid "Make before Break"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:331
+msgid ""
+"Instead of a break-before-make scheme. Make-before-break uses overlapping "
+"IKE and CHILD_SA during reauthentication by first recreating all new SAs "
+"before deleting the old ones. This behavior can be beneficial to avoid "
+"connectivity gaps during reauthentication, but requires support for "
+"overlapping SAs by the peer."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:337
+msgid "Auto-exclude LAN address"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:340
+msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:75
+msgid ""
+"'Server address' parameter should NOT be set to any IP address currently in "
+"use on this firewall."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:85
+msgid "Secret and confirmation must match"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:89
+msgid "RADIUS secret and confirmation must match"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:93
+msgid "Number of L2TP users must be between 1 and 255"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:102
+msgid "The specified server address is equal to the LAN interface address."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:188
+msgid "Enable L2TP"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:218
+msgid "*Server address"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
+msgid ""
+"Enter the IP address the L2TP server should give to clients for use as their "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
+"currently in use on this firewall."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:227
+msgid "*Remote address range"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:234
+msgid "*Number of L2TP users"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:241
+msgid "Secret"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:244
+msgid ""
+"Specify optional secret shared between peers. Required on some devices/"
+"setups."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:248
+msgid "*Authentication type"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:255
+msgid "Specifies the protocol to use for authentication."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:259
+msgid "Primary L2TP DNS server"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:266
+msgid "Secondary L2TP DNS server"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:281
+msgid ""
+"When set, all users will be authenticated using the RADIUS server specified "
+"below. The local user database will not be used."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:292
+msgid "*Server"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:294
+msgid "Enter the IP address of the RADIUS server."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:298
+msgid "*Secret"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:305
+msgid "RADIUS issued IPs"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:316
+msgid ""
+"Don't forget to add a firewall rule to permit traffic from L2TP clients."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users.php:75
+msgid "RADIUS is enabled. The local user database will not be used."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users.php:79
+msgid "The L2TP user list has been modified."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users.php:79
+msgid "The changes must be applied for them to take effect"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users.php:79
+msgid "Warning: this will terminate all current L2TP sessions!"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users.php:89
+msgid "L2TP Users"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users_edit.php:91
+msgid "The password contains invalid characters."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users_edit.php:98
+msgid "The IP address entered is not valid."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users_edit.php:166
+msgid "To change the users password, enter it here."
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp_users_edit.php:175
+msgid "To assign the user a specific IP address, enter it here."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:89
+msgid "Client successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:198
+#: src/usr/local/www/vpn_openvpn_server.php:270
+msgid "The selected Encryption Algorithm is not valid."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:203
+#: src/usr/local/www/vpn_openvpn_server.php:275
+msgid ""
+"Protocol and IP address families do not match. An IPv6 protocol and an IPv4 "
+"IP address cannot be selected."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:205
+#: src/usr/local/www/vpn_openvpn_server.php:277
+msgid ""
+"Protocol and IP address families do not match. An IPv4 protocol and an IPv6 "
+"IP address cannot be selected."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:210
+#: src/usr/local/www/vpn_openvpn_server.php:282
+msgid ""
+"An IPv4 protocol was selected, but the selected interface has no IPv4 "
+"address."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:216
+#: src/usr/local/www/vpn_openvpn_server.php:288
+msgid ""
+"An IPv6 protocol was selected, but the selected interface has no IPv6 "
+"address."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:235
+#: src/usr/local/www/vpn_openvpn_server.php:333
+msgid "The specified 'Local port' is in use. Please select another value"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:248
+#: src/usr/local/www/vpn_openvpn_server.php:414
+msgid "The field 'Topology' contains an invalid selection"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:263
+msgid "User name and password are required for proxy with authentication."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:293
+msgid "The bandwidth limit must be a positive numeric value."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:303
+#: src/usr/local/www/vpn_openvpn_server.php:343
+msgid "The field 'Shared Key' does not appear to be valid"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:310
+#: src/usr/local/www/vpn_openvpn_server.php:350
+msgid "The field 'TLS Key' does not appear to be valid"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:313
+#: src/usr/local/www/vpn_openvpn_server.php:353
+msgid "The field 'TLS Key Usage Mode' is not valid"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:318
+#: src/usr/local/www/vpn_openvpn_server.php:448
+msgid "GCM Encryption Algorithms cannot be used with Shared Key mode."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:326
+#: src/usr/local/www/vpn_openvpn_server.php:434
+msgid "One or more of the selected NCP Algorithms is not valid."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:335
+#: src/usr/local/www/vpn_openvpn_server.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:876
+msgid "Shared key"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:341
+msgid ""
+"If no Client Certificate is selected, a username and/or password must be "
+"entered."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:450
+#: src/usr/local/www/vpn_openvpn_client.php:475
+#: src/usr/local/www/vpn_openvpn_csc.php:304
+#: src/usr/local/www/vpn_openvpn_server.php:658
+msgid "Clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:283
+#: src/usr/local/www/vpn_openvpn_csc.php:305
+#: src/usr/local/www/vpn_openvpn_server.php:659
+msgid "Client Specific Overrides"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:491
+msgid ""
+"Set this option to disable this client without removing it from the list."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:495
+#: src/usr/local/www/vpn_openvpn_server.php:680
+msgid "*Server mode"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:509
+#: src/usr/local/www/vpn_openvpn_server.php:721
+msgid "*Device mode"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:512
+#: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
+msgid ""
+"\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:520
+msgid ""
+"The interface used by the firewall to originate this OpenVPN client "
+"connection"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:524
+msgid "Local port"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:528
+msgid ""
+"Set this option to bind to a specific port. Leave this blank or enter 0 for "
+"a random dynamic port."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:532
+msgid "*Server host or address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:535
+msgid "The IP address or hostname of the OpenVPN server."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:539
+msgid "Server hostname resolution"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:542
+msgid ""
+"Continuously attempt to resolve the server host name. Useful when "
+"communicating with a server that is not permanently connected to the "
+"Internet."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:547
+msgid "*Server port"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:550
+msgid "The port used by the server to receive client connections."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:554
+msgid "Proxy host or address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
+msgid ""
+"The address for an HTTP Proxy this client can use to connect to a remote "
+"server.%1$sTCP must be used for the client and server protocol."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:562
+msgid "Proxy port"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:571
+msgid "basic"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:571
+msgid "ntlm"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:569
+msgid "Proxy Authentication"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:572
+msgid "The type of authentication used by the proxy server."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:596
+msgid "User Authentication Settings"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:604
+msgid "Leave empty when no user name is needed"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:611
+msgid "Leave empty when no password is needed"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:615
+#: src/usr/local/www/vpn_openvpn_server.php:751
+msgid "Cryptographic Settings"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:619
+#: src/usr/local/www/vpn_openvpn_server.php:755
+msgid "TLS Configuration"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:622
+#: src/usr/local/www/vpn_openvpn_server.php:758
+msgid ""
+"A TLS key enhances security of an OpenVPN connection by requiring both "
+"parties to have a common key before a peer can perform a TLS handshake. This "
+"layer of HMAC authentication allows control channel packets without the "
+"proper key to be dropped, protecting the peers from attack or unauthorized "
+"connections.The TLS Key does not have any effect on tunnel data."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:637
+#: src/usr/local/www/vpn_openvpn_server.php:773
+msgid "*TLS Key"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:639
+#: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
+msgid ""
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
+"with an HMAC signature for authentication when establishing the tunnel. "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:644
+#: src/usr/local/www/vpn_openvpn_server.php:781
+msgid "*TLS Key Usage Mode"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:647
+#: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
+msgid ""
+"In Authentication mode the TLS key is used only as HMAC authentication for "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
+"communication, providing more privacy and traffic control channel "
+"obfuscation."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
+#: src/usr/local/www/vpn_openvpn_server.php:811
+#: src/usr/local/www/vpn_openvpn_server.php:817
+msgid "Peer Certificate Revocation list"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:685
+msgid "Auto generate"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
+msgid "*Shared Key"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
+msgid "Paste the shared key here"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:700
+msgid "Client Certificate"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
+msgid ""
+"The Encryption Algorithm used for data channel packets when Negotiable "
+"Cryptographic Parameter (NCP) support is not available."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
+msgid "Enable NCP"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
+msgid ""
+"Check this option to allow OpenVPN clients and servers to negotiate a "
+"compatible set of acceptable cryptographic Encryption Algorithms from those "
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
+msgid "NCP Algorithms"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
+msgid ""
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
+"from the list"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
+msgid ""
+"Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
+"the list"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
+msgid ""
+"The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
+"%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
+msgid "*Auth digest algorithm"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
+msgid ""
+"The algorithm used to authenticate data channel packets, and control channel "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
+"is used, such as AES-GCM, this digest is used for the control channel only, "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
+"different value. SHA1 is the default for OpenVPN. "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:769
+#: src/usr/local/www/vpn_openvpn_server.php:949
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:38
+msgid "Hardware Crypto"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:776
+#: src/usr/local/www/vpn_openvpn_csc.php:363
+#: src/usr/local/www/vpn_openvpn_server.php:971
+msgid "Tunnel Settings"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:780
+#: src/usr/local/www/vpn_openvpn_csc.php:367
+#: src/usr/local/www/vpn_openvpn_server.php:975
+msgid "IPv4 Tunnel Network"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:783
+msgid ""
+"This is the IPv4 virtual network used for private communications between "
+"this client and the server expressed using CIDR (e.g. 10.0.8.0/24). The "
+"second network address will be assigned to the client virtual interface."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:789
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
+msgid "IPv6 Tunnel Network"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:792
+msgid ""
+"This is the IPv6 virtual network used for private communications between "
+"this client and the server expressed using CIDR (e.g. fe80::/64). The second "
+"network address will be assigned to the client virtual interface."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:798
+#: src/usr/local/www/vpn_openvpn_server.php:1053
+msgid "IPv4 Remote network(s)"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:801
+#: src/usr/local/www/vpn_openvpn_server.php:1056
+msgid ""
+"IPv4 networks that will be routed through the tunnel, so that a site-to-site "
+"VPN can be established without manually changing the routing tables. "
+"Expressed as a comma-separated list of one or more CIDR ranges. If this is a "
+"site-to-site VPN, enter the remote LAN/s here. May be left blank for non "
+"site-to-site VPN."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:807
+#: src/usr/local/www/vpn_openvpn_server.php:1062
+msgid "IPv6 Remote network(s)"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:810
+#: src/usr/local/www/vpn_openvpn_server.php:1065
+msgid ""
+"These are the IPv6 networks that will be routed through the tunnel, so that "
+"a site-to-site VPN can be established without manually changing the routing "
+"tables. Expressed as a comma-separated list of one or more IP/PREFIX. If "
+"this is a site-to-site VPN, enter the remote LAN/s here. May be left blank "
+"for non site-to-site VPN."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:816
+msgid "Limit outgoing bandwidth"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:820
+msgid ""
+"Maximum outgoing bandwidth for this tunnel. Leave empty for no limit. The "
+"input value has to be something between 100 bytes/sec and 100 Mbytes/sec "
+"(entered as bytes per second)."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:827
+#: src/usr/local/www/vpn_openvpn_server.php:1081
+msgid ""
+"Compress tunnel packets using the LZO algorithm. Adaptive compression will "
+"dynamically disable compression for a period of time if OpenVPN detects that "
+"the data in the packets is not being compressed efficiently."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:831
+#: src/usr/local/www/vpn_openvpn_server.php:1134
+msgid "Topology"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:834
+msgid "Specifies the method used to configure a virtual adapter IP address."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:838
+#: src/usr/local/www/vpn_openvpn_server.php:1094
+msgid "Type-of-Service"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:845
+msgid "Don't pull routes"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:848
+msgid ""
+"This option still allows the server to set the TCP/IP properties of the "
+"client's TUN/TAP interface. "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:852
+msgid "Don't add/remove routes"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:855
+msgid "Pass routes to --route-upscript using environmental variables."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:866
+msgid ""
+"Enter any additional options to add to the OpenVPN client configuration "
+"here, separated by semicolon."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:870
+#: src/usr/local/www/vpn_openvpn_server.php:1303
+msgid "Verbosity level"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:873
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
+msgid ""
+"Each level shows all info from the previous levels. Level 3 is recommended "
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:900
+msgid "OpenVPN Clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:63
+msgid "Client specific override successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:161
+msgid "The field 'DNS Server #1' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:164
+msgid "The field 'DNS Server #2' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:167
+msgid "The field 'DNS Server #3' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:170
+msgid "The field 'DNS Server #4' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:176
+#: src/usr/local/www/vpn_openvpn_server.php:374
+msgid "The field 'NTP Server #1' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:179
+#: src/usr/local/www/vpn_openvpn_server.php:377
+msgid "The field 'NTP Server #2' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:182
+#: src/usr/local/www/vpn_openvpn_server.php:380
+msgid "The field 'NTP Server #3' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:185
+#: src/usr/local/www/vpn_openvpn_server.php:383
+msgid "The field 'NTP Server #4' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:192
+#: src/usr/local/www/vpn_openvpn_server.php:390
+msgid "The field 'WINS Server #1' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:195
+#: src/usr/local/www/vpn_openvpn_server.php:393
+msgid "The field 'WINS Server #2' must contain a valid IP address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:200
+#: src/usr/local/www/vpn_openvpn_server.php:398
+msgid ""
+"The field 'NetBIOS Data Distribution Server #1' must contain a valid IP "
+"address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:319
+#, php-format
+msgid "OpenVPN Server %d: %s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:330
+msgid ""
+"Select the servers that will utilize this override. When no servers are "
+"selected, the override will apply to all servers."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:338
+msgid ""
+"Set this option to disable this client-specific override without removing it "
+"from the list."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:345
+msgid ""
+"Enter the X.509 common name for the client certificate, or the username for "
+"VPNs utilizing password authentication. This match is case sensitive."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:352
+msgid "A description for administrative reference (not parsed)."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:356
+msgid "Connection blocking"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:359
+msgid ""
+"Prevents the client from connecting to this server. Do not use this option "
+"to permanently disable a client due to a compromised key or password. Use a "
+"CRL (certificate revocation list) instead."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
+msgid ""
+"The virtual IPv4 network used for private communications between this client "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
+"topology, enter the client IP address and the subnet mask must match the "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
+"network address of the /30 is assumed to be the server address and the "
+"second network address will be assigned to the client."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
+msgid ""
+"The virtual IPv6 network used for private communications between this client "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:386
+msgid "IPv4 Local Network/s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
+msgid ""
+"These are the IPv4 server-side networks that will be accessible from this "
+"particular client. Expressed as a comma-separated list of one or more CIDR "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
+"already been defined on the main server configuration."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:395
+msgid "IPv6 Local Network/s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
+msgid ""
+"These are the IPv6 server-side networks that will be accessible from this "
+"particular client. Expressed as a comma-separated list of one or more IP/"
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:404
+msgid "IPv4 Remote Network/s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
+msgid ""
+"These are the IPv4 client-side networks that will be routed to this client "
+"specifically using iroute, so that a site-to-site VPN can be established. "
+"Expressed as a comma-separated list of one or more CIDR ranges. May be left "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
+"to add these subnets to the IPv4 Remote Networks list on the corresponding "
+"OpenVPN server settings."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:414
+msgid "IPv6 Remote Network/s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
+msgid ""
+"These are the IPv6 client-side networks that will be routed to this client "
+"specifically using iroute, so that a site-to-site VPN can be established. "
+"Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
+"Remember to add these subnets to the IPv6 Remote Networks list on the "
+"corresponding OpenVPN server settings."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
+msgid "Redirect Gateway"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
+msgid "Client Settings"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:436
+msgid "Server Definitions"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
+msgid "DNS Domain"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:497
+msgid "Server 4"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:532
+msgid "NetBIOS Options"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:535
+msgid ""
+"If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
+"will be disabled. "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
+msgid "Node Type"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:542
+msgid ""
+"Possible options: b-node (broadcasts), p-node (point-to-point name queries "
+"to a WINS server), m-node (broadcast then query name server), and h-node "
+"(query name server, then broadcast). "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:550
+msgid ""
+"A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
+"IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
+"only those nodes with the same NetBIOS scope ID. "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
+msgid ""
+"Enter any additional options to add for this client specific override, "
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\"; "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:657
+msgid "CSC Overrides"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:685
+msgid "Edit CSC Override"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:686
+msgid "Delete CSC Override"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:95
+msgid "Server successfully deleted."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:299
+msgid ""
+"A Backend for Authentication must be selected if the server mode requires "
+"User Auth."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:359
+msgid "The field 'DNS Server #1' must contain a valid IPv4 or IPv6 address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:362
+msgid "The field 'DNS Server #2' must contain a valid IPv4 or IPv6 address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:365
+msgid "The field 'DNS Server #3' must contain a valid IPv4 or IPv6 address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:368
+msgid "The field 'DNS Server #4' must contain a valid IPv4 or IPv6 address"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:410
+msgid "The field 'Concurrent connections' must be numeric."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:420
+msgid "The selected certificate is not valid"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:424
+msgid ""
+"The specified DH Parameter length is invalid or the DH file does not exist."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:428
+msgid "The specified ECDH Curve is invalid."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:453
+msgid "Tunnel network"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:456
+msgid ""
+"Using a tunnel network and server bridge settings together is not allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:460
+msgid "Server Bridge DHCP Start and End must both be empty, or defined."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:463
+msgid "Server Bridge DHCP Start must be an IPv4 address."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:466
+msgid "Server Bridge DHCP End must be an IPv4 address."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:469
+msgid "The Server Bridge DHCP range is invalid (start higher than end)."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:676
+msgid ""
+"Set this option to disable this server without removing it from the list."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:706
+msgid "*Backend for authentication"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:732
+msgid ""
+"The interface or Virtual IP address where OpenVPN will receive client "
+"connections."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:736
+msgid "*Local port"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:740
+msgid "The port used by OpenVPN to receive client connections."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:828
+#: src/usr/local/www/vpn_openvpn_server.php:1762
+msgid ""
+"Warning: The selected server certificate was not created as an SSL Server "
+"certificate and may not work as expected"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:832
+#, php-format
+msgid "No Certificates defined. One may be created here: %1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:832
+msgid "System &gt; Cert. Manager"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:842
+msgid "*Server certificate"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:849
+msgid "*DH Parameter Length"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
+msgid ""
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:865
+msgid "ECDH Curve"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
+msgid ""
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
+"certificate is used by default when the server uses an ECDSA certificate. "
+"Otherwise, secp384r1 is used as a fallback."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
+msgid ""
+"The algorithm used to authenticate data channel packets, and control channel "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
+"is used, such as AES-GCM, this digest is used for the control channel only, "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
+"to match. SHA1 is the default for OpenVPN. "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:958
+msgid "Do Not Check"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:956
+msgid "*Certificate Depth"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:959
+msgid ""
+"When a certificate-based client logs in, do not accept certificates below "
+"this depth. Useful for denying certificates made with intermediate CAs "
+"generated from the same CA as the server."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:964
+msgid "Strict User-CN Matching"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:967
+msgid ""
+"When authenticating users, enforce a match between the common name of the "
+"client certificate and the username given at login."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:978
+msgid ""
+"This is the IPv4 virtual network used for private communications between "
+"this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
+"first network address will be assigned to the server virtual interface. The "
+"remaining network addresses can optionally be assigned to connecting clients "
+"(see Address Pool)."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:988
+msgid ""
+"This is the IPv6 virtual network used for private communications between "
+"this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
+"first network address will be assigned to the server virtual interface. The "
+"remaining network addresses can optionally be assigned to connecting clients "
+"(see Address Pool)."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:995
+msgid "Bridge DHCP"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1002
+msgid "Bridge Interface"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1005
+msgid ""
+"The interface to which this TAP instance will be bridged. This is not done "
+"automatically. This interface must be assigned and the bridge created "
+"separately. This setting controls which existing IP address and subnet mask "
+"are used by OpenVPN for the bridge. Setting this to \"none\" will cause the "
+"Server Bridge DHCP settings below to be ignored."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1011
+msgid "Server Bridge DHCP Start"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1014
+msgid ""
+"When using TAP mode as a multi-point server, a DHCP range may optionally be "
+"supplied to use on the interface to which this TAP instance is bridged. If "
+"these settings are left blank, DHCP will be passed through to the LAN, and "
+"the interface setting above will be ignored."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1020
+msgid "Server Bridge DHCP End"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1034
+msgid "IPv4 Local network(s)"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1037
+msgid ""
+"IPv4 networks that will be accessible from the remote endpoint. Expressed as "
+"a comma-separated list of one or more CIDR ranges. This may be left blank if "
+"not adding a route to the local network through this tunnel on the remote "
+"machine. This is generally set to the LAN network."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1044
+msgid "IPv6 Local network(s)"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1047
+msgid ""
+"IPv6 networks that will be accessible from the remote endpoint. Expressed as "
+"a comma-separated list of one or more IP/PREFIX. This may be left blank if "
+"not adding a route to the local network through this tunnel on the remote "
+"machine. This is generally set to the LAN network."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1071
+msgid "Concurrent connections"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1074
+msgid ""
+"Specify the maximum number of clients allowed to concurrently connect to "
+"this server."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1087
+msgid "Push Compression"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1101
+msgid "Inter-client communication"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1108
+msgid "Duplicate Connection"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1111
+msgid ""
+"(This is not generally recommended, but may be needed for some scenarios.)"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1120
+msgid "Dynamic IP"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1127
+msgid "Address Pool"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
+msgid ""
+"Specifies the method used to supply a virtual adapter IP address to clients "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
+"\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
+"versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
+"require \"net30\"."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1143
+msgid "Advanced Client Settings"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1162
+msgid "DNS Server enable"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1169
+msgid "DNS Server 1"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1176
+msgid "DNS Server 2"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1183
+msgid "DNS Server 3"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1190
+msgid "DNS Server 4"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1197
+msgid "Block Outside DNS"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1200
+msgid ""
+"Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
+"DNS leakage in this way, other clients will ignore the option as they are "
+"not affected."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1204
+msgid "Force DNS cache update"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1207
+msgid "This is known to kick Windows into recognizing pushed DNS servers."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1211
+msgid "NTP Server enable"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1232
+msgid "NetBIOS enable"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1235
+msgid ""
+"If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
+"will be disabled."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1242
+msgid ""
+"Possible options: b-node (broadcasts), p-node (point-to-point name queries "
+"to a WINS server), m-node (broadcast then query name server), and h-node "
+"(query name server, then broadcast)"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1247
+msgid "Scope ID"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1250
+msgid ""
+"A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
+"IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
+"only those nodes with the same NetBIOS scope ID"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1256
+msgid "WINS server enable"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1263
+msgid "WINS Server 1"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1270
+msgid "WINS Server 2"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1277
+msgid "Enable custom port "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1284
+msgid "Management port"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1287
+msgid ""
+"The default port is 166. Specify a different port if the client machines "
+"need to select from multiple OpenVPN links."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
+msgid ""
+"Enter any additional options to add to the OpenVPN server configuration "
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1334
+msgid "OpenVPN Servers"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1339
+msgid "Protocol / Port"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1340
+msgid "Tunnel Network"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1341
+msgid "Crypto"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/captiveportal.inc:22
+msgid "Captive Portal Status"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/carp_status.inc:24
+msgid "CARP Status"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/dyn_dns_status.inc:24
+msgid "Dynamic DNS Status"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/gmirror_status.inc:22
+msgid "GEOM Mirror Status"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/interface_statistics.inc:23
+msgid "Interface Statistics"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/load_balancer.inc:22
+msgid "Load Balancer Status"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/log.inc:23
+msgid "Firewall Logs"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/ntp_status.inc:23
+msgid "NTP Status"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/services_status.inc:24
+msgid "Services Status"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/traffic_graph.inc:22
+msgid "Traffic Graphs"
+msgstr ""
+
+#: src/usr/local/www/widgets/include/wake_on_lan.inc:24
+msgid "Wake-on-Lan"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:99
+msgid "delete"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/carp_status.widget.php:91
+msgid "No CARP Interfaces Defined."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/carp_status.widget.php:91
+#, php-format
+msgid "Click %1$shere%2$s to configure CARP."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:131
+msgid "Saved Dynamic DNS Filter via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:167
+msgid "Int."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:203
+msgid "Checking ..."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:223
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:138
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:129
+#: src/usr/local/www/widgets/widgets/interfaces.widget.php:141
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:385
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:124
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:123
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:396
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:140
+msgid "Show"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:64
+msgid "Updated gateways widget settings via dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:118
+msgid "Gateway IP"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:286
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:289
+msgid "Packetloss"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:292
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:295
+msgid "Latency"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:299
+msgid "Online <br/>(unmonitored)"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:324
+msgid "All gateways are hidden."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/gateways.widget.php:326
+msgid "No gateways found."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:44
+msgid "No packages installed."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:44
+msgid ""
+"Packages can be installed <a href=\"pkg_mgr.php\" class=\"alert-link\">here</"
+"a>."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:88
+msgid "ok"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:141
+msgid "Retrieving package data"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
+msgid "Packages may be added/managed here: "
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:42
+msgid "Packets In"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:43
+msgid "Packets Out"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:44
+msgid "Bytes In"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:45
+msgid "Bytes Out"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:46
+msgid "Errors In"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:47
+msgid "Errors Out"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:107
+msgid "Saved Interface Statistics Filter via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interface_statistics.widget.php:115
+msgid "Retrieving interface data"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/interfaces.widget.php:46
+msgid "Saved Interfaces Filter via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:177
+msgid "Mobile"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:190
+msgid "Active Tunnels"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:191
+msgid "Inactive Tunnels"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:192
+msgid "Mobile Users"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:196
+msgid "Retrieving overview data "
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:211
+msgid "Retrieving tunnel data "
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:227
+msgid "Retrieving mobile data "
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:234
+msgid "There are no configured IPsec Tunnels"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ipsec.widget.php:235
+msgid "IPsec can be configured <a href=\"vpn_ipsec.php\">here</a>."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:69
+msgid "Saved Filter Log Entries via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:101
+msgid "Act"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:103
+msgid "IF"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:138
+msgid "Rule that triggered this action"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:160
+msgid "No logs to display"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:211
+msgid "Number of entries"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:219
+msgid "Filter actions"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:239
+msgid "Filter interface"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/log.widget.php:252
+msgid "Update interval"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:56
+msgid "stratum"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:164
+msgid "Server Time"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:176
+msgid "Sync Source"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:179
+msgid "No active peers available"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:187
+msgid "Clock location"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:201
+msgid "in view"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:203
+msgid "in use"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/ntp_status.widget.php:481
+msgid "Updating..."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:71
+msgid "Saved OpenVPN Filter via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:98
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:171
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:248
+msgid "Name/Time"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:99
+msgid "Real/Virtual IP"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:172
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:249
+msgid "Remote/Virtual IP"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/openvpn.widget.php:305
+msgid "No OpenVPN instances defined"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/picture.widget.php:57
+msgid "Picture widget saved via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/picture.widget.php:73
+msgid "New picture:"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/rss.widget.php:33
+msgid "Saved RSS Widget feed via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/rss.widget.php:127
+msgid "Feeds"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/rss.widget.php:134
+msgid "# Stories"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/rss.widget.php:141
+msgid "Widget height"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/rss.widget.php:148
+msgid "Content limit"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:65
+msgid "Saved Service Status Filter via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/services_status.widget.php:107
+msgid "No services found"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:53
+msgid "Saved SMART Status Filter via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:64
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:122
+msgid "Drive"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/smart_status.widget.php:65
+msgid "Ident"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:37
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:183
+msgid "CPU Type"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:40
+msgid "Current Date/Time"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:41
+msgid "DNS Server(s)"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:42
+msgid "Last Config Change"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:43
+msgid "State Table Size"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:44
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:271
+msgid "MBUF Usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:45
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:290
+msgid "Temperature"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:46
+msgid "Load Average"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:47
+msgid "CPU Usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:48
+msgid "Memory Usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:49
+msgid "Swap Usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:50
+msgid "Disk Usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:63
+msgid "<i>Unable to check for updates</i>"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:70
+msgid "<i>Error in version information</i>"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:81
+msgid "Version "
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:82
+msgid "is available."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:88
+msgid "The system is on the latest version."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:91
+msgid "The system is on a later version than<br />the official release."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:94
+msgid "<i>Error comparing installed version<br />with latest available</i>"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:113
+msgid "Saved System Information Widget Filter via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:150
+msgid "Unknown system"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:154
+msgid "Serial: "
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:167
+msgid "built on"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:174
+msgid "Obtaining update status "
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:190
+msgid "CPUs"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:201
+msgid "Hardware crypto"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:218
+msgid "Current date/time"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:226
+msgid "DNS server(s)"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:244
+msgid "Last config change"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:253
+msgid "State table size"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:263
+msgid "Show states"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:306
+msgid "Load average"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:308
+msgid "Last 1, 5 and 15 minutes"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:316
+msgid "CPU usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:323
+#, php-format
+msgid "Updating in %s seconds"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:331
+msgid "Memory usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:348
+msgid "SWAP usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:367
+msgid "Disk usage"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:373
+msgid " of "
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:373
+msgid "in RAM"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/system_information.widget.php:395
+msgid "Item"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:58
+msgid "Saved thermal_sensors_widget settings via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:154
+msgid "(Updating...)"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:165
+msgid "Thresholds in"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:165
+msgid "(1 to 100):"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:168
+msgid "Display settings:"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:173
+msgid "Zone Warning:"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:182
+msgid "Show raw output (no graph):"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:191
+msgid "Zone Critical:"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:200
+msgid "Show full sensor name:"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:209
+msgid "Core Warning:"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:223
+msgid "Core Critical:"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:245
+msgid "* A proper Thermal Sensor / Module can be configured under"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
+msgid "section"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/traffic_graphs.widget.php:118
+msgid "Updated traffic graph settings via dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/traffic_graphs.widget.php:400
+msgid "Show graphs"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/traffic_graphs.widget.php:417
+msgid "Refresh Interval"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/traffic_graphs.widget.php:424
+msgid "Inverse"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/traffic_graphs.widget.php:441
+msgid "Unit Size"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:53
+msgid "Saved Wake on LAN Filter via Dashboard."
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:62
+msgid "Device"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:65
+msgid "Wake"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:100
+msgid "Wake up!"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:106
+msgid "No saved WoL addresses"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:124
+msgid "DHCP Leases Status"
+msgstr ""
+
+#: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:139
+msgid "MAC"
+msgstr ""
+
+#: src/usr/local/www/wizard.php:58 src/usr/local/www/wizard.php:70
+#, php-format
+msgid "Could not open %s."
+msgstr ""
+
+#: src/usr/local/www/wizard.php:64
+msgid "Invalid path specified."
+msgstr ""
+
+#: src/usr/local/www/wizard.php:76
+#, php-format
+msgid "Could not parse %1$s/wizards/%2$s file."
+msgstr ""
+
+#: src/usr/local/www/wizard.php:186
+msgid "Wizard"
+msgstr ""
+
+#: src/usr/local/www/wizards/openvpn_wizard.inc:628
+#: src/usr/local/www/wizards/openvpn_wizard.inc:645
+#, php-format
+msgid "OpenVPN %s wizard"
+msgstr ""
+
+#: src/usr/local/www/wizards/openvpn_wizard.inc:640
+#: src/usr/local/www/wizards/openvpn_wizard.inc:655
+msgid "OpenVPN Wizard"
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:53
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:60
+msgid "The number of connections must be specified."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:58
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:65
+msgid "The number of connections should be greater than 1."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:83
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:106
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:113
+msgid ""
+"The specified number of connections is greater than the number of ALTQ-"
+"capable assigned interfaces!"
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:295
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:330
+msgid "The specified bandwidth cannot be less than 1."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:306
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:343
+msgid "The same interface cannot be selected for local and outside."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:485
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:589
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:542
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:660
+msgid ""
+"Address must be a valid IP address or Firewall Alias.  Please correct this "
+"value to continue."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:577
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:606
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:648
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:675
+msgid "Only percentage bandwidth specification is allowed."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:762
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:831
+msgid ""
+"Custom Bandwidths are greater than 30%. Please lower them for the wizard to "
+"continue."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1146
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1229
+msgid ""
+"Custom Bandwidths are greater than 40%. Please lower them for the wizard to "
+"continue."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1452
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1542
+msgid "Penalty Box"
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1459
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1479
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1493
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1510
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1529
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1553
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1632
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1549
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1570
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1584
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1601
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1620
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1644
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1671
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1724
+msgid "Traffic Shaper Wizard"
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1471
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1562
+msgid "Connections From Upstream SIP Server"
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc:1485
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:1576
+msgid "Connections To Upstream SIP Server"
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:45
+msgid ""
+"This firewall does not have any WAN-type interfaces assigned that are "
+"capable of using ALTQ traffic shaping."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:50
+msgid ""
+"This firewall does not have any LAN-type interfaces assigned that are "
+"capable of using ALTQ traffic shaping."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:71
+msgid "The number of LAN type interfaces must be specified."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:76
+msgid "The number of LAN type interfaces should be greater than 1."
+msgstr ""
+
+#: src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc:352
+msgid "The same interface cannot be selected twice on local interfaces."
+msgstr ""
+
+#: src/usr/local/www/xmlrpc.php:68
+msgid "Authentication failed: Invalid username or password"
+msgstr ""
+
+#: src/usr/local/www/xmlrpc.php:85
+msgid "Authentication failed: not enough privileges"
+msgstr ""
+
+#: src/usr/local/www/xmlrpc.php:292 src/usr/local/www/xmlrpc.php:418
+#: src/usr/local/www/xmlrpc.php:445
+#, php-format
+msgid "Merged in config (%s sections) from XMLRPC client."
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:288
+msgid "Manage Log"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:295
+msgid "Monitoring Settings"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:337
+msgid "Display page name first in browser tab"
+msgstr ""
+
+#: src/etc/inc/pfsense-utils.inc:382
+msgid "Do not display state table without a filter"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:799 src/etc/inc/shaper.inc:1407
+msgid "Enable/disable discipline and its children"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2294
+msgid "Upper Limit"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2327
+msgid "Real Time"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2359
+msgid "Link Share"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:2805
+msgid "Borrow from other queues when available"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:3823
+msgid "Enable limiter and its children"
+msgstr ""
+
+#: src/etc/inc/shaper.inc:4136
+msgid "Enable this queue"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:548
+msgid "Do not backup package information."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:555
+msgid ""
+"Do not backup RRD data (NOTE: RRD Data can consume 4+ megabytes of config."
+"xml space!)"
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:562
+msgid "Encrypt this configuration file."
+msgstr ""
+
+#: src/usr/local/www/diag_backup.php:609
+msgid "Configuration file is encrypted."
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:288
+msgid "Enable promiscuous mode"
+msgstr ""
+
+#: src/usr/local/www/diag_packet_capture.php:366
+msgid "Do reverse DNS lookup"
+msgstr ""
+
+#: src/usr/local/www/diag_pf_info.php:68
+msgid "Automatically refresh the output below"
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:97
+msgid "Reset the firewall state table"
+msgstr ""
+
+#: src/usr/local/www/diag_resetstate.php:105
+msgid "Reset firewall source tracking"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:220
+msgid "Info"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:228
+msgid "Health"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:236
+msgid "S.M.A.R.T. Capabilities"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:244
+msgid "Attributes"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:308
+msgid "Short"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:316
+msgid "Long"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:324
+msgid "Conveyance"
+msgstr ""
+
+#: src/usr/local/www/diag_smart.php:381
+msgid "Self-test"
+msgstr ""
+
+#: src/usr/local/www/diag_testport.php:246
+msgid "Show remote text"
+msgstr ""
+
+#: src/usr/local/www/firewall_aliases_edit.php:688
+msgid "<span class=\"helptext\">"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:421
+#: src/usr/local/www/firewall_nat_edit.php:653
+#: src/usr/local/www/firewall_nat_npt_edit.php:193
+#: src/usr/local/www/firewall_nat_out_edit.php:462
+#: src/usr/local/www/firewall_rules_edit.php:1177
+msgid "Disable this rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:428
+msgid "Do not perform binat for the specified address"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_1to1_edit.php:479
+#: src/usr/local/www/firewall_nat_1to1_edit.php:506
+#: src/usr/local/www/firewall_nat_npt_edit.php:208
+#: src/usr/local/www/firewall_nat_npt_edit.php:223
+#: src/usr/local/www/firewall_nat_out_edit.php:570
+msgid "Not"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:660
+msgid "Disable redirection for traffic matching this rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:728
+#: src/usr/local/www/firewall_nat_edit.php:796
+#: src/usr/local/www/firewall_rules_edit.php:1322
+msgid "Invert match."
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_edit.php:893
+msgid "Do not automatically sync to other CARP members"
+msgstr ""
+
+#: src/usr/local/www/firewall_nat_out_edit.php:469
+msgid ""
+"Enabling this option will disable NAT for traffic matching this rule and "
+"stop processing Outbound NAT rules"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1186
+msgid "Apply the action immediately on match."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1204
+msgid ""
+"<span class=\"help-block\">This is associated with a NAT rule.<br/>Editing "
+"the interface, protocol, source, or destination of associated filter rules "
+"is not permitted."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1449
+msgid "Log packets that are handled by this rule"
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1498
+msgid ""
+"Allow packets with IP options to pass. Otherwise they are blocked by default."
+" This is usually only seen with multicast traffic."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1506
+msgid "Disable auto generated reply-to for this rule."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1584
+msgid "Prevent states created by this rule to be sync'ed over pfsync."
+msgstr ""
+
+#: src/usr/local/www/firewall_rules_edit.php:1604
+msgid ""
+"Prevent the rule on Master from automatically syncing to other CARP members"
+msgstr ""
+
+#: src/usr/local/www/firewall_virtual_ip_edit.php:386
+msgid ""
+"Disable expansion of this entry into IPs on NAT lists (e.g. 192.168.1.0/24 "
+"expands to 256 entries.) "
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1729
+msgid "Enable interface"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1879 src/usr/local/www/interfaces.php:3202
+msgid "Default gateway"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:1945 src/usr/local/www/interfaces.php:2129
+msgid "Configuration Override"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2027
+msgid "FreeBSD default"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2043
+msgid "pfSense Default"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2051
+msgid "Saved Cfg"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2138
+msgid "Request a IPv6 prefix/information through the IPv4 connectivity link"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2145
+msgid "Only request an IPv6 prefix, do not request an IPv6 address"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2159
+msgid ""
+"Send an IPv6 prefix hint to indicate the desired prefix size for delegation"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2166
+msgid "Start DHCP6 client in debug mode"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2172
+msgid "Required by some ISPs, especially those not using PPPoE"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2178
+msgid ""
+"dhcp6c will send a release to the ISP on exit, some ISPs then release the "
+"allocated address or prefix. This option prevents that signal ever being "
+"sent"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2201
+msgid "Exchange Information Only"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2237
+msgid "Non-Temporary Address Allocation"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2278
+msgid "Prefix Delegation "
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2621 src/usr/local/www/interfaces.php:2753
+msgid "Enable Dial-On-Demand mode "
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2678
+msgid "Reset at each month (\"0 0 1 * *\")"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2686
+msgid "Reset at each week (\"0 0 * * 0\")"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2694
+msgid "Reset at each day (\"0 0 * * *\")"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2702
+msgid "Reset at each hour (\"0 * * * *\")"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2791
+msgid ""
+"Preserve common wireless configuration through interface deletions and "
+"reassignments."
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2991
+msgid ""
+"Allow packets to pass between wireless clients directly when operating as an "
+"access point"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:2999
+msgid "Force the card to use WME (wireless QoS)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3007
+msgid ""
+"Disable broadcasting of the SSID for this network (This may cause problems "
+"for some clients, and the SSID may still be discovered by other means.)"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3020
+msgid "Enable WPA"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3072
+msgid "Force the AP to rekey whenever a client disassociates"
+msgstr ""
+
+#: src/usr/local/www/interfaces.php:3084
+msgid "Enable 802.1X authentication"
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:213
+msgid ""
+"ECN friendly behavior violates RFC2893. This should be used in mutual "
+"agreement with the peer. "
+msgstr ""
+
+#: src/usr/local/www/interfaces_gif_edit.php:220
+msgid ""
+"Disable automatic filtering of the outer GIF source which ensures a match "
+"with the configured remote peer. When disabled, martian and inbound "
+"filtering is not performed which allows asymmetric routing of the outer "
+"traffic."
+msgstr ""
+
+#: src/usr/local/www/interfaces_gre_edit.php:207
+msgid ""
+"Add an explicit static route for the remote inner tunnel address/subnet via "
+"the local tunnel address"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:718
+msgid "Enable persistent logging of connection uptime. "
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:736
+msgid "Configure NULL service name"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:792
+msgid "Monthly (0 0 1 * *)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:800
+msgid "Weekly (0 0 * * 0)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:808
+msgid "Daily (0 0 * * *)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:816
+msgid "Hourly (0 * * * *)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:845
+msgid "Enable Dial-on-Demand mode. "
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:862
+msgid "Disable vjcomp (compression, auto-negotiated by default)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:872
+msgid "Disable tcpmssfix (enabled by default)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:883
+msgid "Disable shortseq (auto-negotiated by default)."
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:891
+msgid "Disable ACF compression (auto-negotiated by default)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:898
+msgid "Disable Protocol compression (auto-negotiated by default)"
+msgstr ""
+
+#: src/usr/local/www/interfaces_ppps_edit.php:944
+msgid "<span id=\"linkparamhelp\">"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:262
+msgid "Adds interface to QinQ interface groups"
+msgstr ""
+
+#: src/usr/local/www/interfaces_qinq_edit.php:275
+msgid ""
+"Ranges can be specified in the inputs below. Enter a range (2-3) or "
+"individual numbers.<br />Click \"Add Tag\" as many times as needed to add "
+"new inputs."
+msgstr ""
+
+#: src/usr/local/www/load_balancer_pool_edit.php:363
+msgid ""
+"Please add a monitor IP address on the monitors tab to use this feature.\""
+msgstr ""
+
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:210
+#: src/usr/local/www/load_balancer_virtual_server_edit.php:230
+msgid "Please add a pool on the \"Pools\" tab to use this feature. "
+msgstr ""
+
+#: src/usr/local/www/pkg_edit.php:1310 src/usr/local/www/pkg_edit.php:1316
+#: src/usr/local/www/pkg_edit.php:1321
+msgid "<br />"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:537
+msgid "Enable Captive Portal"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:593
+msgid "Enable waiting period reset on attempted access"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:600
+msgid "Enable logout popup window"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:629
+msgid "Disable Concurrent user logins"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:637
+msgid "Disable MAC filtering"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:646
+msgid "Enable Pass-through MAC automatic additions"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:656
+msgid "Enable Pass-through MAC automatic addition with username"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:665
+msgid "Enable per-user bandwidth restriction"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:694
+msgid "No Authentication"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:702
+msgid "Local User Manager / Vouchers"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:710
+msgid "RADIUS Authentication"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:720
+msgid "Allow only users/groups with \"Captive portal login\" privilege set"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:730
+msgid "PAP"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:738
+msgid "CHAP-MD5"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:746
+msgid "MSCHAPv1"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:754
+msgid "MSCHAPv2"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:874
+msgid "Send RADIUS accounting packets to the primary RADIUS server."
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:890
+msgid "No updates"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:898
+msgid "Stop/Start"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:906
+msgid "Stop/Start (FreeRADIUS)"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:914
+msgid "Interim"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:929
+msgid "Reauthenticate connected users every minute"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:937
+msgid "Enable RADIUS MAC authentication"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:959
+msgid "Use RADIUS Session-Timeout attributes"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:975
+msgid "Invert Acct-Input-Octets and Acct-Output-Octets"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:983
+msgid "Include idle time in session time"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1017
+msgid "Enable HTTPS login"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal.php:1041
+msgid "Disable HTTPS Forwards"
+msgstr ""
+
+#: src/usr/local/www/services_captiveportal_vouchers.php:444
+msgid "Enable the creation, generation and activation of rolls with vouchers"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:815
+msgid "Ignore BOOTP queries"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:822
+msgid "Only the clients defined below will get DHCP leases from this server."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:829
+msgid "Denied clients will be ignored rather than rejected."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:836
+msgid ""
+"If a client includes a unique identifier in its DHCP request, that UID will "
+"not be recorded in its lease."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1015
+msgid "Enable Static ARP entries"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1022
+msgid "Change DHCP display lease time from UTC to local time"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1029
+msgid "Enable RRD statistics graphs"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1052
+msgid "Enable registration of DHCP client names in DNS"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1067
+#: src/usr/local/www/services_dhcpv6.php:772
+msgid ""
+"Force dynamic DNS hostname to be the same as configured hostname for Static "
+"Mappings"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1212
+msgid "Enables network booting"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp.php:1274
+msgid "<div class=\"alert alert-info\"> "
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:482
+msgid "Create an ARP Table Static Entry for this MAC & IP Address pair."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:595
+#: src/usr/local/www/services_dhcpv6.php:758
+msgid "Enable registration of DHCP client names in DNS."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_edit.php:602
+msgid "Make dynamic DNS registered hostname the same as Hostname above."
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:149
+msgid "Enable DHCP relay on interface"
+msgstr ""
+
+#: src/usr/local/www/services_dhcp_relay.php:164
+#: src/usr/local/www/services_dhcpv6_relay.php:165
+msgid "Append circuit ID and agent ID to requests"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:583
+msgid "Enable DHCPv6 server on interface "
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:602
+msgid " bits"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:607
+msgid " to "
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:735
+msgid "Change DHCPv6 display lease time from UTC to local time"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:813
+msgid "Add reverse dynamic DNS entries."
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6.php:891
+msgid "Enable Network Booting"
+msgstr ""
+
+#: src/usr/local/www/services_dhcpv6_relay.php:149
+msgid "Enable DHCPv6 relay on interface"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:249
+msgid "Enable DNS forwarder"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:256
+msgid "Register DHCP leases in DNS forwarder"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:268
+msgid "Register DHCP static mappings in DNS forwarder"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:279
+msgid "Resolve DHCP mappings first"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:291
+msgid "Query DNS servers sequentially"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:300
+msgid "Require domain"
+msgstr ""
+
+#: src/usr/local/www/services_dnsmasq.php:309
+msgid "Do not forward private reverse lookups"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:259
+#: src/usr/local/www/vpn_openvpn_client.php:489
+msgid "Disable this client"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:320
+msgid "Enable Wildcard"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:327
+msgid "Enable Proxy"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:336
+msgid "Enable verbose logging"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:343
+msgid "Force IPv4 resolving"
+msgstr ""
+
+#: src/usr/local/www/services_dyndns_edit.php:350
+msgid "Verify SSL peer"
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:303
+msgid "Enable RRD graphs of NTP statistics (default: disabled)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:310
+msgid "Log peer messages (default: disabled)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:317
+msgid "Log system messages (default: disabled)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:340
+msgid "Log reference clock statistics (default: disabled)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:347
+msgid "Log clock discipline statistics (default: disabled)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd.php:354
+msgid "Log NTP peer statistics (default: disabled)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:188
+msgid "Enable KOD packets."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:195
+msgid "Deny run-time Configuration (nomodify) by ntpq and ntpdc."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:202
+msgid "Disable ntpq and ntpdc queries (noquery)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:209
+msgid "Disable all except ntpq and ntpdc queries (noserve)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:216
+msgid "Deny packets that attempt a peer association (nopeer)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_acls.php:223
+msgid "Deny mode 6 control message trap service (notrap)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:332
+msgid ""
+"A GPS connected via a serial port may be used as a reference clock for NTP. "
+"If the GPS also supports PPS and is properly configured, and connected, that "
+"GPS may also be used as a Pulse Per Second clock reference. NOTE: A USB GPS "
+"may work, but is not recommended due to USB bus timing issues.<br />For the "
+"best results, NTP should have at least three sources of time. So it is best "
+"to configure at least 2 servers under <a href=\"services_ntpd.php\">Services "
+"> NTP > Settings</a> to minimize clock drift if the GPS data is not valid "
+"over time. Otherwise ntpd may only use values from the unsynchronized local "
+"clock when providing time to clients."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:389
+msgid "Process PGRMF. Ignores ALL other NMEA sentences. (default: unchecked)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:417
+msgid "Prefer this clock (default: checked)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:424
+msgid ""
+"Do not use this clock, display for reference only (default: unchecked)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:431
+msgid "Enable PPS signal processing (default: checked)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:438
+#: src/usr/local/www/services_ntpd_pps.php:170
+msgid ""
+"Enable falling edge PPS signal processing (default: unchecked, rising edge)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:445
+msgid "Enable kernel PPS clock discipline (default: checked)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:452
+msgid "Obscure location in timestamp (default: unchecked, unobscured)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:459
+msgid ""
+"Log the sub-second fraction of the received time stamp (default: unchecked, "
+"not logged)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:466
+msgid "Display extended GPS status (default: checked)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_gps.php:502
+msgid "Auto correct malformed initialization commands. (default: unchecked)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:128
+msgid ""
+"Devices with a Pulse Per Second output such as radios that receive a time "
+"signal from DCF77 (DE), JJY (JP), MSF (GB) or WWVB (US) may be used as a PPS "
+"reference for NTP. A serial GPS may also be used, but the serial GPS driver "
+"would usually be the better option. A PPS signal only provides a reference "
+"to the change of a second, so at least one other source to number the "
+"seconds is required.<br /><br />At least 3 additional time sources should be "
+"configured under <a href=\"services_ntpd.php\">Services > NTP > Settings</a> "
+"to reliably supply the time of each PPS pulse."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:177
+msgid "Enable kernel PPS clock discipline (default: unchecked)."
+msgstr ""
+
+#: src/usr/local/www/services_ntpd_pps.php:184
+msgid ""
+"Record a timestamp once for each second, useful for constructing Allan "
+"deviation plots (default: unchecked)."
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:296
+msgid "Enable PPPoE Server"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:367
+msgid "Use RADIUS Authentication"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:375
+msgid "Use RADIUS Accounting"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:382
+msgid "Use a Backup RADIUS Authentication Server"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:402
+msgid "Assign IP Addresses to users via RADIUS server reply attributes"
+msgstr ""
+
+#: src/usr/local/www/services_pppoe_edit.php:542
+msgid "&nbsp;"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:244
+msgid "Use TCP instead of UDP"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:251
+msgid ""
+"If the interface IP is private, attempt to fetch and use the public IP "
+"instead."
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:260
+msgid "A (IPv4)"
+msgstr ""
+
+#: src/usr/local/www/services_rfc2136_edit.php:268
+msgid "AAAA (IPv6)"
+msgstr ""
+
+#: src/usr/local/www/services_router_advertisements.php:466
+msgid "Use same settings as DHCPv6 server"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:216
+msgid "Enable the SNMP Daemon and its controls"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:259
+msgid "Enable the SNMP Trap and its controls"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:303
+msgid "MibII"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:310
+msgid "Netgraph"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:317
+msgid "PF"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:325
+msgid "Host Resources"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:333
+msgid "UCD"
+msgstr ""
+
+#: src/usr/local/www/services_snmp.php:340
+msgid "Regex"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:269
+msgid "Enable DNS resolver"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:312
+msgid "Enable DNSSEC Support"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:319
+msgid "Enable Forwarding Mode"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:328
+msgid "Register DHCP leases in the DNS Resolver"
+msgstr ""
+
+#: src/usr/local/www/services_unbound.php:337
+msgid "Register DHCP static mappings in the DNS Resolver"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:217
+msgid "id.server and hostname.bind queries are refused"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:224
+msgid "version.server and version.bind queries are refused"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:231
+msgid ""
+"Message cache elements are prefetched before they expire to help keep the "
+"cache up to date"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:238
+msgid ""
+"DNSKEYs are fetched earlier in the validation process when a Delegation "
+"signer is encountered"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:245
+msgid "DNSSEC data is required for trust-anchored zones."
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:347
+msgid "Disable the automatically-added access control entries"
+msgstr ""
+
+#: src/usr/local/www/services_unbound_advanced.php:355
+msgid ""
+"Use 0x-20 encoded random bits in the DNS query to foil spoofing attempts."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:786
+msgid "These settings override the \"General Logging Options\" settings."
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:796
+msgid "Forward"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:804
+msgid "Reverse"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:812
+#: src/usr/local/www/status_logs_common.inc:870
+msgid "General Logging Options Setting"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:854
+msgid "Formatted"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:884
+#: src/usr/local/www/status_logs_settings.php:287
+msgid "Log errors from the web server process"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:895
+#: src/usr/local/www/status_logs_settings.php:259
+msgid "Log packets matched from the default block rules in the ruleset"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:902
+#: src/usr/local/www/status_logs_settings.php:266
+msgid "Log packets matched from the default pass rules put in the ruleset"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:909
+#: src/usr/local/www/status_logs_settings.php:273
+msgid "Log packets blocked by 'Block Bogon Networks' rules"
+msgstr ""
+
+#: src/usr/local/www/status_logs_common.inc:916
+#: src/usr/local/www/status_logs_settings.php:280
+msgid "Log packets blocked by 'Block Private Networks' rules"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:236
+msgid "Show log entries in reverse order (newest entries on top)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:294
+msgid "Show raw filter logs"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:301
+msgid "Enable verbose logging (Default is terse logging)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:321
+msgid "Disable writing log files to the local disk"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:339
+msgid "Send log messages to remote syslog server"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:394
+msgid "Everything"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:401
+msgid "System Events"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:408
+msgid "Firewall Events"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:415
+msgid "DNS Events (Resolver/unbound, Forwarder/dnsmasq, filterdns)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:422
+msgid "DHCP Events (DHCP Daemon, DHCP Relay, DHCP Client)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:429
+msgid "PPP Events (PPPoE WAN Client, L2TP WAN Client, PPTP WAN Client)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:436
+msgid "Captive Portal Events"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:443
+msgid "VPN Events (IPsec, OpenVPN, L2TP, PPPoE Server)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:450
+msgid "Gateway Monitor Events"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:457
+msgid "Routing Daemon Events (RADVD, UPnP, RIP, OSPF, BGP)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:464
+msgid "Server Load Balancer Events (relayd)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:471
+msgid "Network Time Protocol Events (NTP Daemon, NTP Client)"
+msgstr ""
+
+#: src/usr/local/www/status_logs_settings.php:478
+msgid "Wireless Events (hostapd)"
+msgstr ""
+
+#: src/usr/local/www/system.php:523
+msgid "Allow DNS server list to be overridden by DHCP/PPP on WAN"
+msgstr ""
+
+#: src/usr/local/www/system.php:533
+msgid ""
+"Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall"
+msgstr ""
+
+#: src/usr/local/www/system.php:587
+msgid "Show hostname on login banner"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:368
+msgid "Disable webConfigurator redirect rule"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:377
+msgid "Enable webConfigurator login autocomplete"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:388
+msgid "Disable logging of webConfigurator successful logins"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:402
+msgid "Disable webConfigurator anti-lockout rule"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:415
+msgid "Disable DNS Rebinding Checks"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:435
+msgid "Disable HTTP_REFERER enforcement check"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:452
+msgid "Enable Secure Shell"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:459
+msgid "Disable password login for Secure Shell (RSA/DSA key only)"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:481
+msgid ""
+"Enables the first serial port with 115200/8/N/1 by default, or another speed "
+"selectable below."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_admin.php:516
+msgid "Password protect the console menu"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:394
+msgid "Clear invalid DF bits instead of dropping the packets"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:404
+msgid ""
+"Insert a stronger ID into IP header of packets passing through the filter."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:426
+msgid "Disable all packet filtering."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:435
+msgid ""
+"Disables the PF scrubbing option which can sometimes interfere with NFS "
+"traffic."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:502
+msgid "Bypass firewall rules for traffic on the same interface"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:512
+msgid "Disable all auto-added VPN rules."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:519
+msgid "Disable reply-to on WAN rules"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:529
+msgid "Disable Negate rule on policy routing rules"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:548
+msgid "Verify HTTPS certificates when downloading alias URLs"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:619
+msgid ""
+"Automatic creation of additional NAT redirect rules from within the internal "
+"networks."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_firewall.php:630
+msgid ""
+"Automatic create outbound NAT rules that direct traffic back out to the same "
+"subnet it originated from."
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:382
+msgid "Enable default gateway switching"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:394
+msgid "Enable PowerD"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:475
+msgid "Do not kill connections when schedule expires"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:487
+msgid "Flush all states when a gateway goes down"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:495
+msgid "Do not create rules when gateway is down"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:507
+msgid "Use memory file system for /tmp and /var"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_misc.php:584
+msgid "Do NOT send HOST UUID with user agent"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:169
+msgid ""
+"All IPv6 traffic will be blocked by the firewall unless this box is checked"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:180
+msgid "Enable IPv6 over IPv4 tunneling"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:201
+msgid "Prefer to use IPv4 even if IPv6 is available"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:241
+msgid "Disable hardware checksum offload"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:252
+msgid "Disable hardware TCP segmentation offload"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:262
+msgid "Disable hardware large receive offload"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_network.php:272
+msgid "Suppress ARP messages"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:222
+msgid "Disable SMTP Notifications"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:255
+msgid "Enable SMTP over SSL/TLS"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:313
+msgid "Disable the startup/shutdown beep"
+msgstr ""
+
+#: src/usr/local/www/system_advanced_notifications.php:325
+msgid "Disable Growl Notifications"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:540
+msgid ""
+"No Certificate Authorities defined.<br/>Create one under <a href="
+"\"system_camanager.php\">System &gt; Cert. Manager</a>."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:593
+msgid "Level "
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:618
+msgid "Enable extended query"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:637
+msgid "Use anonymous binds to resolve distinguished names"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:698
+msgid "LDAP Server uses RFC 2307 style group membership"
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:716
+msgid "UTF8 encode LDAP parameters before sending them to the server."
+msgstr ""
+
+#: src/usr/local/www/system_authservers.php:724
+msgid "Do not strip away parts of the username after the @ symbol"
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:314
+msgid ""
+"The priority selected here defines in what order failover and balancing of "
+"links will be done. Multiple links of the same priority will balance "
+"connections until all links in the priority will be exhausted. If all links "
+"in a priority level are exhausted then the next available link(s) in the "
+"next priority level will be used."
+msgstr ""
+
+#: src/usr/local/www/system_gateway_groups_edit.php:321
+msgid ""
+"The virtual IP field selects which (virtual) IP should be used when this "
+"group applies to a local Dynamic DNS, IPsec or OpenVPN endpoint."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:594
+msgid "Disable this gateway"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:640
+msgid "This will select the above gateway as the default gateway."
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:647
+msgid "Disable Gateway Monitoring"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:654
+msgid "Disable Gateway Monitoring Action"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:678
+msgid "Mark Gateway as Down"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:813
+#: src/usr/local/www/system_groupmanager_addprivs.php:182
+#: src/usr/local/www/system_usermanager_addprivs.php:166
+msgid "<span class=\"help-block\">"
+msgstr ""
+
+#: src/usr/local/www/system_gateways_edit.php:850
+msgid "Use non-local gateway through interface specific route."
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:124
+msgid ""
+"pfsync transfers state insertion, update, and deletion messages between "
+"firewalls."
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:185
+msgid "User manager users and groups"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:193
+msgid "Authentication servers (e.g. LDAP, RADIUS)"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:201
+msgid ""
+"Certificate Authorities, Certificates, and Certificate Revocation Lists"
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:209
+msgid "Firewall rules "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:217
+msgid "Firewall schedules "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:225
+msgid "Firewall aliases "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:233
+msgid "NAT configuration "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:241
+msgid "IPsec configuration "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:249
+msgid "OpenVPN configuration "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:257
+msgid "DHCP Server settings "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:265
+msgid "WoL Server settings "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:273
+msgid "Static Route configuration "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:281
+msgid "Load Balancer configuration "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:289
+msgid "Virtual IPs "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:297
+msgid "Traffic Shaper configuration "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:305
+msgid "Traffic Shaper Limiters configuration "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:313
+msgid "DNS Forwarder and DNS Resolver configurations "
+msgstr ""
+
+#: src/usr/local/www/system_hasync.php:321
+msgid "Captive Portal "
+msgstr ""
+
+#: src/usr/local/www/system_routes_edit.php:268
+msgid "Disable this static route"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:170
+msgid "Disable the automatic dashboard auto-update check"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:182
+msgid "Enable repository/branch sync before reboot"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:228
+msgid "Minimal"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:242
+msgid "Show Files"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:249
+msgid "Show Command"
+msgstr ""
+
+#: src/usr/local/www/system_update_settings.php:256
+msgid "Dry Run"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:706
+msgid "This user cannot login"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:770
+msgid ""
+"Use individual customized GUI options and dashboard layout for this user."
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:838
+msgid "Click to create a user certificate"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager.php:937
+msgid "Click to paste an authorized key"
+msgstr ""
+
+#: src/usr/local/www/system_usermanager_settings.php:241
+msgid ""
+"<span id=\"ldaptestop\">Testing pfSense LDAP settings... One moment please..."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:474
+msgid "Provide a virtual IP address to clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:511
+msgid "Provide a virtual IPv6 address to clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:548
+msgid "Provide a list of accessible networks to clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:555
+msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:562
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
+msgid "Provide a default domain name to clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:585
+msgid ""
+"Provide a list of split DNS domain names to clients. Enter a space separated "
+"list."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:608
+#: src/usr/local/www/vpn_openvpn_csc.php:464
+msgid "Provide a DNS server list to clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:633
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
+msgid "Provide a WINS server list to clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:659
+msgid ""
+"Provide the Phase2 PFS group to clients ( overrides all mobile phase2 "
+"settings )"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_mobile.php:682
+msgid "Provide a login banner to clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:656
+msgid ""
+"Set this option to disable this phase1 without removing it from the list. "
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:827
+msgid "Disables renegotiation when a connection is about to expire."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:834
+msgid ""
+"Whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, "
+"reauthentication is always done."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:841
+msgid ""
+"Enable this option to never initiate this connection from this side, only "
+"respond to incoming requests."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:863
+msgid ""
+"Enable this to split connection entries with multiple phase 2 configurations."
+" Required for remote endpoints that support only a single traffic selector "
+"per child SA."
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase1.php:889
+msgid "Enable DPD"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_phase2.php:500
+msgid "Disable this phase 2 entry without removing it from the list. "
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:263
+msgid "Enable IPCompression"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:270
+msgid "Enable strict interface binding"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:277
+msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:289
+msgid "Enable MSS clamping on VPN traffic"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:315
+msgid "Enable Unity Plugin"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:322
+msgid "Enable strict Certificate Revocation List checking"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:329
+msgid "Initiate IKEv2 reauthentication with a make-before-break"
+msgstr ""
+
+#: src/usr/local/www/vpn_ipsec_settings.php:338
+msgid "Enable bypass for LAN interface IP"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:193
+msgid "Enable L2TP server"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:279
+msgid "Use a RADIUS server for authentication"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:286
+msgid "Enable RADIUS accounting"
+msgstr ""
+
+#: src/usr/local/www/vpn_l2tp.php:306
+msgid "Issue IP Addresses via RADIUS server."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:540
+msgid "Infinitely resolve server "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:620
+#: src/usr/local/www/vpn_openvpn_server.php:756
+msgid "Use a TLS Key"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:630
+#: src/usr/local/www/vpn_openvpn_server.php:766
+msgid "Automatically generate a TLS Key."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
+msgid "Automatically generate a shared key"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
+msgid "Enable Negotiable Cryptographic Parameters"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:839
+#: src/usr/local/www/vpn_openvpn_server.php:1095
+msgid ""
+"Set the TOS IP header value of tunnel packets to match the encapsulated "
+"packet value."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:846
+msgid "Bars the server from adding routes to the client's routing table"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:853
+msgid "Don't add or remove routes automatically"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:336
+msgid "Disable this override"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:357
+msgid "Block this client connection based on its common name."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
+msgid "Force all client generated traffic through the tunnel."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:437
+msgid ""
+"Prevent this client from receiving any server-defined client settings. "
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
+msgid "Provide an NTP server list to clients"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
+msgid "Enable NetBIOS over TCP/IP"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:674
+msgid "Disable this server"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:965
+msgid "Enforce match"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:996
+msgid "Allow clients on the bridge to obtain DHCP."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1088
+msgid "Push the selected Compression setting to connecting clients."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1102
+msgid "Allow communication between clients connected to this server"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1109
+msgid ""
+"Allow multiple concurrent connections from clients using the same Common "
+"Name."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1121
+msgid ""
+"Allow connected clients to retain their connections if their IP address "
+"changes."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1128
+msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1163
+msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1198
+msgid ""
+"Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
+"while connected, forcing clients to use only VPN DNS servers."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1205
+msgid ""
+"Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
+"and \"ipconfig /registerdns\" on connection initiation."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:1278
+msgid "Use a different management port for clients."
+msgstr ""
diff --git a/src/usr/local/share/locale/ro/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/ro/LC_MESSAGES/pfSense.mo
index 82a180d..1ec4d53 100644
--- a/src/usr/local/share/locale/ro/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/ro/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/ro/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/ro/LC_MESSAGES/pfSense.po
index 56073d9..2c300aa 100644
--- a/src/usr/local/share/locale/ro/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/ro/LC_MESSAGES/pfSense.po
@@ -4,7 +4,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1974,8 +1974,8 @@ msgstr "Nici un duplicat găsit."
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2487,7 +2487,7 @@ msgstr "Interfață Kernel"
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr "Rețele"
 
@@ -2559,7 +2559,7 @@ msgstr "Adresa mea IP"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2971,13 +2971,13 @@ msgstr "Server: NU"
 msgid "CA: %s"
 msgstr "CA: %s"
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "In folosință"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr "Revocat"
 
@@ -5658,7 +5658,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5734,7 +5734,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5906,8 +5906,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6188,8 +6188,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6206,9 +6206,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6418,7 +6418,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7367,13 +7367,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7626,8 +7626,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7637,8 +7637,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7917,10 +7917,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7934,7 +7934,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8144,7 +8144,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8440,7 +8440,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8585,8 +8585,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -9013,14 +9013,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9566,10 +9566,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10195,7 +10195,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10275,9 +10275,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10290,8 +10290,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10380,10 +10380,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10391,7 +10391,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10677,8 +10677,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12179,7 +12179,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13870,8 +13870,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13881,9 +13881,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13920,7 +13920,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -16077,7 +16077,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16616,7 +16616,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -17044,7 +17044,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20300,7 +20300,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20502,14 +20502,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20826,7 +20826,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20924,7 +20924,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21403,7 +21403,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23642,7 +23642,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25317,21 +25317,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25488,7 +25488,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25849,7 +25849,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25903,7 +25903,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25913,7 +25913,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25923,7 +25923,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25933,9 +25933,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25945,7 +25945,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27290,51 +27290,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27353,13 +27353,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27436,7 +27436,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27447,8 +27447,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27464,7 +27464,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27474,12 +27474,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27488,9 +27488,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27704,331 +27704,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -28045,185 +28045,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -29060,8 +29060,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -29070,12 +29070,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -29084,22 +29084,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29111,12 +29111,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29733,18 +29733,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30281,9 +30281,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30574,8 +30574,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30592,8 +30592,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30876,43 +30876,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30923,46 +30924,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30971,11 +30972,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -31010,10 +31011,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31196,7 +31198,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31237,10 +31239,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31291,9 +31294,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31355,126 +31359,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31486,8 +31516,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31499,12 +31529,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31514,12 +31544,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31540,7 +31570,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31548,7 +31578,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31557,7 +31587,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31586,19 +31616,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31701,32 +31732,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31735,109 +31769,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31933,7 +31971,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31956,58 +31994,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -32016,7 +32076,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -32025,15 +32085,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -32042,11 +32102,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -32054,15 +32114,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32070,11 +32130,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32082,171 +32142,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34330,7 +34392,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34485,8 +34547,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34497,13 +34559,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34553,35 +34615,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr "Activează Plugin-ul Unity"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr "Activați by-pass pentru interfața IP a LAN"
 
@@ -34615,18 +34677,18 @@ msgstr "Utilizați o cheie TLS"
 msgid "Automatically generate a TLS Key."
 msgstr "Generează automat o cheie TLS."
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "Generează automat o cheie partajată"
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr "Activare Parametri Criptografici Negociabili"
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34648,25 +34710,25 @@ msgstr "Dezactivați această suprascriere"
 msgid "Block this client connection based on its common name."
 msgstr "Blocați conexiunea acestui client după denumirea lui."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr "Forțați tot traficul generat de client prin tunel."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 "Preveniți acest client de la primirea oricărei setări de client definite pe "
 "server."
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "Furnizați o listă de servere NTP pentru clienți"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "Activează NetBIOS peste TCP/IP"
 
@@ -34674,54 +34736,54 @@ msgstr "Activează NetBIOS peste TCP/IP"
 msgid "Disable this server"
 msgstr "Dezactivează acest server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr "Potrivire exactă"
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "Permite clienților 'on the bridge' să obțină DHCP."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/ru/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/ru/LC_MESSAGES/pfSense.mo
index 7f4d4f9..7d231d2 100644
--- a/src/usr/local/share/locale/ru/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/ru/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/ru/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/ru/LC_MESSAGES/pfSense.po
index db0cb4b..849bb0b 100644
--- a/src/usr/local/share/locale/ru/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/ru/LC_MESSAGES/pfSense.po
@@ -6,11 +6,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-09 04:51-0500\n"
+"PO-Revision-Date: 2017-02-10 05:21-0500\n"
 "Last-Translator: Vladimir Lind <vlind@netgate.com>\n"
 "Language-Team: Russian\n"
 "Language: ru\n"
@@ -1899,7 +1899,7 @@ msgstr "Проверка на наличие %1$s PF кавычек в паке�
 #: src/etc/inc/filter.inc:4240
 #, php-format
 msgid "Processing early %1$s rules for package %2$s"
-msgstr "Обработка ранних %1$s правил для пакета %2$s"
+msgstr "Обработка ранних %1$s правил для пакета %2$s "
 
 #: src/etc/inc/filter.inc:4250
 #, php-format
@@ -1908,7 +1908,7 @@ msgstr "Возникла ошибка при проверке  фильтрую�
 
 #: src/etc/inc/filter.inc:4318
 msgid "delete this separator"
-msgstr ""
+msgstr "Удалите данный разделитель"
 
 #: src/etc/inc/filter_log.inc:227 src/etc/inc/filter_log.inc:249
 #: src/etc/inc/filter_log.inc:272 src/etc/inc/filter_log.inc:295
@@ -1917,6 +1917,8 @@ msgid ""
 "There was a error parsing log entry: %s. Please report to mailing list or "
 "forum."
 msgstr ""
+"Возникла ошибка при проверке записи системного журнала: %s. Пожалуйста, "
+"сделайте об этом сообщение на список рассылки или на форуме."
 
 #: src/etc/inc/filter_log.inc:426
 #, php-format
@@ -1924,37 +1926,41 @@ msgid ""
 "There was a error parsing rule number: %s. Please report to mailing list or "
 "forum."
 msgstr ""
+"Возникла ошибка при проверке правила номер: %s. Пожалуйста, сделайте об этом "
+"сообщение на список рассылки или на форуме."
 
 #: src/etc/inc/filter_log.inc:436
 #, php-format
 msgid ""
 "There was a error parsing rule: %s. Please report to mailing list or forum."
 msgstr ""
+"Возникла ошибка при проверке правила %s. Пожалуйста, сделайте об этом "
+"сообщение на список рассылки или на форуме."
 
 #: src/etc/inc/filter_log.inc:450
 #, php-format
 msgid "Service %1$s/%2$s: %3$s"
-msgstr ""
+msgstr "Сервис %1$s/%2$s: %3$s"
 
 #: src/etc/inc/functions.inc:88
 msgid "Acknowledge All Notices"
-msgstr ""
+msgstr "Подтвердите все сообщения"
 
 #: src/etc/inc/functions.inc:89
 msgid "Click to Acknowledge"
-msgstr ""
+msgstr "Нажмите для подтверждения"
 
 #: src/etc/inc/functions.inc:109
 msgid "unread notice"
-msgstr ""
+msgstr "Непрочитанное сообщение"
 
 #: src/etc/inc/functions.inc:111
 msgid "unread notices"
-msgstr ""
+msgstr "Непрочитанные сообщения"
 
 #: src/etc/inc/gmirror.inc:65
 msgid "No mirrors found."
-msgstr ""
+msgstr "Зеркала не найдены"
 
 #: src/etc/inc/gmirror.inc:73 src/etc/inc/shaper.inc:1201
 #: src/etc/inc/shaper.inc:3283 src/usr/local/www/diag_gmirror.php:221
@@ -1982,8 +1988,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -1996,7 +2002,7 @@ msgstr ""
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:34
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:135
 msgid "Name"
-msgstr ""
+msgstr "Имя"
 
 #: src/etc/inc/gmirror.inc:74 src/usr/local/www/diag_arp.php:336
 #: src/usr/local/www/diag_gmirror.php:222 src/usr/local/www/easyrule.php:122
@@ -2049,56 +2055,62 @@ msgstr ""
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:223
 #: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:64
 msgid "Status"
-msgstr ""
+msgstr "Статус"
 
 #: src/etc/inc/gmirror.inc:75 src/usr/local/www/diag_gmirror.php:223
 msgid "Component"
-msgstr ""
+msgstr "Компонент"
 
 #: src/etc/inc/gwlb.inc:185
 msgid "No gateways to monitor. dpinger will not run."
-msgstr ""
+msgstr "Нет шлюзов для мониторинга. dpinger не будет запущен."
 
 #: src/etc/inc/gwlb.inc:233 src/etc/inc/gwlb.inc:274
 #, php-format
 msgid ""
 "Removing static route for monitor %1$s and adding a new route through %2$s"
 msgstr ""
+"Удаление статического маршрута для мониторинга %1$s и добавление нового "
+"маршрута через %2$s"
 
 #: src/etc/inc/gwlb.inc:302
 #, php-format
 msgid "Error starting gateway monitor for %s"
-msgstr ""
+msgstr "Ошибка запуска мониторинга шлюза для %s"
 
 #: src/etc/inc/gwlb.inc:315
 #, php-format
 msgid "dpinger: No dpinger session running for gateway %s"
-msgstr ""
+msgstr "dpinger: для шлюза %s"
 
 #: src/etc/inc/gwlb.inc:329
 #, php-format
 msgid "dpinger: cannot connect to status socket %1$s - %2$s (%3$s)"
-msgstr ""
+msgstr "dpinger: не удается подключится к сокету статуса %1$s - %2$s (%3$s)"
 
 #: src/etc/inc/gwlb.inc:983
 #, php-format
 msgid "MONITOR: %1$s is down, omitting from routing group %2$s"
-msgstr ""
+msgstr "МОНИТОР: %1$s выключен, исключаем из группы маршрутизации %2$s"
 
 #: src/etc/inc/gwlb.inc:987
 #, php-format
 msgid "MONITOR: %1$s has packet loss, omitting from routing group %2$s"
 msgstr ""
+"МОНИТОР: в %1$s наблюдается потеря пакетов, исключаем из группы "
+"маршрутизации %2$s"
 
 #: src/etc/inc/gwlb.inc:991
 #, php-format
 msgid "MONITOR: %1$s has high latency, omitting from routing group %2$s"
 msgstr ""
+"МОНИТОР: у %1$s высокая задержка пакетов, исключаем из группы маршрутизации "
+"%2$s"
 
 #: src/etc/inc/gwlb.inc:1014
 #, php-format
 msgid "MONITOR: %1$s is available now, adding to routing group %2$s"
-msgstr ""
+msgstr "МОНИТОР: %1$s стал доступен, добавляем в группу маршрутизации %2$s"
 
 #: src/etc/inc/gwlb.inc:1032
 #, php-format
@@ -2106,24 +2118,26 @@ msgid ""
 "Gateways status could not be determined, considering all as up/active. "
 "(Group: %s)"
 msgstr ""
+"Статус шлюзов невозможно определить, помечаем все шлюзы как активные (Группа "
+"%s)"
 
 #: src/etc/inc/gwlb.inc:1075
 #, php-format
 msgid "GATEWAYS: Group %1$s did not have any gateways up on tier %2$s!"
-msgstr ""
+msgstr "ШЛЮЗЫ: Группа %1$s не имеет ни одного активного шлюза на уровне %2$s!"
 
 #: src/etc/inc/gwlb.inc:1097
 #, php-format
 msgid "Updating gateway group gateway for %1$s - new gateway is %2$s"
-msgstr ""
+msgstr "Обновляем шлюзы для группы шлюзов %1$s  - новый шлюз %2$s"
 
 #: src/etc/inc/interfaces.inc:33
 msgid "interfaces_bring_up() was called but no variable defined."
-msgstr ""
+msgstr "вызов interfaces_bring_up() выл произведён без указания переменной"
 
 #: src/etc/inc/interfaces.inc:172
 msgid "Configuring loopback interface..."
-msgstr ""
+msgstr "Настраиваем loopback интерфейс"
 
 #: src/etc/inc/interfaces.inc:185
 msgid "Configuring VLAN interfaces..."
@@ -2467,7 +2481,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2539,7 +2553,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2943,13 +2957,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5625,7 +5639,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5701,7 +5715,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5873,8 +5887,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6155,8 +6169,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6173,9 +6187,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6385,7 +6399,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7334,13 +7348,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7593,8 +7607,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7604,8 +7618,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7884,10 +7898,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7901,7 +7915,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8111,7 +8125,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8407,7 +8421,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8552,8 +8566,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8980,14 +8994,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9533,10 +9547,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10162,7 +10176,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10242,9 +10256,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10257,8 +10271,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10347,10 +10361,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10358,7 +10372,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10644,8 +10658,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12146,7 +12160,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13837,8 +13851,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13848,9 +13862,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13887,7 +13901,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -16044,7 +16058,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16583,7 +16597,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -17011,7 +17025,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20267,7 +20281,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20469,14 +20483,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20793,7 +20807,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20891,7 +20905,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21370,7 +21384,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23609,7 +23623,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25284,21 +25298,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25455,7 +25469,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25816,7 +25830,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25870,7 +25884,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25880,7 +25894,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25890,7 +25904,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25900,9 +25914,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25912,7 +25926,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27257,51 +27271,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27320,13 +27334,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27403,7 +27417,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27414,8 +27428,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27431,7 +27445,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27441,12 +27455,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27455,9 +27469,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27671,331 +27685,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -28012,185 +28026,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -29027,8 +29041,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -29037,12 +29051,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -29051,22 +29065,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29078,12 +29092,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29700,18 +29714,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30248,9 +30262,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30541,8 +30555,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30559,8 +30573,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30843,43 +30857,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30890,46 +30905,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30938,11 +30953,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30977,10 +30992,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31163,7 +31179,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31204,10 +31220,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31258,9 +31275,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31322,126 +31340,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31453,8 +31497,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31466,12 +31510,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31481,12 +31525,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31507,7 +31551,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31515,7 +31559,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31524,7 +31568,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31553,19 +31597,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31668,32 +31713,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31702,109 +31750,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31900,7 +31952,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31923,58 +31975,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
+msgid ""
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31983,7 +32057,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31992,15 +32066,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -32009,11 +32083,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -32021,15 +32095,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32037,11 +32111,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32049,171 +32123,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34297,7 +34373,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34452,8 +34528,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34464,13 +34540,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34520,35 +34596,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34582,18 +34658,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34615,23 +34691,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34639,54 +34715,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/sv/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/sv/LC_MESSAGES/pfSense.mo
index cc92d4c..ae8bb4e 100644
--- a/src/usr/local/share/locale/sv/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/sv/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/sv/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/sv/LC_MESSAGES/pfSense.po
index d33d346..74bc0b0 100644
--- a/src/usr/local/share/locale/sv/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/sv/LC_MESSAGES/pfSense.po
@@ -4,7 +4,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1890,8 +1890,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2375,7 +2375,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2447,7 +2447,7 @@ msgstr "Mitt IP"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2851,13 +2851,13 @@ msgstr "Server: Nej"
 msgid "CA: %s"
 msgstr "CA: %s"
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "Används"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr "Återkallad"
 
@@ -5533,7 +5533,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5609,7 +5609,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5781,8 +5781,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr "Startar UPnP-tjänster..."
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6063,8 +6063,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6081,9 +6081,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6293,7 +6293,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "Ta bort"
@@ -7242,13 +7242,13 @@ msgstr "Bekräfta"
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7501,8 +7501,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7512,8 +7512,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7792,10 +7792,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7809,7 +7809,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8019,7 +8019,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8315,7 +8315,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8460,8 +8460,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "Filter"
 
@@ -8888,14 +8888,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr "OpenVPN-server"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr "OpenVPN-klient"
 
@@ -9441,10 +9441,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10070,7 +10070,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10150,9 +10150,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10165,8 +10165,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10255,10 +10255,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10266,7 +10266,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10552,8 +10552,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12054,7 +12054,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13745,8 +13745,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13756,9 +13756,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr "Avancerat"
@@ -13795,7 +13795,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15952,7 +15952,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16491,7 +16491,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16919,7 +16919,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20175,7 +20175,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20377,14 +20377,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20701,7 +20701,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr "DNS-servrar"
 
@@ -20799,7 +20799,7 @@ msgstr "NTP-servrar"
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr "NTP-servrar"
 
@@ -21278,7 +21278,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23517,7 +23517,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25192,21 +25192,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr "Server 1"
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr "Server 2"
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr "Server 3"
 
@@ -25363,7 +25363,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25723,7 +25723,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25777,7 +25777,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25787,7 +25787,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr "Brandvägg & NAT"
 
@@ -25797,7 +25797,7 @@ msgstr "Brandvägg & NAT"
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr "Övrigt"
@@ -25807,9 +25807,9 @@ msgstr "Övrigt"
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25819,7 +25819,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr "Aviseringar"
 
@@ -27164,51 +27164,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr "Ny"
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27227,13 +27227,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27310,7 +27310,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27321,8 +27321,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27338,7 +27338,7 @@ msgstr "Användare"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr "Grupper"
@@ -27348,12 +27348,12 @@ msgid "Server Name"
 msgstr "Servernamn"
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr "Redigera server"
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr "Radera server"
 
@@ -27362,9 +27362,9 @@ msgid "Server Settings"
 msgstr "serverinställningar"
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27578,331 +27578,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27919,185 +27919,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr "E-postadress"
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28934,8 +28934,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28944,12 +28944,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28958,22 +28958,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28985,12 +28985,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29607,18 +29607,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30155,9 +30155,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30448,8 +30448,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30466,8 +30466,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30750,43 +30750,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30797,46 +30798,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30845,11 +30846,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30884,10 +30885,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31070,7 +31072,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31111,10 +31113,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31165,9 +31168,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31229,126 +31233,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr "Aktivera NCP"
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr "Hårdvarukryptering"
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31360,8 +31390,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31373,12 +31403,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31388,12 +31418,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31414,7 +31444,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31422,7 +31452,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31431,7 +31461,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31460,19 +31490,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31575,32 +31606,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31609,109 +31643,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr "DNS-domän"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr "Server 4"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31807,7 +31845,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31830,58 +31868,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31890,7 +31950,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31899,15 +31959,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31916,11 +31976,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31928,15 +31988,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31944,11 +32004,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31956,171 +32016,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34204,7 +34266,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34359,8 +34421,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34371,13 +34433,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34427,35 +34489,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34489,18 +34551,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34522,23 +34584,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34546,54 +34608,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/tr/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/tr/LC_MESSAGES/pfSense.mo
index 0c97cb0..6feb8f0 100644
--- a/src/usr/local/share/locale/tr/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/tr/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/tr/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/tr/LC_MESSAGES/pfSense.po
index c62971d..1424902 100644
--- a/src/usr/local/share/locale/tr/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/tr/LC_MESSAGES/pfSense.po
@@ -11,7 +11,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1926,8 +1926,8 @@ msgstr "Aynalama bulunamadı."
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2423,7 +2423,7 @@ msgstr "Çekirdek Arabirimi"
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr "Ağ"
 
@@ -2495,7 +2495,7 @@ msgstr "IP adresim"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2901,13 +2901,13 @@ msgstr "Sunucu: HAYIR"
 msgid "CA: %s"
 msgstr "CA: %s"
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "Kullanımda"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr "Iptal edildi"
 
@@ -5612,7 +5612,7 @@ msgstr "NTP saat senkronizasyonu"
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr "Hizmet Portalı"
 
@@ -5688,7 +5688,7 @@ msgstr "Durdu"
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr "Devredışı"
@@ -5861,8 +5861,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr "UPnP servisi başlatılıyor..."
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr "'%s' alanı geçersiz karakterler içeriyor."
@@ -6146,8 +6146,8 @@ msgstr "Bu kuyruk için seçeneği işaretleyin"
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6164,9 +6164,9 @@ msgstr "Bu kuyruk için seçeneği işaretleyin"
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6382,7 +6382,7 @@ msgstr "Gecikme tamsayı olmalıdır."
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "Sil"
@@ -7352,13 +7352,13 @@ msgstr "Onaylama"
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7611,8 +7611,8 @@ msgstr "Bağlantı Türü"
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7622,8 +7622,8 @@ msgstr "Bağlantı Türü"
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr "Eylemler"
@@ -7904,10 +7904,10 @@ msgstr "Syslog (Sistem Günlüğü)"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7921,7 +7921,7 @@ msgstr "Syslog (Sistem Günlüğü)"
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8136,7 +8136,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr "Temizle"
@@ -8436,7 +8436,7 @@ msgstr "Host Adı"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8583,8 +8583,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "Filtre"
 
@@ -9011,14 +9011,14 @@ msgid "Packet Capture"
 msgstr "Paket Yakalama"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9567,10 +9567,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10200,7 +10200,7 @@ msgstr "Grup listesi değiştirildi."
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10280,9 +10280,9 @@ msgstr "Grup sil"
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10295,8 +10295,8 @@ msgstr "Grup sil"
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "Ekle"
 
@@ -10385,10 +10385,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10396,7 +10396,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10682,8 +10682,8 @@ msgstr "Grup adı \"a-z, A-Z, 0-9 ve _\" karakterleri içerebilir."
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12201,7 +12201,7 @@ msgstr "Kilitlenmeme Kuralı"
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13901,8 +13901,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "Değer"
 
@@ -13912,9 +13912,9 @@ msgstr "Değer"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr "Gelişmiş"
@@ -13951,7 +13951,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr "Kullanıcı Yönetimi"
@@ -16142,7 +16142,7 @@ msgstr "Bu arabirimde yer alan köprüler."
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16682,7 +16682,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -17122,7 +17122,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr "Sıkıştırma"
 
@@ -20474,7 +20474,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr "WINS sunucular"
 
@@ -20676,14 +20676,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -21003,7 +21003,7 @@ msgstr "WINS Sunucular"
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr "DNS Sunucular"
 
@@ -21101,7 +21101,7 @@ msgstr "NTP sunucular"
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr "NTP Sunucular"
 
@@ -21587,7 +21587,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr "Özel seçenekler"
 
@@ -23837,7 +23837,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25512,21 +25512,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25683,7 +25683,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr "Genel Ad"
 
@@ -26051,7 +26051,7 @@ msgstr "webArayüzü için dil seçiniz"
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr "webArayüzü"
 
@@ -26105,7 +26105,7 @@ msgstr "Bekleyiniz... 20 saniye içinde %s sayfasına yönlendiriliyorsunuz."
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr "Yönetici Erişimi"
 
@@ -26115,7 +26115,7 @@ msgstr "Yönetici Erişimi"
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -26125,7 +26125,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr "Diğer Ayarlar"
@@ -26135,9 +26135,9 @@ msgstr "Diğer Ayarlar"
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr "Sistem İnce Ayarları"
 
@@ -26147,7 +26147,7 @@ msgstr "Sistem İnce Ayarları"
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr "Bildirimler"
 
@@ -27510,51 +27510,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr "Bu sayfadaki seçenekler sadece ileri düzey kullanıcılar içindir."
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr "Değişken Adı"
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27573,13 +27573,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27656,7 +27656,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr "Kimlik Doğrulama Sunucuları"
@@ -27667,8 +27667,8 @@ msgstr "Kimlik Doğrulama Sunucuları"
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27684,7 +27684,7 @@ msgstr "Kullanıcılar"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr "Gruplar"
@@ -27694,12 +27694,12 @@ msgid "Server Name"
 msgstr "Sunucu Adı"
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27708,9 +27708,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27924,257 +27924,257 @@ msgstr "İç Sertifika Sunucusu oluştur"
 msgid "Create an intermediate Certificate Authority"
 msgstr "Ara Sertifika Otoritesi oluştur"
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr "Sertifika verisi"
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr "Sertifika geçerli görünmüyor."
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr "Şifreli özel anahtarlar henüz desteklenmemektedir."
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr "Anahtar uzunluğu"
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr "Yaşam süresi"
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr "Ayrılmış isim Ülke Kodu"
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr "Ayrılmış isim Eyalet"
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr "Ayrılmış isim Şehir"
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr "Ayrılmış isim Firma"
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr "Ayrılmış isim E-posta Adresi"
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr "Ayrılmış isim Genel Ad"
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr "İşaretleyen Sertifika Otoritesi"
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr "Geçerli anahtar uzunlığını seçiniz."
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr "Geçerli Özet Algoritması' nı seçiniz."
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr "Sertifika Yöneticisi"
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr "CA'lar"
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr "Sertifikalar"
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr "Sertifika İptal"
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr "iç"
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr "Sağlayıcı"
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr "Ayrılmış İsim"
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr "kendinden imzalı"
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr "dış"
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr "İtibaren geçerli"
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr "Geçerlilik Tarihi"
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr "Varolan Sertifika Otoritesi"
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr "Sertifikayı X.509 PEM formatında bu alana yapıştırınız."
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr "Sonraki sertifika için seri numarası"
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
@@ -28182,26 +28182,26 @@ msgstr ""
 "Sonraki oluşturulacak sertifika için numaralardan oluşan bir seri numarası "
 "giriniz, bu oluşturulan CA'da kullanılacak."
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr "İç Sertifika Otoritesi"
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
@@ -28209,50 +28209,50 @@ msgstr ""
 "NOT: Burada mümkünse SHA1 den daha güçlü bir algoritma kullanılması tavsiye "
 "edilir."
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -28269,185 +28269,185 @@ msgstr "İç sertifika oluştur"
 msgid "Create a Certificate Signing Request"
 msgstr "Sertifika İmzalama Talebi oluştur"
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr "Varolan sertifika seç"
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr "Anahtar veri"
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr "Sertifika otoritesi"
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr "Sertifika Türü"
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr "Varolan Sertifika Seçimi"
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr "Son Sertifika verisi"
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr "Sertifika konusu imzalama isteği konusuyla eşleşmiyor."
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr "Sertifika İçeri Aktar"
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr "Özel anahtarı x.509 PEM formatında yapıştırınız."
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr "İç Sertifika"
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr "Alternatif İsimler"
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr "Dış İmzalama Talebi"
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr "Varolan Sertifikayı Seç"
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr "İmzalama talep verisi"
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr "dış - imza bekleniyor"
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -29289,8 +29289,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -29299,12 +29299,12 @@ msgid "Assigned Privileges"
 msgstr "Atanan Yetkiler"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -29313,22 +29313,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -29340,12 +29340,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr "Yukarıdaki listeden bir yetki seçerek açıklamasını görebilirsiniz"
 
@@ -29966,18 +29966,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr "IPsec Ön Paylaşımlı Anahtar"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30521,9 +30521,9 @@ msgstr ""
 "sadece manuel giriş yapılmalıdır."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr "DNS Varsayılan Alan"
 
@@ -30822,8 +30822,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30840,8 +30840,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -31126,43 +31126,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -31173,16 +31174,16 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr "Maksimum MSS"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
@@ -31192,31 +31193,31 @@ msgstr ""
 "yardımcı olur. Boş bırakarak varsayılan 1400 kullanılmasını "
 "sağlayabilirsiniz."
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -31225,11 +31226,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -31266,10 +31267,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31456,7 +31458,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr "Paylaşımlı anahtar"
 
@@ -31497,10 +31499,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31551,9 +31554,10 @@ msgid "Proxy host or address"
 msgstr "Vekil host ya da adres"
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31615,126 +31619,152 @@ msgstr "* TLS Anahtarı"
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr "İstemci Sertifikası"
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr "NCP'yi etkinleştir"
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr "Donanım Şifreleme"
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr "Tünel Ayarları"
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr "IPv4 Tünel Ağ"
 
@@ -31746,8 +31776,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr "IPv6 Tünel Ağ"
 
@@ -31759,12 +31789,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31774,12 +31804,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31800,7 +31830,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31808,7 +31838,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr "Topoloji"
 
@@ -31817,7 +31847,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr "Servis Türü"
 
@@ -31846,19 +31876,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31962,32 +31993,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr "IPv4 Yerel Ağ(ları)"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31996,109 +32030,113 @@ msgid "IPv6 Local Network/s"
 msgstr "IPv6 Yerel Ağ(ları)"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr "Uzaktaki IPv4 Ağ(lar)ı"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr "Uzaktaki IPv6 Ağ(lar)ı"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr "Ağ Geçidini Yönlendir"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr "İstemci Ayarları"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr "Sunucu Tanımlamaları"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr "NETBIOS Seçenekleri"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr "Uç Türü"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -32196,7 +32234,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -32219,52 +32257,74 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
@@ -32272,7 +32332,7 @@ msgstr ""
 "Kullanıcı kimlikleri doğrulanırken istemci sertifikasının genel adı ile "
 "oturum açılırken verilen kullanıcı adının aynı olmasını zorunlu kılar."
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -32281,7 +32341,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -32290,15 +32350,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr "Köprü DHCP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr "Köprü Arabirim"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -32307,11 +32367,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr "Sunucu Köprüsü DHCP Başlangıcı"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -32319,15 +32379,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr "Sunucu Köprüsü DHCP Bitişi"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32335,11 +32395,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32347,108 +32407,109 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr "Eş zamanlı bağlantılar"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr "İstemciler arası iletişim"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr "Dinamik IP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr "Adres Havuzu"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
@@ -32458,63 +32519,64 @@ msgstr ""
 "isim sorguları), m-node (yayınladıktan sonra isim sunucusunu sorgulamak), ve "
 "h-node (isim sunucusunu sorguladıktan sonra yayınlamak)"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr "Scope ID"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr "Potokol / Port"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr "Tünel Ağ"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34606,7 +34668,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34763,8 +34825,8 @@ msgstr ""
 "istemci)."
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr "İstemcilere varsayılan alan adını sağla"
 
@@ -34775,13 +34837,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr "İstemcilere DNS sunucu listesi sağla"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr "İstemcilere WINS sunucu listesi sağla"
 
@@ -34832,35 +34894,35 @@ msgstr "DPD'yi Etkinleştir"
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr "IP Sıkıştırması Etkinleştir"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr "VPN trafikte MSS sıkma özelliğini aç"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr "LAN arabirimi IP'si için atlamayı (baypas) etkinleştirin"
 
@@ -34894,18 +34956,18 @@ msgstr "Bir TLS Anahtarı Kullan"
 msgid "Automatically generate a TLS Key."
 msgstr "Otomatik olarak bir TLS Anahtarı oluştur"
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "Otomatik olarak bir paylaşımlı anahtar oluştur"
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34927,23 +34989,23 @@ msgstr "Üzerine yazmayı kapat"
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "Kullanıcılara bir NTP sunucusu listesini sağlayın"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "TCP/IP üzerinden NetBIOS'u etkinleştir"
 
@@ -34951,24 +35013,24 @@ msgstr "TCP/IP üzerinden NetBIOS'u etkinleştir"
 msgid "Disable this server"
 msgstr "Sunucuyu devre dışı bırak"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr "Eşleşmeyi zorla"
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "Köprüdeki istemcilerin DHCP den yararlanmasına izin ver."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 "Bu sunucuya bağlanan istemcilerinin kendi aralarındaki trafiklerine izin ver"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
@@ -34976,7 +35038,7 @@ msgstr ""
 "Aynı Ortak Ad ile kullanıcıların birden fazla eş zamanlı bağlantısına izin "
 "verin."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
@@ -34984,18 +35046,18 @@ msgstr ""
 "Bağlantısı kabul edilen kullanıcıların IP adresleri değişirse bağlantılarını "
 "korumasına izin verin."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 "Kullanıcılara sanal bir bağdaştırıcı IP adresi sağlayın (bkz. Tünel Ağı)."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 "Kullanıcılara DNS sunucusu listesi sağlayın. Adresler IPv4 veya IPv6 "
 "olabilir."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
@@ -35004,7 +35066,7 @@ msgstr ""
 "erişimi engelleyin, böylece kullanıcılar yalnızca VPN DNS sunucuları "
 "kullanmaya zorlanırlar."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
@@ -35012,6 +35074,6 @@ msgstr ""
 "Bağlantı başlatmada \"net stop dnscache\", \"net start dnscache\", "
 "\"ipconfig /flushdns\" ve \"ipconfig /registerdns\" çalıştırın."
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "Kullanıcılar için farklı bir yönetim portu kullanın."
diff --git a/src/usr/local/share/locale/zh_CN/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/zh_CN/LC_MESSAGES/pfSense.mo
index 7f1b5fc..e7fb2bd 100644
--- a/src/usr/local/share/locale/zh_CN/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/zh_CN/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/zh_CN/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/zh_CN/LC_MESSAGES/pfSense.po
index f3d3984..e20713e 100644
--- a/src/usr/local/share/locale/zh_CN/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/zh_CN/LC_MESSAGES/pfSense.po
@@ -3,7 +3,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
@@ -1880,8 +1880,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2365,7 +2365,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2437,7 +2437,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2841,13 +2841,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5523,7 +5523,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5599,7 +5599,7 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr ""
@@ -5771,8 +5771,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr ""
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -6053,8 +6053,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6071,9 +6071,9 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6283,7 +6283,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr ""
@@ -7232,13 +7232,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7491,8 +7491,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7502,8 +7502,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr ""
@@ -7782,10 +7782,10 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7799,7 +7799,7 @@ msgstr ""
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8009,7 +8009,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr ""
@@ -8305,7 +8305,7 @@ msgstr ""
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8450,8 +8450,8 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr ""
 
@@ -8878,14 +8878,14 @@ msgid "Packet Capture"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr ""
 
@@ -9431,10 +9431,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10060,7 +10060,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10140,9 +10140,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10155,8 +10155,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr ""
 
@@ -10245,10 +10245,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10256,7 +10256,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10542,8 +10542,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12044,7 +12044,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13735,8 +13735,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr ""
 
@@ -13746,9 +13746,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr ""
@@ -13785,7 +13785,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr ""
@@ -15942,7 +15942,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16481,7 +16481,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16909,7 +16909,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20165,7 +20165,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr ""
 
@@ -20367,14 +20367,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr ""
 
@@ -20691,7 +20691,7 @@ msgstr ""
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr ""
 
@@ -20789,7 +20789,7 @@ msgstr ""
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr ""
 
@@ -21268,7 +21268,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23507,7 +23507,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25182,21 +25182,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25353,7 +25353,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25712,7 +25712,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25766,7 +25766,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25776,7 +25776,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25786,7 +25786,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25796,9 +25796,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25808,7 +25808,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27153,51 +27153,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27216,13 +27216,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27299,7 +27299,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27310,8 +27310,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27327,7 +27327,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27337,12 +27337,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27351,9 +27351,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27567,331 +27567,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27908,185 +27908,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28923,8 +28923,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28933,12 +28933,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28947,22 +28947,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28974,12 +28974,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29596,18 +29596,18 @@ msgstr ""
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30144,9 +30144,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30437,8 +30437,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30455,8 +30455,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30739,43 +30739,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30786,46 +30787,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30834,11 +30835,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30873,10 +30874,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31059,7 +31061,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31100,10 +31102,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31154,9 +31157,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31218,126 +31222,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31349,8 +31379,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31362,12 +31392,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31377,12 +31407,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31403,7 +31433,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31411,7 +31441,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31420,7 +31450,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31449,19 +31479,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31564,32 +31595,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31598,109 +31632,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31796,7 +31834,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31819,58 +31857,80 @@ msgstr ""
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31879,7 +31939,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31888,15 +31948,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31905,11 +31965,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31917,15 +31977,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31933,11 +31993,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31945,171 +32005,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34193,7 +34255,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34348,8 +34410,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34360,13 +34422,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34416,35 +34478,35 @@ msgstr ""
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34478,18 +34540,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34511,23 +34573,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr ""
 
@@ -34535,54 +34597,54 @@ msgstr ""
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""
diff --git a/src/usr/local/share/locale/zh_Hans_CN/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/zh_Hans_CN/LC_MESSAGES/pfSense.mo
index 7ea0483..be24ee5 100644
--- a/src/usr/local/share/locale/zh_Hans_CN/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/zh_Hans_CN/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/zh_Hans_CN/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/zh_Hans_CN/LC_MESSAGES/pfSense.po
index a368baa..9db21f0 100644
--- a/src/usr/local/share/locale/zh_Hans_CN/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/zh_Hans_CN/LC_MESSAGES/pfSense.po
@@ -4,11 +4,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-09 03:16-0500\n"
+"PO-Revision-Date: 2017-02-09 08:53-0500\n"
 "Last-Translator: fxneng <85926545@qq.com>\n"
 "Language-Team: Chinese (China) <fxneng@gmail.com>\n"
 "Language: zh-Hans-CN\n"
@@ -1889,8 +1889,8 @@ msgstr "未找到镜像。"
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2374,7 +2374,7 @@ msgstr "开发内核"
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr "网络设置"
 
@@ -2446,7 +2446,7 @@ msgstr "我的IP地址"
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2850,13 +2850,13 @@ msgstr "服务器：NO"
 msgid "CA: %s"
 msgstr "CA: %s"
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr "正在使用"
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr "已撤销"
 
@@ -5546,7 +5546,7 @@ msgstr "NTP时钟同步"
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr "入网认证"
 
@@ -5622,7 +5622,7 @@ msgstr "停止"
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr "禁止"
@@ -5794,8 +5794,8 @@ msgstr "如果这样做，此文件必须以空行终止（例如，新行）"
 msgid "Starting UPnP service... "
 msgstr "正在启动UPnP服务..."
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr "字段 '%s' 包含无效字符"
@@ -6076,8 +6076,8 @@ msgstr "选择此队列的选项"
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6094,9 +6094,9 @@ msgstr "选择此队列的选项"
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
@@ -6306,7 +6306,7 @@ msgstr "延迟必须为整数。"
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
 msgstr "删除"
@@ -6898,7 +6898,7 @@ msgid "rrdtool restore -f '%1$s' '%2$s' failed returning %3$s."
 msgstr "rrdtool 恢复 -f '%1$s' '%2$s' 失败，返回 %3$s."
 
 #: src/etc/inc/util.inc:98
-#, fuzzy, php-format
+#, php-format
 msgid "WARNING: Could not mark subsystem: %s dirty"
 msgstr "警告：无法标记子系统: %s dirty"
 
@@ -7001,9 +7001,9 @@ msgid "%s invalid: Too short!"
 msgstr "%s 无效：太短！"
 
 #: src/etc/inc/voucher.inc:309
-#, fuzzy, php-format
+#, php-format
 msgid "%1$s (%2$s/%3$s) active and good for %4$d Minutes"
-msgstr "%1$s (%2$s/%3$s)活动且适合%4$d分钟"
+msgstr "%1$s (%2$s/%3$s)活动和良好的%4$d分钟"
 
 #: src/etc/inc/voucher.inc:321
 #, php-format
@@ -7011,9 +7011,9 @@ msgid "%1$s (%2$s/%3$s) already used and expired"
 msgstr "%1$s (%2$s/%3$s) 已使用并过期"
 
 #: src/etc/inc/voucher.inc:329
-#, fuzzy, php-format
+#, php-format
 msgid "%1$s (%2$s/%3$s) good for %4$s Minutes"
-msgstr "%1$s (%2$s/%3$s) 适合%4$s分钟"
+msgstr "%1$s (%2$s/%3$s) 良好的%4$s分钟"
 
 #: src/etc/inc/voucher.inc:340
 #, php-format
@@ -7260,13 +7260,13 @@ msgstr "确认"
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7519,8 +7519,8 @@ msgstr "链接类型"
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7530,8 +7530,8 @@ msgstr "链接类型"
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
 msgstr "动作"
@@ -7810,10 +7810,10 @@ msgstr "系统日志"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7827,7 +7827,7 @@ msgstr "系统日志"
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -8037,7 +8037,7 @@ msgstr "清除命令条目"
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
 msgstr "清除"
@@ -8333,7 +8333,7 @@ msgstr "主机名"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8478,8 +8478,8 @@ msgstr "过滤表达式"
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "过滤器"
 
@@ -8906,14 +8906,14 @@ msgid "Packet Capture"
 msgstr "数据包捕获"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
 msgstr "OpenVPN服务器 "
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
 msgstr "OpenVPN客户端 "
 
@@ -9466,10 +9466,10 @@ msgstr "使用正则表达式过滤表。"
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -9942,7 +9942,7 @@ msgstr "默认情况下，路由跟踪使用UDP，但可能被一些路由器阻
 
 #: src/usr/local/www/easyrule.php:53 src/usr/local/www/easyrule.php:101
 msgid "Invalid action specified."
-msgstr ""
+msgstr "指定的操作无效。"
 
 #: src/usr/local/www/easyrule.php:61 src/usr/local/www/firewall_aliases.php:163
 #: src/usr/local/www/firewall_aliases_edit.php:142
@@ -9972,15 +9972,15 @@ msgstr "防火墙"
 
 #: src/usr/local/www/easyrule.php:61
 msgid "Easy Rule"
-msgstr ""
+msgstr "简单规则"
 
 #: src/usr/local/www/easyrule.php:71
 msgid "Confirmation Required to Add Easy Rule"
-msgstr ""
+msgstr "需要确认添加的简单规则"
 
 #: src/usr/local/www/easyrule.php:79 src/usr/local/www/easyrule.php:87
 msgid "Rule Type"
-msgstr ""
+msgstr "规则类型"
 
 #: src/usr/local/www/easyrule.php:82 src/usr/local/www/easyrule.php:92
 #: src/usr/local/www/firewall_nat_edit.php:718
@@ -10098,7 +10098,7 @@ msgstr "别名列表已经改变"
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10178,9 +10178,9 @@ msgstr "删除别名"
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10193,8 +10193,8 @@ msgstr "删除别名"
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "增加"
 
@@ -10283,10 +10283,10 @@ msgstr "网址表（端口）"
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10294,7 +10294,7 @@ msgstr "网址表（端口）"
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10586,8 +10586,8 @@ msgstr "别名的名称只能由字符“a-z，A-Z，0-9和_”组成。"
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -11054,9 +11054,8 @@ msgid "When disabled, the rule will not have any effect."
 msgstr "禁用时，规则不会有任何效果。"
 
 #: src/usr/local/www/firewall_nat_1to1_edit.php:427
-#, fuzzy
 msgid "No BINAT (NOT)"
-msgstr "No BINAT (NOT)"
+msgstr "没有BINAT"
 
 #: src/usr/local/www/firewall_nat_1to1_edit.php:430
 msgid "Excludes the address from a later, more general, rule."
@@ -11186,14 +11185,12 @@ msgid ""
 msgstr "检测到无效字符%s， 请删除无效字符，然后重新保存。"
 
 #: src/usr/local/www/firewall_nat_edit.php:212
-#, fuzzy
 msgid "Destination port from"
-msgstr "目标端口"
+msgstr "目标端口从"
 
 #: src/usr/local/www/firewall_nat_edit.php:212
-#, fuzzy
 msgid "Destination port to"
-msgstr "从目的端口"
+msgstr "目标端口到"
 
 #: src/usr/local/www/firewall_nat_edit.php:230
 msgid "Redirect target IP"
@@ -12102,7 +12099,7 @@ msgstr "防锁规则"
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13805,8 +13802,8 @@ msgstr "只列出前10k项目"
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "值"
 
@@ -13816,9 +13813,9 @@ msgstr "值"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr "高级选项"
@@ -13855,7 +13852,7 @@ msgstr "证书管理"
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr "用户管理"
@@ -15515,9 +15512,8 @@ msgid ""
 msgstr "GMK密钥更新事件之间的时间，以秒为单位指定。 允许的值为1-9999。 必须小于主密钥重新生成时间..."
 
 #: src/usr/local/www/interfaces.php:3071
-#, fuzzy
 msgid "Strict Key Regeneration"
-msgstr "保密密钥再生"
+msgstr "严格的密钥再生"
 
 #: src/usr/local/www/interfaces.php:3079
 msgid "802.1x RADIUS Options"
@@ -16031,7 +16027,7 @@ msgstr "参与桥接的接口。"
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr "高级配置"
@@ -16578,7 +16574,7 @@ msgstr "注意：组中WAN类型接口的规则不包含多WAN通常依赖的回
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr "ID"
 
@@ -16837,7 +16833,7 @@ msgstr "%s的MRU 必须大于576个字节。 "
 msgid ""
 "The MTU (%1$d) is too big for %2$s (maximum allowed with current settings: "
 "%3$d)."
-msgstr ""
+msgstr " %2$s（当前设置允许的最大值：%3$d）的MTU (%1$d) 太大。"
 
 #: src/usr/local/www/interfaces_ppps_edit.php:459
 msgid "Select"
@@ -17017,7 +17013,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr "压缩"
 
@@ -17030,6 +17026,8 @@ msgid ""
 "effective for TCP connections with enabled modern extensions like time "
 "stamping or SACK, which modify TCP options between sequential packets."
 msgstr ""
+"禁用vjcomp（压缩）（默认情况下自动协商）。%1$s此选项启用Van Jacobson TCP报头压缩，每个TCP数据包保存几个字节。 "
+"此选项几乎总是必需的。 压缩对于具有启用的现代扩展（例如时间戳或SACK）的TCP连接无效，其修改连续分组之间的TCP选项。"
 
 #: src/usr/local/www/interfaces_ppps_edit.php:871
 msgid "TCPmssFix"
@@ -18240,17 +18238,17 @@ msgstr "插件删除"
 #: src/usr/local/www/pkg_mgr_install.php:387
 #, php-format
 msgid "%1$s removal successfully completed."
-msgstr ""
+msgstr "已成功移除%1$s"
 
 #: src/usr/local/www/pkg_mgr_install.php:388
 #, php-format
 msgid "%1$s removal failed!"
-msgstr ""
+msgstr "移除%1$s失败"
 
 #: src/usr/local/www/pkg_mgr_install.php:389
 #, php-format
 msgid "Please wait while the removal of %1$s completes."
-msgstr ""
+msgstr "正在移除%1$s 完成，请稍候。"
 
 #: src/usr/local/www/pkg_mgr_install.php:391
 msgid "Packages Reinstallation"
@@ -18276,17 +18274,17 @@ msgstr "插件重新安装"
 #: src/usr/local/www/pkg_mgr_install.php:397
 #, php-format
 msgid "%1$s reinstallation successfully completed."
-msgstr ""
+msgstr "%1$s重新安装已成功完成。"
 
 #: src/usr/local/www/pkg_mgr_install.php:398
 #, php-format
 msgid "%1$s reinstallation failed!"
-msgstr ""
+msgstr "%1$s重新安装失败"
 
 #: src/usr/local/www/pkg_mgr_install.php:399
 #, php-format
 msgid "Please wait while the reinstallation of %1$s completes."
-msgstr ""
+msgstr "正在重新安装%1$s，请稍候。"
 
 #: src/usr/local/www/pkg_mgr_install.php:401
 msgid "Package Installation"
@@ -18295,17 +18293,17 @@ msgstr "插件安装"
 #: src/usr/local/www/pkg_mgr_install.php:402
 #, php-format
 msgid "%1$s installation successfully completed."
-msgstr ""
+msgstr "%1$s安装成功完成。"
 
 #: src/usr/local/www/pkg_mgr_install.php:403
 #, php-format
 msgid "%1$s installation failed!"
-msgstr ""
+msgstr "%1$s安装失败"
 
 #: src/usr/local/www/pkg_mgr_install.php:404
 #, php-format
 msgid "Please wait while the installation of %1$s completes."
-msgstr ""
+msgstr "正在安装%1$s ，请稍候。"
 
 #: src/usr/local/www/pkg_mgr_install.php:434
 msgid "Please wait while the update system initializes"
@@ -18746,6 +18744,9 @@ msgid ""
 "system. If this is enabled, RADIUS MAC authentication cannot be used. Also, "
 "the logout window will not be shown."
 msgstr ""
+"启用后，将在用户成功通过身份验证后自动添加MAC直通条目。 该MAC地址的用户将永远不必再次进行身份验证。 要删除直通 "
+"MAC条目，请登录并从%1$sMAC选项卡%2$s手动删除，或从另一个系统发送POST。 如果启用，则不能使用RADIUS MAC身份验证。 "
+"此外，将不会显示注销窗口。"
 
 #: src/usr/local/www/services_captiveportal.php:658
 #, php-format
@@ -18755,6 +18756,8 @@ msgid ""
 "MAC entry either log in and remove it manually from the %1$sMAC tab%2$s or "
 "send a POST from another system."
 msgstr ""
+"如果启用创建的自动MAC直通条目，将会保存在身份验证期间使用的用户名。 "
+"要删除直通MAC条目，请登录并从%1$sMAC选项卡%2$s手动删除，或从另一个系统发送POST。"
 
 #: src/usr/local/www/services_captiveportal.php:664
 msgid "Per-user bandwidth restriction"
@@ -18958,6 +18961,9 @@ msgid ""
 "334455 %1$sIETF: 00-11-22-33-44-55 %1$sCisco: 0011.2233.4455 %1$sUnformatted:"
 " 001122334455"
 msgstr ""
+"此选项更改整个RADIUS系统中使用的MAC地址格式。 如果需要更改RADIUS MAC身份验证的用户名格式，请更改此设置。 "
+"%1$s默认：00：11：22：33：44：55%1$sSingle dash：001122-334455%1$sIETF：00-11-22-33-44-"
+"55%1$sCisco：0011.2233.4455%1$sUnformatted：001122334455"
 
 #: src/usr/local/www/services_captiveportal.php:1019
 msgid ""
@@ -18990,7 +18996,7 @@ msgstr "*SSL 证书"
 msgid ""
 "If no certificates are defined, one may be defined here: %1$sSystem &gt; "
 "Cert. Manager%2$s"
-msgstr ""
+msgstr "如果没有定义证书，可以在这里定义： %1$s系统 &gt;证书管理%2$s"
 
 #: src/usr/local/www/services_captiveportal.php:1040
 msgid "HTTPS Forwards"
@@ -19040,6 +19046,23 @@ msgid ""
 "&quot;accept&quot; type=&quot;submit&quot; value="
 "&quot;Continue&quot;&gt;%1$s&lt;/form&gt;"
 msgstr ""
+"在此处上传门户网站页面的HTML / PHP文件（留空以保留当前的页面）。请确保包含一个带有提交按钮（name =“accept”）的表单（POST "
+"to \"$PORTAL_ACTION$\"）和一个带有name =“redirurl”和value =“$ PORTAL_REDIRURL "
+"$”的隐藏字段。 如果启用了身份验证，请包括“auth_user”和“auth_pass”和/"
+"或“auth_voucher”输入字段，否则将总是失败。%1$s示例表单如下: %1$s&lt;form method=&quot;post&quot; "
+"action=&quot;$PORTAL_ACTION$&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;auth_user&quot; type="
+"&quot;text&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;auth_pass&quot; type="
+"&quot;password&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;auth_voucher&quot; type="
+"&quot;text&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;redirurl&quot; type=&quot;hidden&quot; value="
+"&quot;$PORTAL_REDIRURL$&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;zone&quot; type=&quot;hidden&quot; value="
+"&quot;$PORTAL_ZONE$&quot;&gt;%1$s&nbsp;&nbsp;&nbsp;&lt;input name="
+"&quot;accept&quot; type=&quot;submit&quot; value="
+"&quot;Continue&quot;&gt;%1$s&lt;/form&gt;"
 
 #: src/usr/local/www/services_captiveportal.php:1082
 msgid "Current Portal Page"
@@ -19160,7 +19183,7 @@ msgid "The total size limit for all files is %s."
 msgstr "所有文件的总大小限制是 %s。"
 
 #: src/usr/local/www/services_captiveportal_hostname.php:32
-#, php-format
+#, fuzzy, php-format
 msgid ""
 "Adding new hostnames will allow a DNS hostname access to/from the captive "
 "portal without being taken to the portal page. This can be used for a web "
@@ -19168,6 +19191,8 @@ msgid ""
 "network, for example. By specifying %1$sfrom%2$s addresses, it may be used "
 "to always allow pass-through access from a client behind the captive portal."
 msgstr ""
+"添加新的主机名将允许DNS主机名访问/从入网门户访问，而不被带到门户页面。 这可以用于服务于门户页面的镜像的web服务器，或者另一网络上的DNS服务器。 "
+"通过指定%1$sfrom%2$s地址，它可以用于始终允许从入网门户后面的客户端进行直通访问。"
 
 #: src/usr/local/www/services_captiveportal_hostname.php:136
 msgid "Edit hostname"
@@ -19180,18 +19205,18 @@ msgstr "删除主机名"
 #: src/usr/local/www/services_captiveportal_hostname.php:145
 #, fuzzy, php-format
 msgid "All connections %1$sto%2$s the hostname are allowed"
-msgstr "允许%1$s to %2$s的所有连接"
+msgstr "允许%1$sto%2$s主机名的所有连接"
 
 #: src/usr/local/www/services_captiveportal_hostname.php:146
 #, fuzzy, php-format
 msgid "All connections %1$sfrom%2$s the hostname are allowed"
-msgstr "允许 %1$s from %2$s 的所有连接"
+msgstr "允许 %1$s from %2$s主机名的所有连接"
 
 #: src/usr/local/www/services_captiveportal_hostname.php:147
 #: src/usr/local/www/services_captiveportal_ip.php:143
 #, fuzzy, php-format
 msgid "All connections %1$sto or from%2$s are allowed"
-msgstr "允许 %1$s to 或 from %2$s的所有连接"
+msgstr "允许 %1$s to or from %2$s的所有连接"
 
 #: src/usr/local/www/services_captiveportal_hostname_edit.php:96
 msgid "Allowed Hostname"
@@ -19224,6 +19249,7 @@ msgid "Captive Portal Hostname Settings"
 msgstr "入网门户主机名设置"
 
 #: src/usr/local/www/services_captiveportal_hostname_edit.php:180
+#, fuzzy
 msgid ""
 "Use \"From\" to always allow a Hostname through the captive portal (without "
 "authentication). Use \"To\" to allow access from all clients (even non-"
@@ -19266,12 +19292,12 @@ msgstr "删除IP"
 #: src/usr/local/www/services_captiveportal_ip.php:141
 #, fuzzy, php-format
 msgid "All connections %1$sto%2$s the address are allowed"
-msgstr "所有连接%1$s to %2$s的地址都是允许的"
+msgstr "允许%1$s to %2$s的地址的所有连接"
 
 #: src/usr/local/www/services_captiveportal_ip.php:142
 #, fuzzy, php-format
 msgid "All connections %1$sfrom%2$s the address are allowed"
-msgstr "所有连接 %1$s from%2$s 的地址都是允许的"
+msgstr "允许 %1$s from%2$s 的地址的所有连接"
 
 #: src/usr/local/www/services_captiveportal_ip.php:162
 #, fuzzy
@@ -19322,13 +19348,12 @@ msgid "Enter a description here for reference only. (Not parsed)"
 msgstr "您可以在这里输入描述，仅供参考（不解析）。"
 
 #: src/usr/local/www/services_captiveportal_ip_edit.php:240
-#, fuzzy
 msgid ""
 "Use \"From\" to always allow access to an address through the captive portal "
 "(without authentication). Use \"To\" to allow access from all clients (even "
 "non-authenticated ones) behind the portal to this IP."
 msgstr ""
-"使用“From”始终允许访问通过入网门户的地址（无认证）。。 使用“to”允许从门户后面的所有客户端（即使是未经身份认证的客户端）访问此IP。"
+"使用“From”始终允许访问通过入网门户的地址（无认证）。 使用“to”允许从门户后面的所有客户端（即使是未经身份认证的客户端）访问此IP。"
 
 #: src/usr/local/www/services_captiveportal_ip_edit.php:248
 msgid "Enter an upload limit to be enforced on this address in Kbit/s"
@@ -19702,7 +19727,7 @@ msgid ""
 "IP address of master nodes webConfigurator to synchronize voucher database "
 "and used vouchers from.%1$sNOTE: this should be setup on the slave nodes and "
 "not the primary node!"
-msgstr ""
+msgstr "主节点web配置器的IP地址，用于同步凭证数据库和使用的凭证。%1$s注意：这应该在从节点而不是主节点上设置！"
 
 #: src/usr/local/www/services_captiveportal_vouchers.php:532
 msgid "Voucher sync port"
@@ -20317,7 +20342,7 @@ msgid ""
 msgstr "如果在上述范围之外的子网中需要额外的地址池，则可以在此处指定。"
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr "WINS 服务器"
 
@@ -20455,7 +20480,7 @@ msgstr "动态DNS域"
 msgid ""
 "Leave blank to disable dynamic DNS registration.%1$sEnter the dynamic DNS "
 "domain which will be used to register client names in the DNS server."
-msgstr ""
+msgstr "留空以禁用动态DNS注册。%1$s输入将用于在DNS服务器中注册客户端名称的动态DNS域。"
 
 #: src/usr/local/www/services_dhcp.php:1066
 #: src/usr/local/www/services_dhcpv6.php:771
@@ -20522,14 +20547,14 @@ msgstr "拒绝访问的部分MAC地址列表，以逗号分隔，不含空格，
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr "NTP服务器 1"
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr "NTP服务器 2"
 
@@ -20618,7 +20643,7 @@ msgstr "输入DHCP选项编号和要包括在DHCP租用信息中的每个项目�
 #: src/usr/local/www/services_dhcp.php:1275
 #, php-format
 msgid "For a list of available options please visit this %1$s URL%2$s.%3$s"
-msgstr ""
+msgstr "有关可用选项的列表，请访问此%1$s 网址%2$s。%3$s"
 
 #: src/usr/local/www/services_dhcp.php:1283
 msgid "Text"
@@ -20806,7 +20831,7 @@ msgid ""
 "If an IPv4 address is entered, the address must be outside of the pool."
 "%1$sIf no IPv4 address is given, one will be dynamically allocated from the "
 "pool."
-msgstr ""
+msgstr "如果输入IPv4地址，则该地址必须在池外。%1$s如果没有给出IPv4地址，将从池中动态分配一个。"
 
 #: src/usr/local/www/services_dhcp_edit.php:454
 #: src/usr/local/www/services_dhcpv6_edit.php:238
@@ -20846,7 +20871,7 @@ msgstr "WINS 服务器"
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr "DNS 服务器"
 
@@ -20944,7 +20969,7 @@ msgstr "NTP服务器"
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr "NTP服务器"
 
@@ -21131,7 +21156,7 @@ msgstr "如果启用了DNS转发器，则为此接口的IP留空以使用系统�
 msgid ""
 "Lease time in seconds. Used for clients that do not ask for a specific "
 "expiration time. %1$sThe default is 7200 seconds."
-msgstr ""
+msgstr "租期时间（秒）。 用于不要求特定到期时间的客户端。 %1$s默认值为7200秒。"
 
 #: src/usr/local/www/services_dhcpv6.php:726
 msgid "Max lease time"
@@ -21142,7 +21167,7 @@ msgstr "最长租用时间"
 msgid ""
 "Maximum lease time for clients that ask for a specific expiration time. "
 "%1$sThe default is 86400 seconds."
-msgstr ""
+msgstr "请求特定到期时间的客户端的最长租用时间. %1$s默认是 86400 秒。"
 
 #: src/usr/local/www/services_dhcpv6.php:734
 msgid "Time Format Change"
@@ -21260,7 +21285,7 @@ msgid ""
 "If an IPv6 address is entered, the address must be outside of the pool."
 "%1$sIf no IPv6 address is given, one will be dynamically allocated from the "
 "pool."
-msgstr ""
+msgstr "如果输入了IPv6地址，则该地址必须在池外。%1$s如果未给出IPv6地址，则将从池中动态分配IPv6地址。"
 
 #: src/usr/local/www/services_dhcpv6_edit.php:260
 msgid "Enter the root-path string. This overrides setting on main page."
@@ -21371,6 +21396,8 @@ msgid ""
 "servers sequentially in the order specified (%2$sSystem - General Setup - "
 "DNS Servers%3$s), rather than all at once in parallel. "
 msgstr ""
+"如果设置此选项，%1$s转发器(dnsmasq)将按照指定的顺序（%2$s系统 - 常规设置 - "
+"DNS服务器%3$s）顺序查询DNS服务器，而不是同时进行。"
 
 #: src/usr/local/www/services_dnsmasq.php:302
 #, php-format
@@ -21431,12 +21458,14 @@ msgid ""
 "interfaces and discarding queries to other addresses.%1$sThis option does "
 "NOT work with IPv6. If set, dnsmasq will not bind to IPv6 addresses."
 msgstr ""
+"如果设置此选项，DNS转发器将仅绑定到包含上面选择的IP地址的接口，而不是绑定到所有接口并丢弃对其他地址的查询。%1$s此选项不适用于IPv6。 "
+"如果设置，DNSmasq将不会绑定到IPv6地址。"
 
 #: src/usr/local/www/services_dnsmasq.php:348
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr "自定义选项"
 
@@ -21562,6 +21591,8 @@ msgid ""
 "Domain to override (NOTE: this does not have to be a valid TLD!)%1$se.g.: "
 "test or mycompany.localdomain or 1.168.192.in-addr.arpa"
 msgstr ""
+"覆盖的域（注意：这不必是有效的TLD！）%1$s,例如 .: test或mycompany.localdomain或1.168.192.in-addr."
+"arpa"
 
 #: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:146
 #, php-format
@@ -21571,6 +21602,8 @@ msgid ""
 "to standard nameservers instead of a previous override.%1$sOr enter ! for "
 "lookups for this host/subdomain to NOT be forwarded anywhere."
 msgstr ""
+"此域的权威DNS服务器的IP地址%1$s。例如：192.168.100.100%1$s；或输入＃用于将此主机/"
+"子域名传递到标准名称服务器而不是先前的覆盖。%1$s或输入！用于查找此主机/子域不会在任何地方转发。"
 
 #: src/usr/local/www/services_dnsmasq_domainoverride_edit.php:153
 msgid "Source IP"
@@ -21632,19 +21665,19 @@ msgstr "主机覆盖选项"
 #: src/usr/local/www/services_unbound_host_edit.php:218
 #, php-format
 msgid "Name of the host, without the domain part%1$se.g.: \"myhost\""
-msgstr ""
+msgstr "主机名，不带域部分%1$s。例如: \"myhost\""
 
 #: src/usr/local/www/services_dnsmasq_edit.php:211
 #: src/usr/local/www/services_unbound_host_edit.php:226
 #, php-format
 msgid "Domain of the host%1$se.g.: \"example.com\""
-msgstr ""
+msgstr "主机名%1$s。例如: \"example.com\""
 
 #: src/usr/local/www/services_dnsmasq_edit.php:218
 #: src/usr/local/www/services_unbound_host_edit.php:233
 #, php-format
 msgid "IP address of the host%1$se.g.: 192.168.100.100 or fd00:abcd::1"
-msgstr ""
+msgstr "主机IP地址%1$s。例如: 192.168.100.100 或 fd00:abcd::1"
 
 #: src/usr/local/www/services_dnsmasq_edit.php:239
 #: src/usr/local/www/services_unbound_host_edit.php:254
@@ -21684,7 +21717,7 @@ msgstr "缓存IP"
 msgid ""
 "IP addresses appearing in %1$sgreen%2$s are up to date with Dynamic DNS "
 "provider. "
-msgstr ""
+msgstr "出现在%1$s绿色%2$s 中的IP地址是动态DNS提供程序的最新版本。"
 
 #: src/usr/local/www/services_dyndns.php:220
 msgid ""
@@ -21743,6 +21776,9 @@ msgid ""
 "GratisDNS: Enter the hostname and the domain separately, with the domain "
 "being the domain or subdomain zone being handled by the provider."
 msgstr ""
+"输入完整的完全合格域名。 示例：myhost.dyndns.org%1$she.net "
+"tunnelbroker：输入隧道ID%1$sGleSYS：输入记录ID％%1$sDNSimple：只输入域名%1$sNamecheap，Cloudflare，GratisDNS： "
+"单独输入主机名和域，其中域是供应商处理的域或子域区域。"
 
 #: src/usr/local/www/services_dyndns_edit.php:311
 msgid "MX"
@@ -21789,6 +21825,8 @@ msgid ""
 "%1$sFor Custom Entries, Username and Password represent HTTP Authentication "
 "username and passwords."
 msgstr ""
+"除了Namecheap，FreeDNS和自定义条目之外，所有类型都需要用户名。%1$sRoute 53:输入访问密钥ID.%1$sGleSYS: "
+"输入API 用户。%1$s对于自定义条目，用户名和密码表示HTTP验证用户名和密码。"
 
 #: src/usr/local/www/services_dyndns_edit.php:369
 #, php-format
@@ -21797,6 +21835,8 @@ msgid ""
 "FreeDNS.%1$sRoute 53: Enter the Secret Access Key.%1$sGleSYS: Enter the API "
 "key.%1$sDNSimple: Enter the API token."
 msgstr ""
+"FreeDNS (freedns.afraid.org): 输入FreeDNS提供的“认证令牌”。%1$sRoute 53: "
+"输入秘密访问密钥。%1$sGleSYS: 输入API 密钥。%1$sDNSimple: 输入API令牌。"
 
 #: src/usr/local/www/services_dyndns_edit.php:376
 msgid "Zone ID"
@@ -21809,6 +21849,8 @@ msgid ""
 "\"us-east-1/A1B2C3D4E5F6Z\").%1$sDNSimple: Enter the Record ID of record to "
 "update."
 msgstr ""
+"Route53: 以REGION / ZONEID形式输入AWS地区和区域ID (示例: \"us-east-1/A1B2C3D4E5F6Z\")."
+"%1$sDNSimple: 输入要更新的记录的记录ID。"
 
 #: src/usr/local/www/services_dyndns_edit.php:387
 msgid ""
@@ -21879,6 +21921,8 @@ msgid ""
 "clients can join groups and receive multicast data. One or more downstream "
 "interfaces must be configured."
 msgstr ""
+"上游网络接口是负责与可用组播数据源通信的输出接口，只能有一个上游接口。%1$s下游网络接口是到目标网络的分发接口\t，其中多播客户端可以加入组并接收多播数据。 "
+"必须配置一个或多个下行接口。"
 
 #: src/usr/local/www/services_igmpproxy_edit.php:180
 msgid "Threshold"
@@ -21939,7 +21983,7 @@ msgid ""
 "Interfaces without an IP address will not be shown.%1$sSelecting no "
 "interfaces will listen on all interfaces with a wildcard.%1$sSelecting all "
 "interfaces will explicitly listen on only the interfaces/IPs specified."
-msgstr ""
+msgstr "没有IP地址的接口将不会显示。%1$s选择没有接口将侦听所有带通配符的接口。%1$s选择所有接口将显示侦听仅指定的接口/ IP。"
 
 #: src/usr/local/www/services_ntpd.php:229
 msgid "Time Servers"
@@ -21961,6 +22005,10 @@ msgid ""
 "indicates this entry is a pool of NTP servers and not a single address. This "
 "is assumed for *.pool.ntp.org."
 msgstr ""
+"为了获得最佳结果，应在此处配置三到五个服务器，或至少一个池。%1$s%2$sPrefer%3$s "
+"选项表示NTP应优先于所有其他服务器使用此服务器。%1$s %2$sNo "
+"Select%3$s选项表示NTP不应该使用此服务器的时间，但将收集和显示此服务器的统计信息。%1$s%2$sIs a Pool%3$s 选项指示此条目 "
+"是NTP服务器池，而不是单个地址。 这是为* .pool.ntp.org假设的。"
 
 #: src/usr/local/www/services_ntpd.php:292
 msgid "Orphan Mode"
@@ -21989,7 +22037,7 @@ msgstr "记录"
 msgid ""
 "These options enable additional messages from NTP to be written to the "
 "System Log %1$sStatus > System Logs > NTP%2$s"
-msgstr ""
+msgstr "这些选项启用NTP的其他消息写入系统日志%1$s系统状态>系统日志> NTP％%2$s"
 
 #: src/usr/local/www/services_ntpd.php:333
 msgid "Statistics Logging"
@@ -22036,7 +22084,6 @@ msgid "Default Access Restrictions"
 msgstr "默认访问限制"
 
 #: src/usr/local/www/services_ntpd_acls.php:187
-#, fuzzy
 msgid "Kiss-o'-death"
 msgstr "Kiss-o'-death"
 
@@ -22133,6 +22180,8 @@ msgid ""
 "if the GPS is not listed.%1$sThe predefined configurations assume the GPS "
 "has already been set to NMEA mode."
 msgstr ""
+"此选项允许选择预定义配置。 默认是pfSense 2.1和更早版本的配置（不推荐）。 "
+"如果未列出GPS，请选择Generic。%1$s预定义配置假定GPS已设置为NMEA模式。"
 
 #: src/usr/local/www/services_ntpd_gps.php:362
 #: src/usr/local/www/services_ntpd_pps.php:147
@@ -22402,6 +22451,8 @@ msgid ""
 "the client range.%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
+"输入PPPoE服务器应该提供给客户端用作其“网关”的IP地址。%1$s通常这被设置为在客户端范围之外的未使用的IP。%1$s注意：这不应该设置为任何当前在此防火墙上使用IP "
+"地址。"
 
 #: src/usr/local/www/services_pppoe_edit.php:333
 msgid "*Remote Address Range"
@@ -22814,7 +22865,7 @@ msgid ""
 "The length of time in seconds (relative to the time the packet is sent) that "
 "the prefix is valid for the purpose of on-link determination.%1$sThe default "
 "is 86400 seconds."
-msgstr ""
+msgstr "以秒为单位的时间长度（相对于发送数据包的时间），该前缀对于在线确定的目的是有效的。。%1$s默认值为86400秒。"
 
 #: src/usr/local/www/services_router_advertisements.php:366
 msgid "Default preferred lifetime"
@@ -22826,7 +22877,7 @@ msgid ""
 "Seconds. The length of time in seconds (relative to the time the packet is "
 "sent) that addresses generated from the prefix via stateless address "
 "autoconfiguration remain preferred.%1$sThe default is 14400 seconds."
-msgstr ""
+msgstr "秒。 以秒为单位的时间长度（相对于发送数据包的时间），通过无状态地址自动配置从前缀生成的地址长度保持优先。%1$s默认值为14400秒。"
 
 #: src/usr/local/www/services_router_advertisements.php:374
 msgid "Minimum RA interval"
@@ -23359,7 +23410,7 @@ msgstr "预取DNS密钥支持"
 msgid ""
 "This helps lower the latency of requests but does utilize a little more CPU. "
 "See: %1$sWikipedia%2$s"
-msgstr ""
+msgstr "这有助于降低请求的延迟，但确实利用了更多的CPU。参见: %1$s维基百科%2$s"
 
 #: src/usr/local/www/services_unbound_advanced.php:244
 msgid "Harden DNSSEC Data"
@@ -23547,7 +23598,7 @@ msgstr "实验位0x20支持"
 #: src/usr/local/www/services_unbound_advanced.php:357
 #, php-format
 msgid "See the implementation %1$sdraft dns-0x20%2$s for more information."
-msgstr ""
+msgstr "有关详细信息，请参阅实施%1$sdraft dns-0x20%2$s 。"
 
 #: src/usr/local/www/services_unbound_domainoverride_edit.php:84
 msgid ""
@@ -23577,6 +23628,7 @@ msgid ""
 "100.100%1$sTo use a non-default port for communication, append an '@' with "
 "the port number."
 msgstr ""
+"此域的权威DNS服务器的IP地址。 例如：192.168.100.100%1$s％1 $ s要使用非默认端口进行通信，请在端口号后面附加一个“@”。"
 
 #: src/usr/local/www/services_unbound_host_edit.php:84
 msgid ""
@@ -23693,7 +23745,7 @@ msgstr "相关日志条目"
 #: src/usr/local/www/status.php:141
 #, php-format
 msgid "Firewall Status on %s"
-msgstr ""
+msgstr " %s上的防火墙状态"
 
 #: src/usr/local/www/status.php:144
 msgid "This status page includes the following information"
@@ -23712,7 +23764,7 @@ msgstr "config.xml中的公共密码字段已自动编辑。"
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -24411,7 +24463,7 @@ msgstr "运行时间"
 
 #: src/usr/local/www/status_interfaces.php:122
 msgid "(historical)"
-msgstr ""
+msgstr "（历史）"
 
 #: src/usr/local/www/status_interfaces.php:123
 msgid "Cell Signal (RSSI)"
@@ -24430,12 +24482,10 @@ msgid "Cell Service"
 msgstr "手机服务"
 
 #: src/usr/local/www/status_interfaces.php:127
-#, fuzzy
 msgid "Cell Upstream"
 msgstr "Cell 上行"
 
 #: src/usr/local/www/status_interfaces.php:128
-#, fuzzy
 msgid "Cell Downstream"
 msgstr "Cell下行"
 
@@ -24468,7 +24518,6 @@ msgid "Subnet mask IPv6"
 msgstr "IPv6子网掩码"
 
 #: src/usr/local/www/status_interfaces.php:159
-#, fuzzy
 msgid "Media"
 msgstr "Media"
 
@@ -24512,7 +24561,7 @@ msgstr "碰撞"
 #: src/usr/local/www/status_interfaces.php:177
 #, php-format
 msgid "Bridge (%1$s)"
-msgstr ""
+msgstr "桥 (%1$s)"
 
 #: src/usr/local/www/status_interfaces.php:194
 msgid "Total interrupts"
@@ -24526,6 +24575,8 @@ msgid ""
 "%1$snot%2$s prevent dial-on-demand from making connections to the outside! "
 "Don't use dial-on-demand if the line is to be kept disconnected."
 msgstr ""
+"如果任何数据包触发它，使用按需拨号将使连接重新开始。 要证实这一点：手动断开连接将%1$s不%2$s阻止拨号请求连接到外面！ "
+"如果线路要保持断开连接，请不要使用按需拨号。"
 
 #: src/usr/local/www/status_ipsec.php:108
 #: src/usr/local/www/status_ipsec.php:141
@@ -24539,7 +24590,7 @@ msgstr " 秒 ("
 #: src/usr/local/www/status_ipsec.php:215
 #, php-format
 msgid "%1$s seconds (%2$s) ago"
-msgstr ""
+msgstr "%1$s 秒 (%2$s)以前"
 
 #: src/usr/local/www/status_ipsec.php:224
 #: src/usr/local/www/status_ipsec.php:226
@@ -24566,17 +24617,17 @@ msgstr "远程："
 #: src/usr/local/www/status_ipsec.php:303
 #, php-format
 msgid "Rekey: %1$s seconds (%2$s)"
-msgstr ""
+msgstr "重新生成密钥：%1$s 秒(%2$s)"
 
 #: src/usr/local/www/status_ipsec.php:305
 #, php-format
 msgid "Life: %1$s seconds (%2$s)"
-msgstr ""
+msgstr "有效期: %1$s秒 (%2$s)"
 
 #: src/usr/local/www/status_ipsec.php:307
 #, php-format
 msgid "Install: %1$s seconds (%2$s)"
-msgstr ""
+msgstr "安装: %1$s 秒 (%2$s)"
 
 #: src/usr/local/www/status_ipsec.php:328
 msgid "IPComp: "
@@ -25036,7 +25087,7 @@ msgstr "WebGUI进程正在重新启动。"
 #: src/usr/local/www/status_logs_common.inc:782
 #, php-format
 msgid "Manage %1$s Log"
-msgstr ""
+msgstr "管理 %1$s 日志"
 
 #: src/usr/local/www/status_logs_common.inc:791
 #: src/usr/local/www/status_logs_settings.php:235
@@ -25083,6 +25134,8 @@ msgid ""
 "the options to set the size, then clear the log using the \"Clear Log\" "
 "action below. "
 msgstr ""
+"日志保存在恒定大小的循环日志文件中。 此字段控制日志文件的大小，因此日志中可能存在多少条目。 "
+"默认值为大约500KB。%1$s注意：日志大小在下次清除时更改。 要立即更改日志大小，请先保存选项以设置大小，然后使用下面的“清除日志”操作清除日志。"
 
 #: src/usr/local/www/status_logs_common.inc:849
 msgid "Formatted/Raw Display"
@@ -25151,7 +25204,7 @@ msgid ""
 "Show the applied rule description below or in the firewall log rows."
 "%1$sDisplaying rule descriptions for all lines in the log might affect "
 "performance with large rule sets."
-msgstr ""
+msgstr "在下面或在防火墙日志行中显示应用的规则描述。%1$s显示日志中所有行的规则描述可能会影响性能。"
 
 #: src/usr/local/www/status_logs_common.inc:950
 msgid "Saves changed settings."
@@ -25194,15 +25247,15 @@ msgstr "简单规则：通过此流量"
 
 #: src/usr/local/www/status_logs_filter.php:332
 msgid "Add to block list"
-msgstr ""
+msgstr "添加到阻止列表"
 
 #: src/usr/local/www/status_logs_filter.php:332
 msgid "Pass traffic"
-msgstr ""
+msgstr "通过交通"
 
 #: src/usr/local/www/status_logs_filter.php:332
 msgid "Resolve"
-msgstr ""
+msgstr "解析"
 
 #: src/usr/local/www/status_logs_filter_dynamic.php:381
 msgid "Pause"
@@ -25332,14 +25385,14 @@ msgstr "这只是GUI中显示的日志条目的数量。 它不影响实际日�
 msgid ""
 "Log packets that are %1$sblocked%2$s by the implicit default block rule. - "
 "Per-rule logging options are still respected."
-msgstr ""
+msgstr "%1$s阻止%2$s的日志包通过隐含的默认阻止规则。 - 仍然遵守每个规则日志记录选项。"
 
 #: src/usr/local/www/status_logs_settings.php:268
 #, php-format
 msgid ""
 "Log packets that are %1$sallowed%2$s by the implicit default pass rule. - "
 "Per-rule logging options are still respected. "
-msgstr ""
+msgstr " %1$s允许%2$s的日志包通过隐含默认通过规则。 - 仍然遵守每个规则日志记录选项。"
 
 #: src/usr/local/www/status_logs_settings.php:289
 msgid ""
@@ -25394,21 +25447,21 @@ msgid "Remote log servers"
 msgstr "远程日志服务器"
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr "服务器 1"
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr "服务器 2"
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr "服务器 3"
 
@@ -25450,7 +25503,6 @@ msgid "Unreach/Pending"
 msgstr "延伸/待定"
 
 #: src/usr/local/www/status_ntpd.php:72
-#, fuzzy
 msgid "Active Peer"
 msgstr "活动的同伴"
 
@@ -25459,7 +25511,6 @@ msgid "Candidate"
 msgstr "候选人"
 
 #: src/usr/local/www/status_ntpd.php:78
-#, fuzzy
 msgid "PPS Peer"
 msgstr "PPS 同伴"
 
@@ -25468,7 +25519,6 @@ msgid "Selected"
 msgstr "已选择"
 
 #: src/usr/local/www/status_ntpd.php:84
-#, fuzzy
 msgid "Excess Peer"
 msgstr "多余的同伴"
 
@@ -25488,7 +25538,7 @@ msgid ""
 msgstr "统计信息不可用，因为ntpq和ntpdc查询在%1$sNTP 服务设置s%2$s中被禁用"
 
 #: src/usr/local/www/status_ntpd.php:207
-#, fuzzy, php-format
+#, php-format
 msgid "No peers found, %1$sis the ntp service running?%2$s"
 msgstr "未找到同伴, %1$s确认ntp服务运行了？%2$s"
 
@@ -25569,7 +25619,7 @@ msgstr "客户端连接"
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr "通用名称"
 
@@ -25770,6 +25820,9 @@ msgid ""
 "hoc mode), P = privacy (WEP/TKIP/AES), S = Short preamble, s = Short slot "
 "time."
 msgstr ""
+"%1$s标识:%2$s A = authorized, E = Extended Rate (802.11g), P = Power saving "
+"mode.%3$s%1$s性能:%2$s E = ESS (infrastructure mode), I = IBSS (ad-hoc mode), "
+"P = privacy (WEP/TKIP/AES), S = Short preamble, s = Short slot time."
 
 #: src/usr/local/www/system.php:119
 msgid "AHEAD of"
@@ -25911,7 +25964,7 @@ msgid ""
 "timezone for the firewall. %1$sChoose a special or \"Etc\" zone only in "
 "cases where the geographic zones do not properly handle the clock offset "
 "required for this firewall."
-msgstr ""
+msgstr "选择地理区域名称（大陆/位置）以确定防火墙的时区。 %1$s仅在地理区域未正确处理此防火墙所需的时钟偏移的情况下选择特殊或“Etc”区域。"
 
 #: src/usr/local/www/system.php:554
 msgid "Timeservers"
@@ -25933,7 +25986,7 @@ msgstr "为WEB配置器选择一种语言"
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr "WEB 配置器"
 
@@ -25987,7 +26040,7 @@ msgstr "请稍等一会儿........将在20秒内重定向到 %s 。"
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr "管理员访问"
 
@@ -25997,7 +26050,7 @@ msgstr "管理员访问"
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr "防火墙/ NAT"
 
@@ -26007,7 +26060,7 @@ msgstr "防火墙/ NAT"
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr "附带组件"
@@ -26017,9 +26070,9 @@ msgstr "附带组件"
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr "系统可调参数"
 
@@ -26029,7 +26082,7 @@ msgstr "系统可调参数"
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr "通知 "
 
@@ -26117,6 +26170,9 @@ msgid ""
 "%2$sHint: the &quot;Set interface(s) IP address&quot; option in the console "
 "menu resets this setting as well.%3$s"
 msgstr ""
+"取消选中此选项时，始终允许访问%1$s接口上的web配置器，而不管用户定义的防火墙规则集是什么。 "
+"选中此框可禁用此自动添加的规则，因此对Web配置器的访问由用户定义的防火墙规则控制（确保防火墙规则允许访问，以避免被锁定！）。%2$s提示：设置接口IP地址“ "
+"选项也会重置此设置。%3$s"
 
 #: src/usr/local/www/system_advanced_admin.php:414
 msgid "DNS Rebind Check"
@@ -26205,6 +26261,8 @@ msgid ""
 "keyboard. A %1$snull modem%2$s serial cable or adapter is required to use "
 "the serial console."
 msgstr ""
+"注意:\t这将重定向控制台输出和消息到串行端口，但仍然可以从内部视频卡/键盘访问控制台菜单。  %1$s调制解调器%2$s "
+"需要串行电缆或适配器才能使用串行控制台。"
 
 #: src/usr/local/www/system_advanced_admin.php:491
 msgid "Serial Speed"
@@ -26404,6 +26462,7 @@ msgid ""
 "also turn off NAT! To only disable NAT, and not firewall rules, visit the "
 "%3$sOutbound NAT%4$s page."
 msgstr ""
+"注意：这会将%1$s转换为仅限路由的平台！%2$s注意：这也将关闭NAT！ 要仅禁用NAT，而不是防火墙规则，请访问%3$s出站NAT%4$s 页面。"
 
 #: src/usr/local/www/system_advanced_firewall.php:434
 msgid "Disable Firewall Scrub"
@@ -26460,7 +26519,7 @@ msgstr "防火墙最大状态"
 msgid ""
 "Maximum number of connections to hold in the firewall state table. %1$sNote: "
 "Leave this blank for the default. On this system the default size is: %2$d"
-msgstr ""
+msgstr "在防火墙状态表中保持的最大连接数。%1$s注意：将此默认值留空。 在此系统上，默认大小为：%2$d"
 
 #: src/usr/local/www/system_advanced_firewall.php:482
 msgid "Firewall Maximum Table Entries"
@@ -26472,7 +26531,7 @@ msgid ""
 "Maximum number of table entries for systems such as aliases, sshlockout, "
 "snort, etc, combined.%1$sNote: Leave this blank for the default. On this "
 "system the default size is: %2$d"
-msgstr ""
+msgstr "系统的最大表条目数，例如别名，sshlockout，snort等，组合。%1$s注意：将此默认值留空。 在此系统上，默认大小为: %2$d"
 
 #: src/usr/local/www/system_advanced_firewall.php:494
 msgid "Firewall Maximum Fragment Entries"
@@ -26537,7 +26596,7 @@ msgstr "别名的主机名解析间隔"
 msgid ""
 "Interval, in seconds, that will be used to resolve hostnames configured on "
 "aliases. %1$sNote:\t Leave this blank for the default (300s)."
-msgstr ""
+msgstr "间隔，以秒为单位， 将用于解析在别名上配置的主机名。 %1$s注意:\t 默认值为(300秒)."
 
 #: src/usr/local/www/system_advanced_firewall.php:547
 msgid "Check certificate of aliases URLs"
@@ -26613,6 +26672,11 @@ msgid ""
 "%3$sIndividual rules may be configured to override this system setting on a "
 "per-rule basis."
 msgstr ""
+"%1$s纯NAT模式使用一组NAT规则直接将数据包转发到目标端口。 "
+"它具有更好的可扩展性，但是必须能够准确地确定在加载规则时用于与目标进行通信的接口和网关IP。 除了协议的限制之外，没有对端口数量的固有限制。 "
+"支持所有可用于端口转发的协议。%2$sNAT +代理模式使用帮助程序向端口转发的目标发送数据包。 它在设置中非常有用，其中用于与目标进行通信的接口和/"
+"或网关IP在加载规则时无法准确确定。 不为大于500个端口的范围创建映射规则，并且不会在超过1000个端口转发之间使用映射规则。 "
+"仅支持TCP和UDP协议。%3$s可以配置单个规则，以根据每个规则覆盖此系统设置。"
 
 #: src/usr/local/www/system_advanced_firewall.php:609
 msgid "Reflection Timeout"
@@ -26623,7 +26687,7 @@ msgstr "映射超时"
 msgid ""
 "Enter value for Reflection timeout in seconds.%1$sNote: Only applies to "
 "Reflection on port forwards in NAT + proxy mode."
-msgstr ""
+msgstr "输入映射超时的值（以秒为单位）。%1$s注意：仅适用于NAT +代理模式下端口转发的映射。"
 
 #: src/usr/local/www/system_advanced_firewall.php:618
 msgid "Enable NAT Reflection for 1:1 NAT"
@@ -27058,7 +27122,7 @@ msgstr "硬盘待机时间"
 msgid ""
 "Puts the hard disk into standby mode when the selected number of minutes has "
 "elapsed since the last access.%1$s%2$sDo not set this for CF cards.%3$s"
-msgstr ""
+msgstr "当自上次访问以来达到了所设置的时间，将硬盘置于待机模式。%1$s%2$s不要为CF卡设置此设置。%3$s"
 
 #: src/usr/local/www/system_advanced_misc.php:579
 msgid "Installation Feedback"
@@ -27123,6 +27187,8 @@ msgid ""
 "IPv4 routing infrastructures. IPv6 firewall rules are %1$salso required%2$s, "
 "to control and pass encapsulated traffic."
 msgstr ""
+"这些选项为IPv6数据包的IPv4 NAT封装创建了一个RFC 2893兼容机制，可用于通过IPv4路由基础设施对IPv6数据包进行隧道传输。 "
+"IPv6防火墙规则%1$s也需要 %2$s，以控制和传递封装的流量。"
 
 #: src/usr/local/www/system_advanced_network.php:200
 msgid "Prefer IPv4 over IPv6"
@@ -27157,6 +27223,10 @@ msgid ""
 "here otherwise the DUID will change on each reboot.%1$s%1$sYou may use the "
 "Copy DUID button to copy the system detected DUID shown in the placeholder. "
 msgstr ""
+"这是防火墙在请求IPv6地址时使用的DHCPv6唯一标识符（DUID）。 %1$s默认情况下，防火墙自动创建一个未保存在防火墙配置中的动态DUID。 "
+"要确保防火墙始终保留相同的DUID，请在此字段中输入DUID。 "
+"新的DUID将在重新启动或WAN接口被防火墙重新配置后生效。%1$s如果防火墙配置为使用RAM磁盘/ "
+"var，最佳做法是在这里存储一个DUID，否则DUID将在每次重新启动时更改。%1$s%1$s您可以使用“复制DUID按钮”复制占位符中显示的系统检测到的DUID。"
 
 #: src/usr/local/www/system_advanced_network.php:236
 msgid "Network Interfaces"
@@ -27175,6 +27245,8 @@ msgid ""
 "NICs. This will take effect after a machine reboot or re-configure of each "
 "interface."
 msgstr ""
+"选择此选项将禁用硬件校验和卸载。%1$s校验卸载在一些硬件，特别是一些Realtek卡损坏。 很少的驱动程序可能有校验和卸载和一些特定的NIC的问题。 "
+"这将在机器重新启动或重新配置每个接口后生效。"
 
 #: src/usr/local/www/system_advanced_network.php:251
 msgid "Hardware TCP Segmentation Offloading"
@@ -27414,51 +27486,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr "即使服务被标记为禁用，也将发送测试通知。"
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr "必须指定名称和值。"
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr "该值只能包含字母数字字符， - ，_，％和/。"
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr "防火墙的可调参数已改变。"
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr "注意："
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr "此页面上的选项只有高级用户才使用，新手最好不要改动配置文件。"
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr "参数名称"
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr "添加"
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr "编辑"
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr "删除/重置参数"
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr "编辑"
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr "*参数"
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr "*值"
 
@@ -27477,13 +27549,13 @@ msgstr "已删除认证服务器 %s。"
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27560,7 +27632,7 @@ msgstr "%s超时值必须为数字和正数。"
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr "认证服务器"
@@ -27571,8 +27643,8 @@ msgstr "认证服务器"
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27588,7 +27660,7 @@ msgstr "用户"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr "组"
@@ -27598,12 +27670,12 @@ msgid "Server Name"
 msgstr "服务器名称"
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr "编辑服务器 "
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr "删除服务器 "
 
@@ -27612,9 +27684,9 @@ msgid "Server Settings"
 msgstr "服务器设置"
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27696,6 +27768,8 @@ msgid ""
 "above or the full container path can be specified containing a dc= component."
 "%1$sExample: CN=Users;DC=example,DC=com or OU=Staff;OU=Freelancers"
 msgstr ""
+"注：半分离。 这将被添加到上面的搜索库dn，或者可以指定包含dc =component的完整容器路径。%1$sExample: CN=Users;DC="
+"example,DC=com or OU=Staff;OU=Freelancers"
 
 #: src/usr/local/www/system_authservers.php:608
 msgid "Select a container"
@@ -27833,331 +27907,331 @@ msgstr "创建内部的证书颁发机构"
 msgid "Create an intermediate Certificate Authority"
 msgstr "创建中间的证书颁发机构"
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr "证书颁发机构 %s 和它的CRL（如果有的话）已成功删除。"
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr "证书数据 "
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr "此证书似乎无效。"
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr "不支持加密的私钥。"
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr "提交的私钥与提交的证书数据不匹配。"
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr "密钥长度 "
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr "有效期"
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr "可分辨名称国家代码"
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr "可分辨名称州或省"
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr "可分辨名称城市"
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr "可分辨名称组织 "
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr "可分辨名称电邮地址 "
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr "可分辨名称通用名称"
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr "签名证书颁发机构"
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr "描述性名称包含无效字符。"
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr "字段“可分辨名称电子邮件地址”包含无效字符。"
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr "字段“可分辨名称通用名称”包含无效字符。"
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr "请选择有效的密钥长度"
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr "请选择有效的摘要算法。"
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr "证书管理 "
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr "CAs"
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr "证书 "
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr "证书撤销 "
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr "证书颁发机构"
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr "内部 "
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr "签发者 "
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr "可分辨名称"
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr "自签署 "
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr "外部 "
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr "有效期自"
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr "有效期至"
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr "IPsec隧道"
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr "LDAP服务器"
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr "编辑CA"
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr "导出CA"
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr "导出密钥 "
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr "删除 CA和CRL"
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr "创建/编辑CA"
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr "*方法"
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr "现有的证书颁发机构"
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr "*证书数据 "
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr "粘贴X.509 PEM格式的证书。 "
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr "证书私钥（可选）"
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr "在此处粘贴上述证书的私钥。 这在大多数情况下是可选的，但在生成证书吊销列表（CRL）时是必需的。"
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr "下一个证书的序列号"
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr "输入要使用此证书颁发机构创建的下一个证书的序列号的十进制数。"
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr "内部证书颁发机构"
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr "*签名证书颁发机构"
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr "*密钥长度（位）"
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr "*摘要算法"
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr "注意：如果可能，建议使用比SHA1更强的算法。"
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr "*有效期（天）"
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr "*国家代码"
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr "*州或省"
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr "*城市 "
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr "*组织 "
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr "组织单位"
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr "*邮件地址 "
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr "*通用名称 "
@@ -28174,185 +28248,185 @@ msgstr "创建内部证书 "
 msgid "Create a Certificate Signing Request"
 msgstr "创建证书签名请求 "
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr "选择现有证书 "
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr "证书 %s 已被成功删除。"
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr "密钥数据 "
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr "证书颁发机构"
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr "证书类型 "
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr "现有证书选择 "
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr "最终证书数据"
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr "证书模数与签名请求模数不匹配。"
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr "添加证书 "
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr "导入证书 "
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr "*私钥数据"
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr "在此处将私钥粘贴到X.509 PEM格式中。"
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr "内部证书 "
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr "没有定义内部证书颁发机构。"
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr "必须定义内部CA才能创建内部证书。"
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
-msgstr ""
+msgstr "%1$s创建%2$s内部CA。"
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr "*证书颁发机构"
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr "*密钥长度 "
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr "*证书类型 "
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr "要生成的证书类型。 用于对生成的证书的使用设置限制。"
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr "替代名称"
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr "FQDN或主机名"
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr "网址"
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr "邮件地址  "
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr "外部签名请求 "
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr "注意：如果可能，建议使用比SHA1更强的算法。 "
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr "选择一个现有的证书 "
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr "*现有证书 "
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr "完成签名请求"
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr "签名请求数据"
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr "从此处复制证书签名数据，并将其转发到证书颁发机构进行签名。"
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr "*最终证书数据"
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr "将从证书颁发机构收到的证书粘贴到此处。"
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr "仅私钥"
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr "外部 - 签名等候"
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr "用户证书"
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr "导出证书"
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr "导出密钥 "
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr "导出 p12"
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr "更新CSR "
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr "导出请求"
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr "删除证书"
 
@@ -28552,7 +28626,7 @@ msgid ""
 "Remember to use these Gateway Groups in firewall rules in order to enable "
 "load balancing, failover, or policy-based routing.%1$sWithout rules "
 "directing traffic into the Gateway Groups, they will not be used."
-msgstr ""
+msgstr "请记住在防火墙规则中使用这些网关组，以便启用负载平衡、故障转移或基于策略的路由。%1$s没有将通信定向到网关组的规则，不会使用它们。"
 
 #: src/usr/local/www/system_gateway_groups_edit.php:42
 msgid "Member Down"
@@ -28719,7 +28793,7 @@ msgstr "无法添加IPv4网关地址，因为在接口上找不到IPv4地址。"
 msgid ""
 "The gateway address %s does not lie within one of the chosen interface's "
 "subnets."
-msgstr ""
+msgstr "网关地址%s 不在选定接口的子网之一。"
 
 #: src/usr/local/www/system_gateways_edit.php:185
 msgid ""
@@ -28964,7 +29038,7 @@ msgstr "延迟阈值"
 #, php-format
 msgid ""
 "Low and high thresholds for latency in milliseconds. Default is %1$d/%2$d."
-msgstr ""
+msgstr "低延迟和高延迟阈值（以毫秒为单位）。 默认值为%1$d/%2$d."
 
 #: src/usr/local/www/system_gateways_edit.php:744
 msgid "Packet Loss thresholds"
@@ -28973,7 +29047,7 @@ msgstr "丢包阈值"
 #: src/usr/local/www/system_gateways_edit.php:759
 #, php-format
 msgid "Low and high thresholds for packet loss in %%. Default is %1$d/%2$d."
-msgstr ""
+msgstr "数据包丢失的低和高阈值 %%.。默认是 %1$d/%2$d."
 
 #: src/usr/local/www/system_gateways_edit.php:765
 msgid "Probe Interval"
@@ -29189,8 +29263,8 @@ msgstr "移至“非成员”"
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr "按住CTRL（PC）/ Command键（Mac）键来选择多个项目 "
 
@@ -29199,12 +29273,12 @@ msgid "Assigned Privileges"
 msgstr "分配权限 "
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr "添加权限 "
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr "分配权限 "
 
@@ -29213,22 +29287,22 @@ msgid "Add Privileges for "
 msgstr "添加权限 "
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr "*分配权限"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr "影子"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr "仅显示包含此术语的选项"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr "特权信息"
 
@@ -29240,12 +29314,12 @@ msgid ""
 msgstr "以下权限有效地为组中的用户提供管理员级别访问权限，因为用户可以访问执行常规命令，编辑系统文件，修改用户，更改密码或类似内容："
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr "请谨慎授予这些权限。"
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr "从上面的列表中选择一个权限作为描述"
 
@@ -29287,6 +29361,9 @@ msgid ""
 "of a failover group.%1$sClicking \"Save\" will force a configuration sync if "
 "it is enabled! (see Configuration Synchronization Settings below)"
 msgstr ""
+"每个防火墙使用PFSYNC协议（IP协议240）在指定的接口上通过组播发送这些消息。 "
+"它还会监听来自其他防火墙的类似消息的接口，并将它们导入本地状态表。%1$s应该在故障转移组的所有成员上启用此设置。%1$s点击“保存”将强制配置同步（如果已启用）！ "
+"（请参阅下面的配置同步设置）"
 
 #: src/usr/local/www/system_hasync.php:134
 msgid "Synchronize Interface"
@@ -29301,6 +29378,7 @@ msgid ""
 "machine participating in this failover group.%1$sAn IP must be assigned to "
 "the interface on any participating sync nodes."
 msgstr ""
+"如果启用了同步状态，此接口将用于通信。%1$s建议将此接口设置为LAN以外的接口！%1$s必须在参与此故障转移组的每台计算机上定义一个IP。%1$s必须为任何参与同步的接口分配一个IP。"
 
 #: src/usr/local/www/system_hasync.php:144
 msgid "pfsync Synchronize Peer IP"
@@ -29330,6 +29408,8 @@ msgid ""
 "not use the Synchronize Config to IP and password option on backup cluster "
 "members!"
 msgstr ""
+"输入所选配置部分应同步到的防火墙的IP地址。%1$s%1$sXMLRPC同步目前仅支持使用与此系统相同的协议和端口的连接 - "
+"确保远程系统的端口和协议进行了相应的设置！%1$s不要在备份集群成员上使用“同步配置到IP和用户名”选项！"
 
 #: src/usr/local/www/system_hasync.php:166
 msgid "Remote System Username"
@@ -29341,7 +29421,7 @@ msgid ""
 "Enter the webConfigurator username of the system entered above for "
 "synchronizing the configuration.%1$sDo not use the Synchronize Config to IP "
 "and username option on backup cluster members!"
-msgstr ""
+msgstr "输入用于同步配置的系统的配置器用户名。%1$s不要在备份集群成员上使用“同步配置到IP和用户名”选项！"
 
 #: src/usr/local/www/system_hasync.php:174
 msgid "Remote System Password"
@@ -29353,7 +29433,7 @@ msgid ""
 "Enter the webConfigurator password of the system entered above for "
 "synchronizing the configuration.%1$sDo not use the Synchronize Config to IP "
 "and password option on backup cluster members!"
-msgstr ""
+msgstr "输入用于同步配置系统的web配置器密码。%1$s不要在备份集群成员上使用“同步配置到IP和用户名”选项！"
 
 #: src/usr/local/www/system_hasync.php:180
 msgid "Select options to sync"
@@ -29541,7 +29621,7 @@ msgstr "*网关"
 #, php-format
 msgid ""
 "Choose which gateway this route applies to or %1$sadd a new one first%2$s"
-msgstr ""
+msgstr "选择此路由适用于哪个网关或%1$s添加一个新的%2$s"
 
 #: src/usr/local/www/system_routes_edit.php:270
 msgid ""
@@ -29566,7 +29646,7 @@ msgstr "*分支"
 msgid ""
 "Please select the stable, or the development branch from which to update the "
 "system firmware. %1$sUse of the development version is at your own risk!"
-msgstr ""
+msgstr "请选择稳定版或更新系统固件的开发版本。  %1$s使用开发版本自行承担风险！"
 
 #: src/usr/local/www/system_update_settings.php:165
 msgid "Updates"
@@ -29609,7 +29689,7 @@ msgstr "分支名称"
 msgid ""
 "The most recently used branch was \"%1$s\". (Usually the branch name is "
 "master)%2$sNote: Sync will not be performed if a branch is not specified."
-msgstr ""
+msgstr "最近使用的版本是\"%1$s\"。 （通常分支名称为master）%2$s注意：如果未指定版本，则不会执行同步。"
 
 #: src/usr/local/www/system_update_settings.php:223
 msgid "Sync options"
@@ -29626,17 +29706,17 @@ msgstr "仅复制不同或缺少的文件。"
 #: src/usr/local/www/system_update_settings.php:244
 #, php-format
 msgid "Show different and missing files.%1$sWith 'Diff/Minimal' option.."
-msgstr ""
+msgstr "显示不同和缺少的文件。%1$s使用“Diff / Minimal”选项。"
 
 #: src/usr/local/www/system_update_settings.php:251
 #, php-format
 msgid "Show constructed command.%1$sWith 'Diff/Minimal' option."
-msgstr ""
+msgstr "显示组成命令。%1$s使用“Diff / Minimal”选项。"
 
 #: src/usr/local/www/system_update_settings.php:258
 #, php-format
 msgid "Dry-run only.%1$sNo files copied."
-msgstr ""
+msgstr "Dry-仅运行。%1$s没有复制文件。"
 
 #: src/usr/local/www/system_update_settings.php:260
 msgid ""
@@ -29843,6 +29923,8 @@ msgid ""
 "noticeable). As of 2016, 2048 bit is the minimum and most common selection "
 "and 4096 is the maximum in common use. For more information see %1$s."
 msgstr ""
+"密钥越大，其提供的安全性越高，但是更大的密钥需要更多的时间来生成，并且需要更长的时间来验证。 "
+"截至2016年，2048位是最小的选择，4096位使用最多。更多信息请参阅 %1$s。"
 
 #: src/usr/local/www/system_usermanager.php:932
 msgid "Keys"
@@ -29864,18 +29946,18 @@ msgstr "为这个用户输入认证的SSH密钥"
 msgid "IPsec Pre-Shared Key"
 msgstr "IPsec的预共享密钥"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr "用户权限"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr "以下权限实际为用户提供了管理员级访问，因为用户可以访问执行常规命令，编辑系统文件，修改用户，更改密码或类似操作："
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr "（此权限实际向用户提供了管理员级别的访问权限）"
@@ -30412,9 +30494,9 @@ msgid ""
 msgstr "注意：对于iPhone客户端，通过iPhone配置实用程序部署时，仅通过手动输入无法使用。"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr "DNS默认域 "
 
@@ -30705,8 +30787,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr "选择以前在证书管理器中配置的证书。"
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30723,8 +30805,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr "Phase 1建议（算法）"
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr "*加密算法"
 
@@ -31007,36 +31089,33 @@ msgid "Configure Unique IDs as"
 msgstr "配置特定ID"
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
-"是否特定的参与者ID应该保持唯一，任何新的IKE_SA使用ID被视为替换使用该ID的所有旧ID。 "
-"参与者ID通常是唯一的，因此使用相同ID的新IKE_SA几乎总是打算替换旧的。 <b>no</b> and <b>never</b> "
-"之间的区别是，当接收到初始联系通知时，如果选项为no，则旧的IKE_SAs将被替换；如果选择<b>never</b>，将忽略这些通知。 选择 "
-"<b>keep</b>，将拒绝新的IKE_SA设置，并保留先前建立的副本。 默认为\"YES\"。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr "IP 压缩"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr "在连接上建议IPComp压缩内容。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr "严格的接口绑定"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
@@ -31044,11 +31123,11 @@ msgid ""
 msgstr ""
 "启用strongSwan interfaces_use选项仅绑定特定接口。 已知此选项会中断具有动态IP接口的IPsec，不建议进行此类操作。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr "IKEv1主模式下未加密的有效负载"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -31062,46 +31141,46 @@ msgstr ""
 "这与攻击模式非常相似，并且具有相同的安全含义：被动攻击者可以嗅探协商的身份，并使用HASH有效载荷开始暴力强制PSK。 "
 "建议不勾选此设置，除非知道确切的含义，并且这些类设备还必须兼容此项设置（例如某些SonicWall盒）。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr "启用最大MSS"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr "最大的MSS "
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr "启用MSS限制TCP流量通过VPN，这有助于克服PMTUD在IPsec VPN链路上的问题。如果留空，则默认值是1400字节。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr "启用Cisco扩展"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr "启用Unity插件，它提供Cisco扩展支持，如Split-Include, Split-Exclude 和 Split-Dns。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr "严格的CRL检查"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr "基于RSA签名对等认证成功新的CRL检查这些要求的可用性。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr "先通后断"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -31112,11 +31191,11 @@ msgstr ""
 "先通后断在重新认证期间使用重叠的IKE和CHILD_SA，首先在删除旧的SA之前重新创建所有新的SA。 "
 "此行为可有益于避免重新认证期间的连接间隙，但需要对等体支持重叠的SA。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr "自动排除LAN地址"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr "从LAN子网将流量排除到IPsec的LAN IP地址。"
 
@@ -31151,14 +31230,13 @@ msgid "*Server address"
 msgstr "*服务器地址"
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
-"输入L2TP服务器应提供给客户端用作其“网关”的IP地址。 <br />通常设置为在客户端范围之外的未使用的IP。<br /> <br /"
-">注意：这不应设置为此防火墙上当前使用的任何IP地址。"
 
 #: src/usr/local/www/vpn_l2tp.php:227
 msgid "*Remote address range"
@@ -31339,7 +31417,7 @@ msgstr "所选NCP算法中的一个或多个无效。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr "共享密钥 "
 
@@ -31380,12 +31458,12 @@ msgstr "*设备模式"
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
-"“tun”模式携带IPv4和IPv6（OSI第3层），是所有平台中最常见和兼容的模式。<br/>“tap”模式能够承载802.3（OSI第2层）"
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
 msgid ""
@@ -31435,10 +31513,11 @@ msgid "Proxy host or address"
 msgstr "代理主机或地址 "
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
-msgstr "此客户端可用于连接到远程服务器的HTTP代理的地址。<br/>客户端和服务器必须使用TCP协议。"
+"server.%1$sTCP must be used for the client and server protocol."
+msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
 msgid "Proxy port"
@@ -31501,130 +31580,152 @@ msgstr "*TLS 密钥"
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
-msgstr "在此处粘贴TLS密钥<br/>该密钥用于在建立隧道时对具有HMAC签名的控制信道分组进行签名以进行认证。"
+msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr "*TLS密钥使用模式"
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
-msgstr "在认证模式下，TLS密钥仅用作控制信道的HMAC认证，保护对等体免受未经授权的连接。<br/>加密和认证模式还加密控制信道通信。"
+msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr "对等证书吊销列表"
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr "自动生成"
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr "*共享密钥"
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr "在此处粘贴共享密钥"
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr "客户端证书 "
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr "当可协商加密参数（NCP）支持时，用于数据信道分组的加密算法不可用。"
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr "启用 NCP（指Negotiable Cryptographic Parameter，即可协商加密参数）"
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
-"选中此选项可允许OpenVPN客户端和服务器从下面NCP算法列表中选择的协议中协商一组兼容的可接受加密算法<div class="
-"\"infoblock\">"
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr "NCP算法"
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
-msgstr "可用的NCP加密算法<br />单击从列表中添加或删除算法"
+msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr "允许的NCP加密算法。 单击算法名称将其从列表中删除"
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
-msgstr "所选的NCP加密算法的顺序由OpenVPN遵守。<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
+msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr "*认证摘要算法"
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
-"用于验证数据通道数据包的算法，以及如果存在TLS密钥，则控制通道分组。<br />当使用AEAD加密算法模式（例如AES-"
-"GCM）时，此摘要仅用于控制通道，而不是数据通道。<br />将此集设置为SHA1，除非服务器使用不同的值。 SHA1是OpenVPN的默认值。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr "硬件加密"
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr "隧道设置 "
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr "IPv4 隧道网络"
 
@@ -31637,8 +31738,8 @@ msgstr ""
 "这是用于在此客户端和服务器之间的私有通信使用CIDR（例如10.0.8.0/24）表示的IPv4虚拟网络。 第二个网络地址将被分配给客户端虚拟接口。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr "IPv6 隧道网络"
 
@@ -31651,12 +31752,12 @@ msgstr ""
 "这是用于此客户端和服务器之间的私有通信使用CIDR（例如fe80 :: / 64）表示的IPv6虚拟网络。 第二个网络地址将被分配给客户端虚拟接口。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr "IPv4远程网络"
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31668,12 +31769,12 @@ msgstr ""
 "如果这是站点到站点VPN，请在此输入远程LAN。 对于非站点到站点VPN，可以留空。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr "IPv6远程网络"
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31696,7 +31797,7 @@ msgid ""
 msgstr "这个隧道的最大输出带宽。 留空为无限制。 输入值必须介于100 b/秒 和100 Mb/秒之间（以字节/秒输入）。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31704,7 +31805,7 @@ msgid ""
 msgstr "使用LZO算法压缩隧道报文。 如果OpenVPN检测到分组中的数据没有被有效地压缩，自适应压缩将动态禁用压缩一段时间。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr "拓扑"
 
@@ -31713,7 +31814,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr "指定用于配置虚拟适配器IP地址的方法。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr "服务类型 "
 
@@ -31742,23 +31843,21 @@ msgid ""
 msgstr "输入要添加到OpenVPN客户端配置的任何其他选项，以分号分隔。"
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr "信息级别"
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
-"每个级别显示来自上一级别的所有信息。 建议使用级别3，以便对发生的情况进行良好的总结，而不会被过多的信息淹没<br /><br />None:"
-"只显示致命错误<br />默认值为4：正常使用范围<br />5: 对于每个数据包读取和写入，将R和W字符输出到控制台。 大写用于TCP / "
-"UDP数据包，小写用于TUN / TAP数据包。<br />6-11:调试信息范围"
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
 msgid "OpenVPN Clients"
@@ -31860,127 +31959,120 @@ msgid ""
 msgstr "阻止客户端连接到此服务器。 不要使用此选项由于密钥或密码泄露而永久禁用客户端。 请改用CRL（证书吊销列表）。"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
-"用于此客户端和服务器之间的私有通信的虚拟IPv4网络使用CIDR表示（例如10.0.8.5/24）。<br /"
-">使用子网拓扑时，输入客户端IP地址，并且子网掩码必须与服务器上的IPv4隧道网络匹配。 <br />使用net30拓扑，假设/ "
-"30的第一个网络地址是服务器地址，而第二个网络地址将被分配给客户端。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
-"用于此客户端和服务器之间的私有通信的虚拟IPv6网络使用前缀(例如 2001:db9:1:1::100/64)。<br /"
-">输入客户端IPv6地址和前缀。 前缀必须与服务器上的IPv6隧道网络前缀相匹配。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr "IPv4本地网络"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
-"这些是可以从此特定客户端访问的IPv4服务器端网络。 表示为一个或多个CIDR网络的逗号分隔列表。<br /"
-">注意：如果已在主服务器配置上定义了网络，则无需在此处指定网络。"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:395
 msgid "IPv6 Local Network/s"
 msgstr "IPv6本地网络"
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
-"这些是可以从此特定客户端访问的IPv6服务器端网络。 表示为一个或多个IP / PREFIX网络的逗号分隔列表。<br /"
-">注意：如果已在主服务器配置上定义了网络，则无需在此处指定网络。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr "IPv4远程网络"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
-"这些是IPv4客户端网络，将使用iroute路由到此客户端，以便可以建立站点到站点VPN。 表示为一个或多个CIDR范围的逗号分隔列表。 "
-"如果没有要路由的客户端网络，可以留空。<br />注意：请记住将这些子网添加到相应OpenVPN服务器设置上的IPv4远程网络列表中。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr "IPv6远程网络"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
-"这些是IPv6客户端网络，将使用iroute路由到此客户端，以便可以建立站点到站点VPN。 表示为一个或多个IP / PREFIX网络的逗号分隔列表。 "
-"如果没有要路由的客户端网络，可以留空。<br />注意：请记住将这些子网添加到相应OpenVPN服务器设置上的IPv6远程网络列表。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr "重定向网关 "
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr "客户端设置 "
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr "服务器定义 "
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr "DNS域"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr "服务器 4"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr "NetBIOS选项"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr "如果未设置此选项，则将禁用所有NetBIOS over TCP / IP选项（包括WINS）。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr "节点类型"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
@@ -31988,7 +32080,7 @@ msgid ""
 msgstr ""
 "可能的选项：b节点（广播），p节点（到WINS服务器的点对点名称查询），m节点（广播然后查询名称服务器）和h节点（查询名称服务器，然后广播） 。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
@@ -31997,23 +32089,23 @@ msgstr ""
 "NetBIOS范围ID通过TCP / IP为NetBIOS提供扩展的命名服务。 "
 "NetBIOS范围ID将单个网络上的NetBIOS流量仅隔离到具有相同NetBIOS范围ID的那些节点。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
-"输入要为此客户端特定覆盖添加的任何其他选项，以分号分隔。 <br />示例：push“route 10.0.0.0 255.255.255.0”;"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr "CSC覆盖"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr "编辑CSC 覆盖"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr "删除CSC 覆盖"
 
@@ -32109,7 +32201,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr "OpenVPN用于接收客户端连接的端口。"
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -32132,60 +32224,80 @@ msgstr "*服务器证书"
 msgid "*DH Parameter Length"
 msgstr "*DH参数长度"
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
+msgid ""
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
-msgstr "用于密钥交换的Diffie-Hellman（DH）参数集。<div class=\"infoblock\">"
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr "ECDH曲线"
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
-msgstr "椭圆曲线用于密钥交换。 <br/>服务器使用ECDSA证书时，默认使用服务器证书的曲线。 否则，secp384r1用作后备。"
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
-"用于验证数据信道分组的算法，以及如果存在TLS密钥，则控制信道分组。<br />当使用AEAD加密算法模式（如AES-"
-"GCM）时，此摘要仅用于控制信道，而不是 数据通道。<br />将此集设置为SHA1，除非所有客户端都设置为匹配。 SHA1是OpenVPN的默认值。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr "不检查"
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr "*证书深度"
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr "基于证书的客户端登录时，不接受这个深度以下的证书。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr "严格的用户-CN匹配"
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr "在验证用户时，强制在客户端证书的通用名称和登录时提供的用户名之间匹配。 "
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -32196,7 +32308,7 @@ msgstr ""
 "这是用于此服务器和客户端主机之间的私有通信的IPv4虚拟网络，使用CIDR（例如10.0.8.0/24）表示。 第一个网络地址将被分配给服务器虚拟接口。 "
 "可以选择将其余网络地址分配给连接的客户端（请参阅地址池）。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -32207,15 +32319,15 @@ msgstr ""
 "这是用于此服务器和客户端主机之间的私有通信的IPv6虚拟网络，使用CIDR（例如fe80 :: / 64）表示。 "
 "第一个网络地址将被分配给服务器虚拟接口。 可以选择将其余网络地址分配给连接的客户端（请参阅地址池）。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr "桥接DHCP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr "桥接接口"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -32226,11 +32338,11 @@ msgstr ""
 "将桥接此TAP实例的接口。 这不是自动完成的。 必须分配此接口并分别创建桥接。 此设置控制OpenVPN为网桥使用的现有IP地址和子网掩码。 "
 "将此设置为“none”将导致下面的服务器网桥DHCP设置被忽略。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr "服务器网桥DHCP开始"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -32240,15 +32352,15 @@ msgstr ""
 "当使用TAP模式作为多点服务器时，可以可选地提供DHCP范围以在该TAP实例所桥接的接口上使用。 "
 "如果这些设置保留为空，DHCP将传递到LAN，并且上面的接口设置将被忽略。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr "服务器网桥DHCP结束"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr "IPv4本地网络"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -32258,11 +32370,11 @@ msgstr ""
 "可以从远程端点访问的IPv4网络。 表示为一个或多个CIDR范围的逗号分隔列表。 如果未在远程计算机上通过此隧道将路由添加到本地网络，则可以将其留空。 "
 "这通常设置为LAN网络。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr "IPv6本地网络"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -32272,82 +32384,80 @@ msgstr ""
 "IPv6网络，可以从远程端点访问。 表示为一个或多个IP / PREFIX的逗号分隔列表。 "
 "如果未在远程计算机上通过此隧道将路由添加到本地网络，则可以将其留空。 这通常设置为LAN网络。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr "并发连接 "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr "指定允许并发连接到此服务器的最大客户端数。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr "推压"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr "客户端间通信 "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr "重复连接"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr "（这通常不推荐，但在某些情况下可能需要）。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr "动态IP "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr "地址池"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
-"指定在IPv4上使用TUN模式时，为客户端提供虚拟适配器IP地址的方法。<br /"
-">某些客户端可能会要求将其设置为“子网”，即使对于IPv6，例如OpenVPN Connect（iOS / Android）。 "
-"旧版本的OpenVPN（2.0.9之前）或客户端（如Yealink手机）可能需要“net30”。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr "高级客户端设置"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr "启用DNS服务器"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr "DNS 服务器 1"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr "DNS 服务器 2"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr "DNS 服务器 3"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr "DNS 服务器 4"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr "阻止外部DNS"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
@@ -32356,29 +32466,29 @@ msgstr ""
 "需要Windows 10和OpenVPN 2.3.9或更高版本。 只有Windows "
 "10以这种方式容易发生DNS泄漏，其他客户端将忽略该选项，因为它们不受影响。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr "强制DNS缓存更新"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr "这会使Windows进入识别推送的DNS服务器。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr "启动NTP服务器"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr "启动 NetBIOS"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr "如果未设置此选项，则将禁用所有NetBIOS over TCP / IP选项（包括WINS）。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
@@ -32386,11 +32496,11 @@ msgid ""
 msgstr ""
 "可能的选择：B-节点（广播），P-节点（点至点名称查询WINS服务器），M-节点（广播，然后查询名称服务器），H-节点（查询名称服务器，然后播出） "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr "范围 ID"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
@@ -32399,53 +32509,53 @@ msgstr ""
 "NetBIOS范围ID通过TCP / IP为NetBIOS提供扩展的命名服务。 "
 "NetBIOS范围ID将单个网络上的NetBIOS流量仅隔离到具有相同NetBIOS范围ID的那些节点"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr "启用WINS 服务器"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr "WINS 服务器 1"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr "WINS 服务器 2"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr "启用自定义端口"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr "管理端口"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr "默认端口为166，如果客户端计算机需要从多个OpenVPN链路中选择，请指定不同的端口。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
-"输入要添加到OpenVPN服务器配置的任何其他选项，以分号分隔。<br />示例：push“route 10.0.0.0 255.255.255.0”"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr "OpenVPN 服务器"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr "协议/端口 "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr "隧道网络 "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr "加密硬件"
 
@@ -34538,7 +34648,7 @@ msgstr "将网关标记为关闭"
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr "<span class=\"help-block\">"
 
@@ -34693,8 +34803,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr "允许客户端保存扩展认证(XAuth)密码（仅Cisco VPN客户端）。 "
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr "为客户端提供默认域名"
 
@@ -34705,13 +34815,13 @@ msgid ""
 msgstr "向客户端提供拆分的DNS域名列表。 输入空格分隔列表。"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr "向客户端提供DNS服务器列表"
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr "向客户提供WINS服务器列表 "
 
@@ -34761,35 +34871,35 @@ msgstr "启用DPD "
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr "禁用此phase 2条目，而不从列表中删除它。"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr "启用IP压缩"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr "启用严格的接口绑定"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr "在IKEv1主模式下接受未加密的ID和HASH有效内容"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr "启用 MSS 限制 VPN流量 "
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr "启用统一插件"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr "启用严格的证书吊销列表检查"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr "使用先断后启动IKEv2重新认证"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr "为LAN接口IP启用旁路"
 
@@ -34823,18 +34933,18 @@ msgstr "用一个TLS密钥"
 msgid "Automatically generate a TLS Key."
 msgstr "自动生成TLS密钥。"
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr "自动生成一个共享密钥 "
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr "启用可协商的加密参数"
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34856,23 +34966,23 @@ msgstr "禁用此覆盖 "
 msgid "Block this client connection based on its common name."
 msgstr "基于其公用名称阻止此客户端连接。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr "强制所有客户端生成的流量通过隧道。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr "防止此客户端接收任何服务器定义的客户端设置。"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr "向客户端提供NTP服务器列表"
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "启用TCP / IP上的NetBIOS "
 
@@ -34880,49 +34990,49 @@ msgstr "启用TCP / IP上的NetBIOS "
 msgid "Disable this server"
 msgstr "禁用此服务器"
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr "强制匹配"
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr "允许网桥上的客户端获取DHCP。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr "将所选的“压缩”设置推送到连接的客户端。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr "允许连接到该服务器的客户机之间的通信。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr "允许来自使用相同通用名称的客户端的多个并发连接。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr "允许连接的客户端在IP地址更改时保留其连接。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr "向客户端提供虚拟适配器IP地址（请参阅隧道网络）。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr "向客户端提供DNS服务器列表。 地址可以是IPv4或IPv6。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr "使Windows 10客户端在连接时阻止对除OpenVPN之外的DNS服务器的访问，强制客户端仅使用VPN DNS服务器。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
@@ -34930,6 +35040,6 @@ msgstr ""
 "在连接启动时运行“net stop dnscache”，“net start dnscache”，“ipconfig / "
 "flushdns”和“ipconfig / registerdns”。"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr "为客户端使用不同的管理端口。"
diff --git a/src/usr/local/share/locale/zh_TW/LC_MESSAGES/pfSense.mo b/src/usr/local/share/locale/zh_TW/LC_MESSAGES/pfSense.mo
index c717106..84147dc 100644
--- a/src/usr/local/share/locale/zh_TW/LC_MESSAGES/pfSense.mo
+++ b/src/usr/local/share/locale/zh_TW/LC_MESSAGES/pfSense.mo
diff --git a/src/usr/local/share/locale/zh_TW/LC_MESSAGES/pfSense.po b/src/usr/local/share/locale/zh_TW/LC_MESSAGES/pfSense.po
index d980842..4704858 100644
--- a/src/usr/local/share/locale/zh_TW/LC_MESSAGES/pfSense.po
+++ b/src/usr/local/share/locale/zh_TW/LC_MESSAGES/pfSense.po
@@ -3,11 +3,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-02-09 09:00-0200\n"
+"POT-Creation-Date: 2017-02-10 09:21-0200\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-02-08 08:33-0500\n"
+"PO-Revision-Date: 2017-02-09 09:30-0500\n"
 "Last-Translator: DerliangHuang <derliang@gmail.com>\n"
 "Language-Team: Chinese (Taiwan)\n"
 "Language: zh-TW\n"
@@ -20,6 +20,8 @@ msgid ""
 "DNS_rebinding<br />Try accessing the router by IP address instead of by "
 "hostname."
 msgstr ""
+"檢測到潛在的DNS重新綁定攻擊，請參閱http://en.wikipedia.org/wiki/DNS_rebinding <br /"
+">嘗試通過IP位址而不是主機名稱存取路由器。"
 
 #: src/etc/inc/auth.inc:114 src/etc/inc/captiveportal.inc:267
 msgid "Redirecting..."
@@ -61,58 +63,58 @@ msgstr "錯誤！ ldap_get_user_ous（）選擇時未定義LDAP認證伺服器�
 #: src/etc/inc/auth.inc:1003
 #, php-format
 msgid "ERROR! ldap_get_user_ous() could not STARTTLS to server %s."
-msgstr "錯誤！ldap_get_user_ous() 無法STARTTLS到伺服器％s."
+msgstr "錯誤! ldap_get_user_ous() 不能啟動TLS伺服器 %s."
 
 #: src/etc/inc/auth.inc:1013
 #, php-format
 msgid "ERROR! ldap_get_user_ous() could not bind anonymously to server %s."
-msgstr ""
+msgstr "錯誤！ ldap_get_user_ous（）無法匿名綁定到伺服器 %s。"
 
 #: src/etc/inc/auth.inc:1018
 #, php-format
 msgid "ERROR! ldap_get_user_ous() could not bind to server %s."
-msgstr ""
+msgstr "錯誤！ ldap_get_user_ous（）無法綁定到伺服器 %s。"
 
 #: src/etc/inc/auth.inc:1134
 #, php-format
 msgid "ERROR! ldap_get_groups() Could not connect to server %s."
-msgstr ""
+msgstr "錯誤！ ldap_get_groups（）無法連接到伺服器 %s。"
 
 #: src/etc/inc/auth.inc:1146
 #, php-format
 msgid "ERROR! ldap_get_groups() could not STARTTLS to server %s."
-msgstr ""
+msgstr "錯誤! ldap_get_groups() 不能啟動TLS伺服器%s。"
 
 #: src/etc/inc/auth.inc:1157
 #, php-format
 msgid "ERROR! ldap_get_groups() could not bind anonymously to server %s."
-msgstr ""
+msgstr "錯誤！ ldap_get_groups（）無法匿名綁定到伺服器 %s。"
 
 #: src/etc/inc/auth.inc:1162
 #, php-format
 msgid "ERROR! ldap_get_groups() could not bind to server %s."
-msgstr ""
+msgstr "錯誤！ ldap_get_groups（）無法綁定到伺服器 %s。"
 
 #: src/etc/inc/auth.inc:1268
 msgid ""
 "ERROR! ldap_backed() called with no LDAP authentication server defined.  "
 "Defaulting to local user database. Visit System -> User Manager."
-msgstr ""
+msgstr "錯誤！ ldap_backed（）調用時未定義LDAP認證伺服器。 預設為本地使用者資料庫。 訪問系統 - >使用者管理器。"
 
 #: src/etc/inc/auth.inc:1271
 msgid ""
 "ERROR! ldap_backed() called with no LDAP authentication server defined."
-msgstr ""
+msgstr "錯誤！ ldap_backed（）調用時未定義LDAP認證伺服器。"
 
 #: src/etc/inc/auth.inc:1294
 #, php-format
 msgid "ERROR! ldap_backed() could not STARTTLS to server %s."
-msgstr ""
+msgstr "錯誤! ldap_backed() 不能啟動TLS伺服器%s。"
 
 #: src/etc/inc/auth.inc:1319
 #, php-format
 msgid "ERROR! Could not bind to server %s."
-msgstr ""
+msgstr "錯誤!無法綁定伺服器 %s."
 
 #: src/etc/inc/auth.inc:1337
 #, php-format
@@ -122,26 +124,26 @@ msgstr "正在目錄中搜尋%s."
 #: src/etc/inc/auth.inc:1346
 #, php-format
 msgid "Now Searching in server %1$s, container %2$s with filter %3$s."
-msgstr ""
+msgstr "正在伺服器%1$s中搜尋,容器%2$s篩選器%3$s."
 
 #: src/etc/inc/auth.inc:1360
 #, php-format
 msgid "Search resulted in error: %s"
-msgstr ""
+msgstr "搜尋結果錯誤:%s"
 
 #: src/etc/inc/auth.inc:1376
 msgid "ERROR! Either LDAP search failed, or multiple users were found."
-msgstr ""
+msgstr "錯誤！ LDAP搜尋失敗，或找到多個使用者。"
 
 #: src/etc/inc/auth.inc:1383
 #, php-format
 msgid "ERROR! Could not login to server %1$s as user %2$s: %3$s"
-msgstr ""
+msgstr "錯誤！ 無法以使用者%2$s: %3$s的身份登入伺服器%1$s"
 
 #: src/etc/inc/auth.inc:1390
 #, php-format
 msgid "Logged in successfully as %1$s via LDAP server %2$s with DN = %3$s."
-msgstr ""
+msgstr "成功登入%1$s，通過 LDAP伺服器 %2$s， DN = %3$s."
 
 #: src/etc/inc/auth.inc:1465
 #, php-format
@@ -240,6 +242,7 @@ msgid ""
 "is unexpected, it should be verified that a man-in-the-middle attack is not "
 "taking place."
 msgstr ""
+"用於訪問此路由器的IP位址不是本地配置的，可以通過NAT或其他方式轉發。 <br /> <br />如果此轉發是意外的，應該驗證沒有發生中間人攻擊。"
 
 #: src/etc/inc/authgui.inc:264
 msgid "The browser must support cookies to login."
@@ -377,7 +380,7 @@ msgid ""
 "If VLANs will not be used, or only for optional interfaces, it is typical to\n"
 "say no here and use the webConfigurator to configure VLANs later, if "
 "required."
-msgstr ""
+msgstr "如果不使用VLAN，或僅用於可選網路介面介面，則通常不使用，可以在web配置器稍後配置VLAN。"
 
 #: src/etc/inc/config.console.inc:85
 msgid "Should VLANs be set up now [y|n]?"
@@ -414,14 +417,14 @@ msgstr ""
 #: src/etc/inc/config.console.inc:170
 #, php-format
 msgid "%1$sOptional interface %2$s description found: %3$s"
-msgstr ""
+msgstr "%1$s可選擇的網路介面 %2$s 找到的說明: %3$s"
 
 #: src/etc/inc/config.console.inc:173
 #, php-format
 msgid ""
 "%1$sEnter the Optional %2$s interface name or 'a' for auto-"
 "detection%3$s(%4$s a or nothing if finished):%5$s"
-msgstr ""
+msgstr "%1$s輸入可選擇的 %2$s 網路介面名稱 或按 'a' 自動偵測%3$s(%4$s 按a 或如果已完成則不需做任何動作):%5$s"
 
 #: src/etc/inc/config.console.inc:180
 msgid "Optional"
@@ -483,11 +486,11 @@ msgstr "警告: 如果您繼續操作，所有已存在之VLAN將會被清除!"
 
 #: src/etc/inc/config.console.inc:434
 msgid "VLAN Capable interfaces:"
-msgstr ""
+msgstr "VLAN Capable 網路介面:"
 
 #: src/etc/inc/config.console.inc:449
 msgid "No VLAN capable interfaces detected."
-msgstr ""
+msgstr "未偵測到 VLAN capable 網路介面."
 
 #: src/etc/inc/config.console.inc:453
 msgid ""
@@ -575,11 +578,11 @@ msgstr "找不到可用的設定檔!退出中...."
 #: src/etc/inc/config.lib.inc:323
 #, php-format
 msgid "Start Configuration upgrade at %s, set execution timeout to 15 minutes"
-msgstr ""
+msgstr "在 %s開始升級組態, 設定逾時時間為15分鐘"
 
 #: src/etc/inc/config.lib.inc:334 src/etc/inc/config.lib.inc:335
 msgid "Updated bogon update frequency to 3am"
-msgstr ""
+msgstr "將更新bogon更新頻率為 3am"
 
 #: src/etc/inc/config.lib.inc:371
 #, php-format
@@ -1882,8 +1885,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:63
 #: src/usr/local/www/status_openvpn.php:236
 #: src/usr/local/www/status_openvpn.php:296
-#: src/usr/local/www/system_camanager.php:364
-#: src/usr/local/www/system_certmanager.php:953
+#: src/usr/local/www/system_camanager.php:360
+#: src/usr/local/www/system_certmanager.php:945
 #: src/usr/local/www/system_crlmanager.php:583
 #: src/usr/local/www/system_gateways.php:257
 #: src/usr/local/www/system_gateways_edit.php:109
@@ -2367,7 +2370,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_network.php:156
 #: src/usr/local/www/system_advanced_notifications.php:209
-#: src/usr/local/www/system_advanced_sysctl.php:144
+#: src/usr/local/www/system_advanced_sysctl.php:138
 msgid "Networking"
 msgstr ""
 
@@ -2439,7 +2442,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_host_edit.php:78
 #: src/usr/local/www/status_captiveportal.php:192
 #: src/usr/local/www/status_dhcp_leases.php:352
-#: src/usr/local/www/system_certmanager.php:744
+#: src/usr/local/www/system_certmanager.php:735
 #: src/usr/local/www/vpn_l2tp_users.php:96
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:82
 msgid "IP address"
@@ -2843,13 +2846,13 @@ msgstr ""
 msgid "CA: %s"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:369
-#: src/usr/local/www/system_certmanager.php:956
+#: src/etc/inc/openvpn.inc:246 src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_certmanager.php:948
 #: src/usr/local/www/system_crlmanager.php:586
 msgid "In Use"
 msgstr ""
 
-#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1026
+#: src/etc/inc/openvpn.inc:249 src/usr/local/www/system_certmanager.php:1018
 msgid "Revoked"
 msgstr ""
 
@@ -5525,7 +5528,7 @@ msgstr ""
 #: src/usr/local/www/status_captiveportal_test.php:57
 #: src/usr/local/www/status_captiveportal_voucher_rolls.php:57
 #: src/usr/local/www/status_captiveportal_vouchers.php:57
-#: src/usr/local/www/system_certmanager.php:1044
+#: src/usr/local/www/system_certmanager.php:1036
 msgid "Captive Portal"
 msgstr ""
 
@@ -5601,7 +5604,7 @@ msgstr "已停止"
 #: src/usr/local/www/vpn_ipsec_phase1.php:655
 #: src/usr/local/www/vpn_ipsec_phase2.php:499
 #: src/usr/local/www/vpn_openvpn_client.php:488
-#: src/usr/local/www/vpn_openvpn_csc.php:658
+#: src/usr/local/www/vpn_openvpn_csc.php:662
 #: src/usr/local/www/vpn_openvpn_server.php:673
 msgid "Disabled"
 msgstr "停用"
@@ -5639,12 +5642,12 @@ msgstr "%s 已啟用."
 #: src/etc/inc/service-utils.inc:693
 #, php-format
 msgid "%s has been stopped."
-msgstr "%s 已停用."
+msgstr "%s 已停止."
 
 #: src/etc/inc/service-utils.inc:762
 #, php-format
 msgid "%s has been restarted."
-msgstr "%s 已重新啟用."
+msgstr "%s 已重新啟動."
 
 #: src/etc/inc/services.inc:382
 msgid "Error: cannot open radvd.conf in services_radvd_configure()."
@@ -5652,11 +5655,11 @@ msgstr ""
 
 #: src/etc/inc/services.inc:399
 msgid "Shutting down Router Advertisment daemon cleanly"
-msgstr ""
+msgstr "完全關閉路由器廣播守護程序"
 
 #: src/etc/inc/services.inc:501
 msgid "Starting DHCP service..."
-msgstr ""
+msgstr "啟動DHCP服務中..."
 
 #: src/etc/inc/services.inc:607
 msgid "Warning!  DHCP Failover setup and no CARP virtual IPs defined!"
@@ -5680,15 +5683,15 @@ msgstr ""
 
 #: src/etc/inc/services.inc:1661
 msgid "Started IGMP proxy service."
-msgstr ""
+msgstr "啟動IGMP代理服務"
 
 #: src/etc/inc/services.inc:1685
 msgid "Starting DHCP relay service..."
-msgstr ""
+msgstr "正在啟動DHCP中繼服務..."
 
 #: src/etc/inc/services.inc:1710
 msgid "No destination IP has been configured!"
-msgstr ""
+msgstr "未配置目標IP!"
 
 #: src/etc/inc/services.inc:1784
 msgid "No suitable interface found for running dhcrelay!"
@@ -5696,7 +5699,7 @@ msgstr ""
 
 #: src/etc/inc/services.inc:1820
 msgid "Starting DHCPv6 relay service..."
-msgstr ""
+msgstr "啟動DHCPv6中繼服務中..."
 
 #: src/etc/inc/services.inc:1911
 msgid "No suitable interface found for running dhcrelay -6!"
@@ -5704,19 +5707,19 @@ msgstr ""
 
 #: src/etc/inc/services.inc:1972
 msgid "Starting DynDNS clients..."
-msgstr ""
+msgstr "啟動DynDNS客戶端中..."
 
 #: src/etc/inc/services.inc:2078
 msgid "Starting DNS forwarder..."
-msgstr ""
+msgstr "啟動DNS轉發器中..."
 
 #: src/etc/inc/services.inc:2244
 msgid "Starting DNS Resolver..."
-msgstr ""
+msgstr "啟動DNS解析器中..."
 
 #: src/etc/inc/services.inc:2289
 msgid "Starting SNMP daemon... "
-msgstr ""
+msgstr "啟動SNMP守護程序中..."
 
 #: src/etc/inc/services.inc:2300
 #, php-format
@@ -5758,7 +5761,7 @@ msgstr ""
 
 #: src/etc/inc/services.inc:2736
 msgid "Created:"
-msgstr ""
+msgstr "創立:"
 
 #: src/etc/inc/services.inc:2762
 msgid "If possible do not add items to this file manually."
@@ -5773,8 +5776,8 @@ msgstr ""
 msgid "Starting UPnP service... "
 msgstr "正啟用 UPnP 服務... "
 
-#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:231
-#: src/usr/local/www/system_certmanager.php:347
+#: src/etc/inc/shaper.inc:263 src/usr/local/www/system_camanager.php:227
+#: src/usr/local/www/system_certmanager.php:338
 #, php-format
 msgid "The field '%s' contains invalid characters."
 msgstr ""
@@ -5802,34 +5805,34 @@ msgstr "頻寬類型"
 
 #: src/etc/inc/shaper.inc:443
 msgid "Bandwidth must be set.  This is usually the interface speed."
-msgstr ""
+msgstr "必須設定頻寬,這通常是網路介面速度."
 
 #: src/etc/inc/shaper.inc:446 src/etc/inc/shaper.inc:1205
 #: src/etc/inc/shaper.inc:1909
 msgid "Bandwidth must be an integer."
-msgstr ""
+msgstr "頻寬必須為整數."
 
 #: src/etc/inc/shaper.inc:449 src/etc/inc/shaper.inc:1208
 #: src/etc/inc/shaper.inc:1913
 msgid "Bandwidth cannot be negative."
-msgstr ""
+msgstr "頻寬不能為負值."
 
 #: src/etc/inc/shaper.inc:453 src/etc/inc/shaper.inc:1212
 #: src/etc/inc/shaper.inc:1918
 msgid "Bandwidth in percentage should be between 1 and 100."
-msgstr ""
+msgstr "頻寬百分比必須在1到100之間."
 
 #: src/etc/inc/shaper.inc:460
 msgid "Qlimit must be an integer."
-msgstr ""
+msgstr "Qlimit必須是整數."
 
 #: src/etc/inc/shaper.inc:463
 msgid "Qlimit must be positive."
-msgstr ""
+msgstr "Qlimit必須為正"
 
 #: src/etc/inc/shaper.inc:466
 msgid "Tbrsize must be an integer."
-msgstr ""
+msgstr "Tbr大小必須為正."
 
 #: src/etc/inc/shaper.inc:469
 msgid "Tbrsize must be positive."
@@ -5861,11 +5864,11 @@ msgstr "啟用/停用"
 #: src/usr/local/www/services_checkip_edit.php:127
 #: src/usr/local/www/system_gateways_edit.php:617
 msgid "*Name"
-msgstr ""
+msgstr "*名稱"
 
 #: src/etc/inc/shaper.inc:811
 msgid "Scheduler Type"
-msgstr ""
+msgstr "排程類型"
 
 #: src/etc/inc/shaper.inc:818
 msgid ""
@@ -5878,7 +5881,7 @@ msgstr ""
 
 #: src/etc/inc/shaper.inc:851
 msgid "TBR Size"
-msgstr ""
+msgstr "TBR大小"
 
 #: src/etc/inc/shaper.inc:854
 msgid ""
@@ -5917,7 +5920,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_vlan.php:109
 #: src/usr/local/www/system_gateway_groups.php:132
 msgid "Priority"
-msgstr ""
+msgstr "優先權"
 
 #: src/etc/inc/shaper.inc:1432
 msgid ""
@@ -6055,8 +6058,8 @@ msgstr ""
 #: src/usr/local/www/status_lb_vs.php:67
 #: src/usr/local/www/status_services.php:87
 #: src/usr/local/www/status_upnp.php:73
-#: src/usr/local/www/system_advanced_sysctl.php:162
-#: src/usr/local/www/system_advanced_sysctl.php:219
+#: src/usr/local/www/system_advanced_sysctl.php:156
+#: src/usr/local/www/system_advanced_sysctl.php:213
 #: src/usr/local/www/system_gateway_groups.php:133
 #: src/usr/local/www/system_gateway_groups_edit.php:309
 #: src/usr/local/www/system_gateway_groups_edit.php:338
@@ -6073,15 +6076,15 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:590
 #: src/usr/local/www/vpn_openvpn_client.php:907
 #: src/usr/local/www/vpn_openvpn_csc.php:349
-#: src/usr/local/www/vpn_openvpn_csc.php:660
+#: src/usr/local/www/vpn_openvpn_csc.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:744
-#: src/usr/local/www/vpn_openvpn_server.php:1338
+#: src/usr/local/www/vpn_openvpn_server.php:1342
 #: src/usr/local/www/widgets/widgets/ipsec.widget.php:206
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:62
 #: src/usr/local/www/widgets/widgets/services_status.widget.php:76
 #: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:137
 msgid "Description"
-msgstr ""
+msgstr "說明"
 
 #: src/etc/inc/shaper.inc:1566
 msgid "Delete Queue from this Interface"
@@ -6285,10 +6288,10 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:269
 #: src/usr/local/www/services_unbound_host_edit.php:291
 #: src/usr/local/www/system.php:504
-#: src/usr/local/www/system_certmanager.php:759
+#: src/usr/local/www/system_certmanager.php:750
 #: src/usr/local/www/system_usermanager.php:631
 msgid "Delete"
-msgstr ""
+msgstr "刪除"
 
 #: src/etc/inc/shaper.inc:3795
 msgid "Add Schedule"
@@ -6329,15 +6332,15 @@ msgstr "啟用"
 
 #: src/etc/inc/shaper.inc:3866 src/etc/inc/shaper.inc:4170
 msgid "Source addresses"
-msgstr ""
+msgstr "來源位址"
 
 #: src/etc/inc/shaper.inc:3866 src/etc/inc/shaper.inc:4170
 msgid "Destination addresses"
-msgstr ""
+msgstr "目的位址"
 
 #: src/etc/inc/shaper.inc:3864 src/etc/inc/shaper.inc:4168
 msgid "Mask"
-msgstr ""
+msgstr "遮罩"
 
 #: src/etc/inc/shaper.inc:3867 src/etc/inc/shaper.inc:4171
 msgid ""
@@ -6350,12 +6353,12 @@ msgstr ""
 #: src/etc/inc/shaper.inc:3878 src/etc/inc/shaper.inc:4182
 #, php-format
 msgid "IPv4 mask bits%1$s%2$s"
-msgstr ""
+msgstr "IPv4 遮罩字元%1$s%2$s"
 
 #: src/etc/inc/shaper.inc:3885 src/etc/inc/shaper.inc:4189
 #, php-format
 msgid "IPv6 mask bits%1$s%2$s"
-msgstr ""
+msgstr "IPv6 遮罩字元%1$s%2$s"
 
 #: src/etc/inc/shaper.inc:3894 src/etc/inc/shaper.inc:4198
 #: src/usr/local/www/firewall_aliases_edit.php:673
@@ -6411,7 +6414,7 @@ msgstr ""
 
 #: src/etc/inc/shaper.inc:3909 src/etc/inc/shaper.inc:4215
 msgid "Packet Loss Rate"
-msgstr ""
+msgstr "封包遺失率"
 
 #: src/etc/inc/shaper.inc:3913
 msgid ""
@@ -6447,7 +6450,7 @@ msgstr ""
 
 #: src/etc/inc/shaper.inc:4206 src/usr/local/www/system_gateways_edit.php:711
 msgid "Weight"
-msgstr ""
+msgstr "比重"
 
 #: src/etc/inc/shaper.inc:4210
 msgid ""
@@ -6537,7 +6540,7 @@ msgstr ""
 
 #: src/etc/inc/system.inc:1230
 msgid "Creating SSL Certificate for this host"
-msgstr ""
+msgstr "為此主機建立SSL憑證"
 
 #: src/etc/inc/system.inc:1234
 #, php-format
@@ -6561,7 +6564,7 @@ msgstr ""
 #: src/etc/inc/system.inc:1313 src/etc/inc/system.inc:2189
 #: src/etc/inc/system.inc:2192
 msgid "failed!"
-msgstr "錯誤!"
+msgstr "失敗!"
 
 #: src/etc/inc/system.inc:1515
 #, php-format
@@ -6615,23 +6618,23 @@ msgstr ""
 
 #: src/etc/inc/unbound.inc:743
 msgid "Static"
-msgstr ""
+msgstr "靜態"
 
 #: src/etc/inc/unbound.inc:744
 msgid "Transparent"
-msgstr ""
+msgstr "透明"
 
 #: src/etc/inc/unbound.inc:745
 msgid "Type Transparent"
-msgstr ""
+msgstr "透明類型"
 
 #: src/etc/inc/unbound.inc:747
 msgid "Inform"
-msgstr ""
+msgstr "通知"
 
 #: src/etc/inc/unbound.inc:748
 msgid "Inform Deny"
-msgstr ""
+msgstr "通知拒絕"
 
 #: src/etc/inc/unbound.inc:749
 msgid "No Default"
@@ -6921,32 +6924,32 @@ msgstr ""
 #: src/etc/inc/util.inc:2552
 #, php-format
 msgid "%s must be a valid IPv4 address or alias."
-msgstr ""
+msgstr "%s 必須是有效的 IPv4 位址或別名."
 
 #: src/etc/inc/util.inc:2556
 #, php-format
 msgid "%s must be a valid IPv4 address."
-msgstr ""
+msgstr "%s 必須是有效的IPv4位址."
 
 #: src/etc/inc/util.inc:2568
 #, php-format
 msgid "%s must be a valid IPv6 address or alias."
-msgstr ""
+msgstr "%s必須是有效的IPv6位址或別名."
 
 #: src/etc/inc/util.inc:2572
 #, php-format
 msgid "%s must be a valid IPv6 address."
-msgstr ""
+msgstr "%s 必須是有效的IPv6位址."
 
 #: src/etc/inc/util.inc:2586
 #, php-format
 msgid "%s must be a valid IPv4 or IPv6 address or alias."
-msgstr ""
+msgstr "%s 必須是有效的IPv4,IPv6位址或別名."
 
 #: src/etc/inc/util.inc:2590
 #, php-format
 msgid "%s must be a valid IPv4 or IPv6 address."
-msgstr ""
+msgstr "%s 必須是有效的IPv4或IPv6位址."
 
 #: src/etc/inc/util.inc:2645
 msgid "Error: attempting to write DUID file - Invalid DUID detected"
@@ -6969,12 +6972,12 @@ msgstr ""
 #: src/etc/inc/voucher.inc:196
 #, php-format
 msgid "%1$s invalid: %2$s!!"
-msgstr ""
+msgstr "%1$s無效: %2$s!!"
 
 #: src/etc/inc/voucher.inc:283
 #, php-format
 msgid "%s invalid: Too short!"
-msgstr ""
+msgstr "%s 無效：太短！"
 
 #: src/etc/inc/voucher.inc:309
 #, php-format
@@ -6998,7 +7001,7 @@ msgstr ""
 
 #: src/etc/inc/voucher.inc:350
 msgid "Access denied!"
-msgstr ""
+msgstr "拒絕存取!"
 
 #: src/etc/inc/voucher.inc:352
 #, php-format
@@ -7022,20 +7025,20 @@ msgstr ""
 #: src/etc/inc/voucher.inc:605
 #, php-format
 msgid "cant read %1$s/voucher_%2$s_used_%3$s.db"
-msgstr ""
+msgstr "無法讀取 %1$s/憑證_%2$s_已使用_%3$s.db"
 
 #: src/etc/inc/voucher.inc:622
 #, php-format
 msgid "Voucher: %s"
-msgstr ""
+msgstr "憑證: %s"
 
 #: src/etc/inc/voucher.inc:677
 msgid "Syncing vouchers"
-msgstr ""
+msgstr "同步憑證"
 
 #: src/etc/inc/vpn.inc:233
 msgid "Configuring IPsec VPN... "
-msgstr ""
+msgstr "配置IPsec VPN ..."
 
 #: src/etc/inc/vpn.inc:274
 #, php-format
@@ -7096,11 +7099,11 @@ msgstr ""
 
 #: src/etc/inc/vpn.inc:1488
 msgid "Forcefully reloading IPsec"
-msgstr ""
+msgstr "強制重新載入IPsec"
 
 #: src/etc/inc/vpn.inc:1538
 msgid "Configuring PPPoE Server service... "
-msgstr ""
+msgstr "配置PPPoE 伺服器服務中... "
 
 #: src/etc/inc/vpn.inc:1563
 #, php-format
@@ -7114,11 +7117,11 @@ msgstr ""
 
 #: src/etc/inc/vpn.inc:1714
 msgid "done"
-msgstr ""
+msgstr "已完成"
 
 #: src/etc/inc/vpn.inc:1736
 msgid "Configuring l2tp VPN service... "
-msgstr ""
+msgstr "配置 l2tp VPN 服務中... "
 
 #: src/etc/inc/vpn.inc:1775
 #, php-format
@@ -7173,12 +7176,12 @@ msgstr ""
 
 #: src/etc/inc/xmlrpc_client.inc:125
 msgid "Error code received"
-msgstr ""
+msgstr "收到錯誤代碼"
 
 #: src/usr/local/bin/dhcpd_gather_stats.php:102
 #: src/usr/local/www/status_dhcp_leases.php:189
 msgid "Never"
-msgstr ""
+msgstr "從不"
 
 #: src/usr/local/sbin/gmirror_status_check.php:45
 #, php-format
@@ -7202,11 +7205,11 @@ msgstr ""
 
 #: src/usr/local/www/bandwidth_by_ip.php:33
 msgid "Wrong Interface"
-msgstr ""
+msgstr "錯誤的網路介面"
 
 #: src/usr/local/www/bandwidth_by_ip.php:159
 msgid "no info"
-msgstr ""
+msgstr "無訊息"
 
 #: src/usr/local/www/classes/Form/Section.class.php:78
 #: src/usr/local/www/diag_gmirror.php:54 src/usr/local/www/diag_gmirror.php:198
@@ -7216,7 +7219,7 @@ msgstr ""
 #: src/usr/local/www/pkg_mgr_install.php:352
 #: src/usr/local/www/pkg_mgr_install.php:354
 msgid "Confirm"
-msgstr ""
+msgstr "確認"
 
 #: src/usr/local/www/classes/Form.class.php:38
 #: src/usr/local/www/diag_confbak.php:172 src/usr/local/www/diag_edit.php:122
@@ -7234,13 +7237,13 @@ msgstr ""
 #: src/usr/local/www/status_lb_pool.php:244
 #: src/usr/local/www/status_lb_pool.php:246
 #: src/usr/local/www/status_logs_common.inc:940
-#: src/usr/local/www/system_advanced_sysctl.php:93
+#: src/usr/local/www/system_advanced_sysctl.php:87
 #: src/usr/local/www/system_authservers.php:81
-#: src/usr/local/www/system_camanager.php:324
-#: src/usr/local/www/system_camanager.php:355
-#: src/usr/local/www/system_certmanager.php:219
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:555
+#: src/usr/local/www/system_camanager.php:320
+#: src/usr/local/www/system_camanager.php:351
+#: src/usr/local/www/system_certmanager.php:210
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:546
 #: src/usr/local/www/system_crlmanager.php:261
 #: src/usr/local/www/system_crlmanager.php:346
 #: src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php:248
@@ -7257,7 +7260,7 @@ msgstr ""
 #: src/usr/local/www/widgets/widgets/traffic_graphs.widget.php:475
 #: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:167
 msgid "Save"
-msgstr ""
+msgstr "儲存"
 
 #: src/usr/local/www/crash_reporter.php:56 src/usr/local/www/diag_arp.php:269
 #: src/usr/local/www/diag_authentication.php:69
@@ -7279,7 +7282,7 @@ msgstr ""
 #: src/usr/local/www/diag_tables.php:29 src/usr/local/www/diag_testport.php:38
 #: src/usr/local/www/diag_traceroute.php:37 src/usr/local/www/head.inc:645
 msgid "Diagnostics"
-msgstr ""
+msgstr "系統診斷"
 
 #: src/usr/local/www/crash_reporter.php:56
 msgid "Crash Reporter"
@@ -7351,11 +7354,11 @@ msgstr ""
 #: src/usr/local/www/diag_arp.php:269 src/usr/local/www/diag_arp.php:325
 #: src/usr/local/www/head.inc:366
 msgid "ARP Table"
-msgstr ""
+msgstr "ARP Table"
 
 #: src/usr/local/www/diag_arp.php:280
 msgid " Loading, please wait..."
-msgstr ""
+msgstr "載入中,請稍等..."
 
 #: src/usr/local/www/diag_arp.php:332
 #: src/usr/local/www/diag_dump_states.php:132
@@ -7407,7 +7410,7 @@ msgstr ""
 #: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:63
 #: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:138
 msgid "Interface"
-msgstr ""
+msgstr "網路介面"
 
 #: src/usr/local/www/diag_arp.php:334 src/usr/local/www/diag_ndp.php:109
 #: src/usr/local/www/services_captiveportal_mac.php:177
@@ -7420,7 +7423,7 @@ msgstr ""
 #: src/usr/local/www/status_dhcpv6_leases.php:440
 #: src/usr/local/www/widgets/widgets/captive_portal_status.widget.php:83
 msgid "MAC address"
-msgstr ""
+msgstr "MAC address"
 
 #: src/usr/local/www/diag_arp.php:335 src/usr/local/www/diag_ndp.php:110
 #: src/usr/local/www/interfaces.php:1953
@@ -7444,7 +7447,7 @@ msgstr "主機名稱"
 
 #: src/usr/local/www/diag_arp.php:337
 msgid "Link Type"
-msgstr ""
+msgstr "連接類型"
 
 #: src/usr/local/www/diag_arp.php:338 src/usr/local/www/diag_confbak.php:215
 #: src/usr/local/www/firewall_aliases.php:195
@@ -7493,8 +7496,8 @@ msgstr ""
 #: src/usr/local/www/status_openvpn.php:159
 #: src/usr/local/www/status_services.php:89
 #: src/usr/local/www/system_authservers.php:445
-#: src/usr/local/www/system_camanager.php:370
-#: src/usr/local/www/system_certmanager.php:958
+#: src/usr/local/www/system_camanager.php:366
+#: src/usr/local/www/system_certmanager.php:950
 #: src/usr/local/www/system_crlmanager.php:587
 #: src/usr/local/www/system_gateway_groups.php:134
 #: src/usr/local/www/system_gateways.php:262
@@ -7504,15 +7507,15 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec.php:256 src/usr/local/www/vpn_ipsec_keys.php:104
 #: src/usr/local/www/vpn_l2tp_users.php:97
 #: src/usr/local/www/vpn_openvpn_client.php:908
-#: src/usr/local/www/vpn_openvpn_csc.php:661
-#: src/usr/local/www/vpn_openvpn_server.php:1339
+#: src/usr/local/www/vpn_openvpn_csc.php:665
+#: src/usr/local/www/vpn_openvpn_server.php:1343
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:52
 msgid "Actions"
-msgstr ""
+msgstr "動作"
 
 #: src/usr/local/www/diag_arp.php:363
 msgid "Delete arp cache entry"
-msgstr ""
+msgstr "刪除arp快取項目"
 
 #: src/usr/local/www/diag_arp.php:385
 #, php-format
@@ -7566,7 +7569,7 @@ msgstr "驗證"
 
 #: src/usr/local/www/diag_authentication.php:83
 msgid "Authentication Test"
-msgstr ""
+msgstr "驗證測試"
 
 #: src/usr/local/www/diag_authentication.php:91
 #: src/usr/local/www/system_usermanager_settings.php:214
@@ -7575,7 +7578,7 @@ msgstr "驗證伺服器"
 
 #: src/usr/local/www/diag_authentication.php:94
 msgid "Select the authentication server to test against."
-msgstr ""
+msgstr "選擇要測試的驗證伺服器"
 
 #: src/usr/local/www/diag_authentication.php:98
 #: src/usr/local/www/interfaces.php:2599 src/usr/local/www/interfaces.php:2724
@@ -7594,22 +7597,22 @@ msgstr "密碼"
 #: src/usr/local/www/diag_smart.php:279 src/usr/local/www/diag_testport.php:269
 #: src/usr/local/www/status_captiveportal_test.php:109
 msgid "Test"
-msgstr ""
+msgstr "測試"
 
 #: src/usr/local/www/diag_backup.php:79 src/usr/local/www/diag_backup.php:94
 #, php-format
 msgid "Cannot write %s"
-msgstr ""
+msgstr "無法寫入 %s"
 
 #: src/usr/local/www/diag_backup.php:103 src/usr/local/www/diag_backup.php:109
 #, php-format
 msgid "fwrite %s failed"
-msgstr ""
+msgstr "寫入 %s 失敗"
 
 #: src/usr/local/www/diag_backup.php:114
 #, php-format
 msgid "fclose %s failed"
-msgstr ""
+msgstr "關閉 %s 失敗"
 
 #: src/usr/local/www/diag_backup.php:148
 msgid "Restored base_package menus after configuration restore."
@@ -7678,7 +7681,7 @@ msgstr ""
 #: src/usr/local/www/firewall_aliases_import.php:55
 #: src/usr/local/www/head.inc:280
 msgid "Aliases"
-msgstr ""
+msgstr "別名"
 
 #: src/usr/local/www/diag_backup.php:467
 msgid "Captive Portal Vouchers"
@@ -7784,10 +7787,10 @@ msgstr "Syslog"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_authservers.php:408
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_gateway_groups.php:103
 #: src/usr/local/www/system_gateway_groups_edit.php:147
@@ -7801,7 +7804,7 @@ msgstr "Syslog"
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/system_user_settings.php:32
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_passwordmg.php:33
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:146
@@ -7813,15 +7816,15 @@ msgstr "System"
 
 #: src/usr/local/www/diag_backup.php:482
 msgid "Static routes"
-msgstr ""
+msgstr "靜態路由"
 
 #: src/usr/local/www/diag_backup.php:483
 msgid "System tunables"
-msgstr ""
+msgstr "系統參數"
 
 #: src/usr/local/www/diag_backup.php:484
 msgid "SNMP Server"
-msgstr ""
+msgstr "SNMP Server"
 
 #: src/usr/local/www/diag_backup.php:485
 #: src/usr/local/www/firewall_shaper.php:41
@@ -7830,18 +7833,18 @@ msgstr ""
 #: src/usr/local/www/firewall_shaper_wizards.php:57
 #: src/usr/local/www/head.inc:284
 msgid "Traffic Shaper"
-msgstr ""
+msgstr "流量整型"
 
 #: src/usr/local/www/diag_backup.php:486
 msgid "VLANS"
-msgstr ""
+msgstr "VLANS"
 
 #: src/usr/local/www/diag_backup.php:487 src/usr/local/www/head.inc:315
 #: src/usr/local/www/services_wol.php:113
 #: src/usr/local/www/services_wol.php:136
 #: src/usr/local/www/services_wol_edit.php:111
 msgid "Wake-on-LAN"
-msgstr ""
+msgstr "Wake-on-LAN"
 
 #: src/usr/local/www/diag_backup.php:490
 #: src/usr/local/www/firewall_aliases.php:154
@@ -7861,26 +7864,26 @@ msgstr ""
 #: src/usr/local/www/widgets/widgets/wake_on_lan.widget.php:168
 #: src/usr/local/www/diag_smart.php:252
 msgid "All"
-msgstr ""
+msgstr "全部"
 
 #: src/usr/local/www/diag_backup.php:505 src/usr/local/www/diag_backup.php:529
 #: src/usr/local/www/diag_confbak.php:99 src/usr/local/www/diag_confbak.php:108
 #: src/usr/local/www/head.inc:368 src/usr/local/www/head.inc:645
 msgid "Backup & Restore"
-msgstr ""
+msgstr "備份與還原"
 
 #: src/usr/local/www/diag_backup.php:522
 msgid "The firewall configuration has been changed."
-msgstr ""
+msgstr "防火牆配置已變更."
 
 #: src/usr/local/www/diag_backup.php:522
 msgid "The firewall is now rebooting."
-msgstr ""
+msgstr "pfSense防火牆正在重新開機."
 
 #: src/usr/local/www/diag_backup.php:530 src/usr/local/www/diag_confbak.php:99
 #: src/usr/local/www/diag_confbak.php:109
 msgid "Config History"
-msgstr ""
+msgstr "配置歷史"
 
 #: src/usr/local/www/diag_backup.php:536
 msgid "Backup Configuration"
@@ -7948,7 +7951,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_backup.php:655
 msgid "Clear Package Lock"
-msgstr ""
+msgstr "清除套件鎖定"
 
 #: src/usr/local/www/diag_backup.php:658
 msgid ""
@@ -7959,7 +7962,7 @@ msgstr ""
 #: src/usr/local/www/diag_command.php:61
 #, php-format
 msgid "Uploaded file to %s."
-msgstr ""
+msgstr "已上傳檔案至%s."
 
 #: src/usr/local/www/diag_command.php:91 src/usr/local/www/head.inc:369
 msgid "Command Prompt"
@@ -7982,7 +7985,7 @@ msgstr "僅限進階使用者"
 #: src/usr/local/www/diag_command.php:192
 #, php-format
 msgid "Shell Output - %s"
-msgstr ""
+msgstr "Shell 輸出 - %s"
 
 #: src/usr/local/www/diag_command.php:211
 msgid "Execute Shell Command"
@@ -7990,68 +7993,68 @@ msgstr "Execute Shell Command"
 
 #: src/usr/local/www/diag_command.php:219
 msgid "Recall Previous Command"
-msgstr ""
+msgstr "重新呼叫前一個命令"
 
 #: src/usr/local/www/diag_command.php:222
 msgid "Execute the entered command"
-msgstr ""
+msgstr "執行輸入的命令"
 
 #: src/usr/local/www/diag_command.php:224
 #: src/usr/local/www/diag_command.php:315
 msgid "Execute"
-msgstr ""
+msgstr "執行"
 
 #: src/usr/local/www/diag_command.php:226
 msgid "Recall Next Command"
-msgstr ""
+msgstr "重新呼叫下一個命令"
 
 #: src/usr/local/www/diag_command.php:229
 msgid "Clear command entry"
-msgstr ""
+msgstr "清除命令項目"
 
 #: src/usr/local/www/diag_command.php:231 src/usr/local/www/pkg_mgr.php:165
 #: src/usr/local/www/system_groupmanager_addprivs.php:206
-#: src/usr/local/www/system_usermanager_addprivs.php:196
+#: src/usr/local/www/system_usermanager_addprivs.php:190
 #: src/usr/local/www/interfaces.php:2035
 msgid "Clear"
-msgstr ""
+msgstr "清除"
 
 #: src/usr/local/www/diag_command.php:239
 msgid "Download File"
-msgstr ""
+msgstr "下載檔案"
 
 #: src/usr/local/www/diag_command.php:246
 #: src/usr/local/www/services_captiveportal.php:1092
 #: src/usr/local/www/services_captiveportal.php:1126
 #: src/usr/local/www/services_captiveportal.php:1158
 msgid "Download"
-msgstr ""
+msgstr "下載"
 
 #: src/usr/local/www/diag_command.php:258
 msgid "Upload File"
-msgstr ""
+msgstr "上傳檔案"
 
 #: src/usr/local/www/diag_command.php:265
 #: src/usr/local/www/services_captiveportal_filemanager.php:172
 #: src/usr/local/www/widgets/widgets/picture.widget.php:77
 msgid "Upload"
-msgstr ""
+msgstr "上傳"
 
 #: src/usr/local/www/diag_command.php:308
 msgid "Execute PHP Commands"
-msgstr ""
+msgstr "執行PHP命令"
 
 #: src/usr/local/www/diag_command.php:313
 msgid "Execute this PHP Code"
-msgstr ""
+msgstr "執行此PHP程式碼"
 
 #: src/usr/local/www/diag_command.php:317
 msgid "Example"
-msgstr ""
+msgstr "範例"
 
 #: src/usr/local/www/diag_confbak.php:38
 msgid "(platform default)"
-msgstr ""
+msgstr "(預設平台)"
 
 #: src/usr/local/www/diag_confbak.php:40
 #, php-format
@@ -8092,7 +8095,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_confbak.php:154
 msgid "Configuration Backup Cache Settings"
-msgstr ""
+msgstr "配置備份快取設定"
 
 #: src/usr/local/www/diag_confbak.php:158
 msgid "Backup Count"
@@ -8123,7 +8126,7 @@ msgstr ""
 #: src/usr/local/www/diag_confbak.php:272
 #: src/usr/local/www/system_update_settings.php:235
 msgid "Diff"
-msgstr ""
+msgstr "比較"
 
 #: src/usr/local/www/diag_confbak.php:211
 msgid "Date"
@@ -8145,11 +8148,11 @@ msgstr "大小"
 
 #: src/usr/local/www/diag_confbak.php:214
 msgid "Configuration Change"
-msgstr ""
+msgstr "配置更改"
 
 #: src/usr/local/www/diag_confbak.php:229
 msgid "Current configuration"
-msgstr ""
+msgstr "目前配置"
 
 #: src/usr/local/www/diag_confbak.php:238
 #: src/usr/local/www/pkg_mgr_installed.php:121
@@ -8171,12 +8174,12 @@ msgstr "未知"
 
 #: src/usr/local/www/diag_confbak.php:260
 msgid "Revert config"
-msgstr ""
+msgstr "還原配置"
 
 #: src/usr/local/www/diag_confbak.php:260
 msgid ""
 "Confirmation Required to replace the current configuration with this backup."
-msgstr ""
+msgstr "確認要用此備份取代目前配置."
 
 #: src/usr/local/www/diag_confbak.php:261
 msgid "Download config"
@@ -8198,7 +8201,7 @@ msgstr "出廠預設值"
 msgid ""
 "The system has been reset to factory defaults and is now rebooting. This may "
 "take a few minutes, depending on the hardware."
-msgstr ""
+msgstr "系統已恢復為出廠預設值,現在重新開機.依硬體的不同,這也許需要一些時間"
 
 #: src/usr/local/www/diag_defaults.php:56
 msgid "Factory Defaults Reset"
@@ -8216,7 +8219,7 @@ msgstr "重設為出廠預設值"
 
 #: src/usr/local/www/diag_defaults.php:64
 msgid "LAN IP address will be reset to 192.168.1.1"
-msgstr ""
+msgstr "LAN IP 位址將重新設定為 192.168.1.1"
 
 #: src/usr/local/www/diag_defaults.php:65
 msgid ""
@@ -8244,23 +8247,23 @@ msgstr ""
 
 #: src/usr/local/www/diag_defaults.php:71
 msgid "Are you sure you want to proceed?"
-msgstr ""
+msgstr "你確定你要執行嗎？"
 
 #: src/usr/local/www/diag_defaults.php:73
 msgid "Perform a factory reset"
-msgstr ""
+msgstr "執行回復至出廠狀態"
 
 #: src/usr/local/www/diag_defaults.php:75
 msgid "Factory Reset"
-msgstr ""
+msgstr "恢復出廠預設值"
 
 #: src/usr/local/www/diag_defaults.php:77
 msgid "Return to the dashboard"
-msgstr ""
+msgstr "返回至儀表版"
 
 #: src/usr/local/www/diag_defaults.php:79
 msgid "Keep Configuration"
-msgstr ""
+msgstr "保持配置"
 
 #: src/usr/local/www/diag_dns.php:29 src/usr/local/www/diag_dns.php:218
 #: src/usr/local/www/head.inc:370
@@ -8307,7 +8310,7 @@ msgstr "主機名稱"
 #: src/usr/local/www/diag_dns.php:188 src/usr/local/www/services_rfc2136.php:82
 #: src/usr/local/www/services_rfc2136_edit.php:236
 #: src/usr/local/www/status_ntpd.php:296
-#: src/usr/local/www/system_certmanager.php:1011
+#: src/usr/local/www/system_certmanager.php:1003
 #: src/usr/local/www/vpn_openvpn_client.php:906
 #: src/usr/local/www/widgets/widgets/load_balancer_status.widget.php:60
 msgid "Server"
@@ -8320,15 +8323,15 @@ msgstr "Query Time"
 #: src/usr/local/www/diag_dns.php:206
 #, php-format
 msgid "Host \"%s\" could not be resolved."
-msgstr ""
+msgstr "無法解析主機\"%s\"."
 
 #: src/usr/local/www/diag_dns.php:211
 msgid "Alias was updated successfully."
-msgstr ""
+msgstr "別名已成功更新"
 
 #: src/usr/local/www/diag_dns.php:213
 msgid "Alias was created successfully."
-msgstr ""
+msgstr "別名已成功建立"
 
 #: src/usr/local/www/diag_dns.php:222 src/usr/local/www/diag_ping.php:131
 #: src/usr/local/www/diag_testport.php:221
@@ -8343,40 +8346,40 @@ msgstr "*主機名稱"
 #: src/usr/local/www/diag_dns.php:232
 #: src/usr/local/www/status_logs_filter_summary.php:176
 msgid "Lookup"
-msgstr ""
+msgstr "尋找"
 
 #: src/usr/local/www/diag_dns.php:239
 msgid "Update alias"
-msgstr ""
+msgstr "更新別名"
 
 #: src/usr/local/www/diag_dns.php:241
 msgid "Add alias"
-msgstr ""
+msgstr "增加別名"
 
 #: src/usr/local/www/diag_dns.php:257 src/usr/local/www/diag_ping.php:173
 #: src/usr/local/www/diag_traceroute.php:181
 msgid "Results"
-msgstr ""
+msgstr "結果"
 
 #: src/usr/local/www/diag_dns.php:263
 msgid "Result"
-msgstr ""
+msgstr "結果"
 
 #: src/usr/local/www/diag_dns.php:264
 msgid "Record type"
-msgstr ""
+msgstr "記錄類型"
 
 #: src/usr/local/www/diag_dns.php:281
 msgid "Timings"
-msgstr ""
+msgstr "時間"
 
 #: src/usr/local/www/diag_dns.php:286
 msgid "Name server"
-msgstr ""
+msgstr "名稱伺服器"
 
 #: src/usr/local/www/diag_dns.php:287
 msgid "Query time"
-msgstr ""
+msgstr "查詢時間"
 
 #: src/usr/local/www/diag_dns.php:304
 msgid "More Information"
@@ -8396,18 +8399,18 @@ msgstr ""
 
 #: src/usr/local/www/diag_dns.php:312
 msgid "IP WHOIS @ DNS Stuff"
-msgstr ""
+msgstr "IP WHOIS @ DNS Stuff"
 
 #: src/usr/local/www/diag_dns.php:313
 msgid "IP Info @ DNS Stuff"
-msgstr ""
+msgstr "IP Info @ DNS Stuff"
 
 #: src/usr/local/www/diag_dump_states.php:55
 #: src/usr/local/www/diag_dump_states_sources.php:39
 #: src/usr/local/www/status_openvpn.php:47
 #: src/usr/local/www/widgets/widgets/openvpn.widget.php:36
 msgid "invalid input"
-msgstr ""
+msgstr "輸入無效"
 
 #: src/usr/local/www/diag_dump_states.php:75
 #: src/usr/local/www/diag_dump_states.php:107
@@ -8420,7 +8423,7 @@ msgstr ""
 #: src/usr/local/www/diag_states_summary.php:154
 #: src/usr/local/www/firewall_rules.php:384 src/usr/local/www/head.inc:390
 msgid "States"
-msgstr ""
+msgstr "狀態"
 
 #: src/usr/local/www/diag_dump_states.php:109
 #: src/usr/local/www/diag_dump_states_sources.php:53
@@ -8428,14 +8431,14 @@ msgstr ""
 #: src/usr/local/www/diag_resetstate.php:84
 #: src/usr/local/www/diag_resetstate.php:104
 msgid "Source Tracking"
-msgstr ""
+msgstr "Source Tracking"
 
 #: src/usr/local/www/diag_dump_states.php:111
 #: src/usr/local/www/diag_dump_states_sources.php:60
 #: src/usr/local/www/diag_resetstate.php:56
 #: src/usr/local/www/diag_resetstate.php:87
 msgid "Reset States"
-msgstr ""
+msgstr "重置狀態"
 
 #: src/usr/local/www/diag_dump_states.php:119
 msgid "State Filter"
@@ -8452,14 +8455,14 @@ msgstr ""
 #: src/usr/local/www/status_graph.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:175
 #: src/usr/local/www/system_groupmanager_addprivs.php:195
-#: src/usr/local/www/system_usermanager_addprivs.php:165
-#: src/usr/local/www/system_usermanager_addprivs.php:185
+#: src/usr/local/www/system_usermanager_addprivs.php:159
+#: src/usr/local/www/system_usermanager_addprivs.php:179
 msgid "Filter"
 msgstr "篩選器"
 
 #: src/usr/local/www/diag_dump_states.php:160
 msgid "Kill States"
-msgstr ""
+msgstr "清除狀態"
 
 #: src/usr/local/www/diag_dump_states.php:166
 msgid "Kill filtered states"
@@ -8467,7 +8470,7 @@ msgstr "刪除已篩選的狀態"
 
 #: src/usr/local/www/diag_dump_states.php:168
 msgid "Remove all states to and from the filtered address"
-msgstr ""
+msgstr "刪除已篩選位址的所有狀態"
 
 #: src/usr/local/www/diag_dump_states.php:182
 #: src/usr/local/www/diag_states_summary.php:153
@@ -8495,7 +8498,7 @@ msgstr "通訊協定"
 
 #: src/usr/local/www/diag_dump_states.php:183
 msgid "Source (Original Source) -> Destination (Original Destination)"
-msgstr ""
+msgstr "來源（原始来源） - >目的地（原始目的地）"
 
 #: src/usr/local/www/diag_dump_states.php:184
 #: src/usr/local/www/status_dhcpv6_leases.php:539
@@ -8514,7 +8517,7 @@ msgstr "Bytes"
 #: src/usr/local/www/diag_dump_states.php:254
 #, php-format
 msgid "Remove all state entries from %1$s to %2$s"
-msgstr ""
+msgstr "删除從“%1$s”到“%2$s”的所有狀態項目"
 
 #: src/usr/local/www/diag_dump_states.php:269
 msgid "No states were found that match the current filter."
@@ -8528,7 +8531,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_dump_states.php:274
 msgid "No states were found."
-msgstr ""
+msgstr "未找到任何狀態"
 
 #: src/usr/local/www/diag_dump_states_sources.php:93
 msgid "Filters"
@@ -8544,22 +8547,22 @@ msgstr ""
 
 #: src/usr/local/www/diag_dump_states_sources.php:121
 msgid "# States"
-msgstr ""
+msgstr "#狀態"
 
 #: src/usr/local/www/diag_dump_states_sources.php:122
 msgid "# Connections"
-msgstr ""
+msgstr "#連線"
 
 #: src/usr/local/www/diag_dump_states_sources.php:123
 #: src/usr/local/www/diag_pftop.php:124
 #: src/usr/local/www/status_interfaces.php:165
 msgid "Rate"
-msgstr ""
+msgstr "#速率"
 
 #: src/usr/local/www/diag_dump_states_sources.php:154
 #, php-format
 msgid "Remove all source tracking entries from %1$s to %2$s"
-msgstr ""
+msgstr "删除所有来源跟踪項目從 %1$s 到 %2$s"
 
 #: src/usr/local/www/diag_dump_states_sources.php:154
 #: src/usr/local/www/diag_gmirror.php:250
@@ -8581,11 +8584,11 @@ msgstr "編輯檔案"
 
 #: src/usr/local/www/diag_edit.php:40 src/usr/local/www/diag_edit.php:66
 msgid "No file name specified."
-msgstr ""
+msgstr "未指定檔案名稱."
 
 #: src/usr/local/www/diag_edit.php:44
 msgid "Loading a directory is not supported."
-msgstr ""
+msgstr "不支援載入目錄."
 
 #: src/usr/local/www/diag_edit.php:48
 msgid "File does not exist or is not a regular file."
@@ -8593,31 +8596,31 @@ msgstr ""
 
 #: src/usr/local/www/diag_edit.php:54
 msgid "Failed to read file."
-msgstr ""
+msgstr "檔案讀取失敗."
 
 #: src/usr/local/www/diag_edit.php:79
 msgid "Failed to write file."
-msgstr ""
+msgstr "檔案寫入失敗."
 
 #: src/usr/local/www/diag_edit.php:83
 msgid "Error while writing file."
-msgstr ""
+msgstr "寫入檔案時出現錯誤."
 
 #: src/usr/local/www/diag_edit.php:87
 msgid "File saved successfully."
-msgstr ""
+msgstr "檔案已成功儲存."
 
 #: src/usr/local/www/diag_edit.php:107
 msgid "Save / Load a File from the Filesystem"
-msgstr ""
+msgstr "儲存/載入 檔案於檔案系統"
 
 #: src/usr/local/www/diag_edit.php:111
 msgid "Path to file to be edited"
-msgstr ""
+msgstr "要編輯的檔案的路徑"
 
 #: src/usr/local/www/diag_edit.php:114 src/usr/local/www/diag_edit.php:116
 msgid "Load"
-msgstr ""
+msgstr "載入"
 
 #: src/usr/local/www/diag_edit.php:118 src/usr/local/www/diag_edit.php:120
 msgid "Browse"
@@ -8625,11 +8628,11 @@ msgstr "瀏覽"
 
 #: src/usr/local/www/diag_edit.php:129
 msgid "GoTo Line #"
-msgstr ""
+msgstr "到第#行"
 
 #: src/usr/local/www/diag_gmirror.php:33 src/usr/local/www/head.inc:375
 msgid "GEOM Mirrors"
-msgstr ""
+msgstr "GEOM Mirrors"
 
 #: src/usr/local/www/diag_gmirror.php:38
 msgid "Forget all formerly connected consumers"
@@ -8713,7 +8716,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_gmirror.php:176
 msgid "Confirm Action"
-msgstr ""
+msgstr "確認操作"
 
 #: src/usr/local/www/diag_gmirror.php:178
 msgid "Please confirm the selected action: "
@@ -8721,11 +8724,11 @@ msgstr ""
 
 #: src/usr/local/www/diag_gmirror.php:183
 msgid "Mirror: "
-msgstr ""
+msgstr "鏡像:"
 
 #: src/usr/local/www/diag_gmirror.php:191
 msgid "Consumer"
-msgstr ""
+msgstr "消費者"
 
 #: src/usr/local/www/diag_gmirror.php:207
 msgid ""
@@ -8749,11 +8752,11 @@ msgstr "重新建立"
 #: src/usr/local/www/diag_gmirror.php:249
 #: src/usr/local/www/diag_gmirror.php:267
 msgid "Deactivate"
-msgstr ""
+msgstr "停用"
 
 #: src/usr/local/www/diag_gmirror.php:283
 msgid "No Mirrors Found"
-msgstr ""
+msgstr "找不到鏡像"
 
 #: src/usr/local/www/diag_gmirror.php:291
 msgid ""
@@ -8767,12 +8770,12 @@ msgstr ""
 
 #: src/usr/local/www/diag_gmirror.php:304
 msgid "Add to Mirror"
-msgstr ""
+msgstr "增加至鏡像"
 
 #: src/usr/local/www/diag_gmirror.php:326
 #, php-format
 msgid "Reactivate on %s"
-msgstr ""
+msgstr "重新啟用%s"
 
 #: src/usr/local/www/diag_gmirror.php:331
 msgid "Clear Metadata"
@@ -8820,7 +8823,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_halt.php:72 src/usr/local/www/diag_halt.php:74
 msgid "Halt"
-msgstr ""
+msgstr "關機"
 
 #: src/usr/local/www/diag_halt.php:72
 msgid "Halt the system and power off"
@@ -8843,7 +8846,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_limiter_info.php:39
 msgid "Limiters:"
-msgstr ""
+msgstr "限制器"
 
 #: src/usr/local/www/diag_limiter_info.php:43 src/usr/local/www/head.inc:341
 #: src/usr/local/www/status_queues.php:110
@@ -8861,14 +8864,14 @@ msgstr ""
 #: src/usr/local/www/diag_ndp.php:96 src/usr/local/www/diag_ndp.php:101
 #: src/usr/local/www/head.inc:380
 msgid "NDP Table"
-msgstr ""
+msgstr "NDP Table"
 
 #: src/usr/local/www/diag_ndp.php:108 src/usr/local/www/interfaces.php:611
 #: src/usr/local/www/services_dhcpv6.php:1008
 #: src/usr/local/www/services_dhcpv6_edit.php:227
 #: src/usr/local/www/status_dhcpv6_leases.php:437
 msgid "IPv6 address"
-msgstr ""
+msgstr "IPv6 位址"
 
 #: src/usr/local/www/diag_packet_capture.php:82
 #: src/usr/local/www/diag_packet_capture.php:405
@@ -8880,20 +8883,20 @@ msgid "Packet Capture"
 msgstr "捕捉封包"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:420
-#: src/usr/local/www/system_certmanager.php:1035
+#: src/usr/local/www/system_camanager.php:416
+#: src/usr/local/www/system_certmanager.php:1027
 msgid "OpenVPN Server"
-msgstr ""
+msgstr "OpenVPN 伺服器"
 
 #: src/usr/local/www/diag_packet_capture.php:107
-#: src/usr/local/www/system_camanager.php:423
-#: src/usr/local/www/system_certmanager.php:1038
+#: src/usr/local/www/system_camanager.php:419
+#: src/usr/local/www/system_certmanager.php:1030
 msgid "OpenVPN Client"
-msgstr ""
+msgstr "OpenVPN 客戶端"
 
 #: src/usr/local/www/diag_packet_capture.php:129
 msgid "Invalid interface."
-msgstr ""
+msgstr "無效的網路介面."
 
 #: src/usr/local/www/diag_packet_capture.php:133
 msgid "Invalid address family."
@@ -8901,19 +8904,19 @@ msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:138
 msgid "IPv4 with ICMPv6 is not valid."
-msgstr ""
+msgstr "帶有 ICMPv6 的IPv4無效。"
 
 #: src/usr/local/www/diag_packet_capture.php:141
 msgid "IPv6 with ICMP is not valid."
-msgstr ""
+msgstr "帶有 ICMPv6 的IPv4無效。"
 
 #: src/usr/local/www/diag_packet_capture.php:144
 msgid "IPv6 with ARP is not valid."
-msgstr ""
+msgstr "帶有ARP的IPv6無效。"
 
 #: src/usr/local/www/diag_packet_capture.php:149
 msgid "Invalid protocol."
-msgstr ""
+msgstr "無效的通訊協定"
 
 #: src/usr/local/www/diag_packet_capture.php:163
 #, php-format
@@ -8939,21 +8942,21 @@ msgstr ""
 #: src/usr/local/www/status_dhcpv6_leases.php:442
 #: src/usr/local/www/status_dhcpv6_leases.php:537
 msgid "Start"
-msgstr ""
+msgstr "啟動"
 
 #: src/usr/local/www/diag_packet_capture.php:219
 #: src/usr/local/www/diag_packet_capture.php:379
 #: src/usr/local/www/diag_packet_capture.php:389
 msgid "Stop"
-msgstr ""
+msgstr "停止"
 
 #: src/usr/local/www/diag_packet_capture.php:246
 msgid "Exclude"
-msgstr ""
+msgstr "排除"
 
 #: src/usr/local/www/diag_packet_capture.php:276
 msgid "Packet Capture Options"
-msgstr ""
+msgstr "封包擷取選項"
 
 #: src/usr/local/www/diag_packet_capture.php:280
 #: src/usr/local/www/firewall_nat_1to1_edit.php:462
@@ -8974,7 +8977,7 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:517
 #: src/usr/local/www/vpn_openvpn_server.php:729
 msgid "*Interface"
-msgstr ""
+msgstr "*網路介面"
 
 #: src/usr/local/www/diag_packet_capture.php:283
 msgid "Select the interface on which to capture traffic. "
@@ -8982,7 +8985,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:287
 msgid "Promiscuous"
-msgstr ""
+msgstr "混和"
 
 #: src/usr/local/www/diag_packet_capture.php:290
 #, php-format
@@ -8994,11 +8997,11 @@ msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:302
 msgid "IPv4 Only"
-msgstr ""
+msgstr "僅限IPv4"
 
 #: src/usr/local/www/diag_packet_capture.php:303
 msgid "IPv6 Only"
-msgstr ""
+msgstr "僅限IPv6"
 
 #: src/usr/local/www/diag_packet_capture.php:299
 #: src/usr/local/www/firewall_rules_edit.php:1267
@@ -9019,7 +9022,7 @@ msgstr ""
 #: src/usr/local/www/vpn_openvpn_client.php:502
 #: src/usr/local/www/vpn_openvpn_server.php:714
 msgid "*Protocol"
-msgstr ""
+msgstr "*通訊協定"
 
 #: src/usr/local/www/diag_packet_capture.php:312
 msgid "Select the protocol to capture, or \"Any\". "
@@ -9027,7 +9030,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:316
 msgid "Host Address"
-msgstr ""
+msgstr "主機位址"
 
 #: src/usr/local/www/diag_packet_capture.php:319
 #, php-format
@@ -9065,7 +9068,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:335
 msgid "Packet Length"
-msgstr ""
+msgstr "封包長度"
 
 #: src/usr/local/www/diag_packet_capture.php:338
 msgid ""
@@ -9090,24 +9093,24 @@ msgstr ""
 #: src/usr/local/www/diag_packet_capture.php:354
 #: src/usr/local/www/services_router_advertisements.php:115
 msgid "Normal"
-msgstr ""
+msgstr "一般"
 
 #: src/usr/local/www/diag_packet_capture.php:355
 msgid "Medium"
-msgstr ""
+msgstr "中"
 
 #: src/usr/local/www/diag_packet_capture.php:356
 #: src/usr/local/www/services_router_advertisements.php:116
 msgid "High"
-msgstr ""
+msgstr "高"
 
 #: src/usr/local/www/diag_packet_capture.php:357
 msgid "Full"
-msgstr ""
+msgstr "全部"
 
 #: src/usr/local/www/diag_packet_capture.php:352
 msgid "Level of detail"
-msgstr ""
+msgstr "詳細程度"
 
 #: src/usr/local/www/diag_packet_capture.php:359
 #, php-format
@@ -9119,7 +9122,7 @@ msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:365
 msgid "Reverse DNS Lookup"
-msgstr ""
+msgstr "DNS反向查詢"
 
 #: src/usr/local/www/diag_packet_capture.php:368
 #, php-format
@@ -9130,35 +9133,35 @@ msgstr ""
 
 #: src/usr/local/www/diag_packet_capture.php:398
 msgid "View Capture"
-msgstr ""
+msgstr "檢視擷取"
 
 #: src/usr/local/www/diag_packet_capture.php:411
 msgid "Last capture"
-msgstr ""
+msgstr "最後擷取"
 
 #: src/usr/local/www/diag_packet_capture.php:461
 msgid "Packet capture is running."
-msgstr ""
+msgstr "封包擷取執行中"
 
 #: src/usr/local/www/diag_packet_capture.php:471
 msgid "Packets Captured"
-msgstr ""
+msgstr "封包擷取"
 
 #: src/usr/local/www/diag_pf_info.php:31 src/usr/local/www/head.inc:384
 msgid "pfInfo"
-msgstr ""
+msgstr "pfInfo"
 
 #: src/usr/local/www/diag_pf_info.php:63
 msgid "Auto Update Page"
-msgstr ""
+msgstr "自動更新頁面"
 
 #: src/usr/local/www/diag_pf_info.php:67
 msgid "Refresh"
-msgstr ""
+msgstr "重新整理"
 
 #: src/usr/local/www/diag_pf_info.php:102 src/usr/local/www/diag_pftop.php:167
 msgid "Output"
-msgstr ""
+msgstr "輸出"
 
 #: src/usr/local/www/diag_pf_info.php:104
 msgid "Gathering PF information, please wait..."
@@ -9166,39 +9169,39 @@ msgstr ""
 
 #: src/usr/local/www/diag_pftop.php:31 src/usr/local/www/head.inc:385
 msgid "pfTop"
-msgstr ""
+msgstr "pfTop"
 
 #: src/usr/local/www/diag_pftop.php:91
 msgid "pfTop Configuration"
-msgstr ""
+msgstr "pfTop 配置"
 
 #: src/usr/local/www/diag_pftop.php:95
 msgid "label"
-msgstr ""
+msgstr "標記"
 
 #: src/usr/local/www/diag_pftop.php:96
 msgid "long"
-msgstr ""
+msgstr "long"
 
 #: src/usr/local/www/diag_pftop.php:98
 msgid "rules"
-msgstr ""
+msgstr "規則"
 
 #: src/usr/local/www/diag_pftop.php:99
 msgid "size"
-msgstr ""
+msgstr "大小"
 
 #: src/usr/local/www/diag_pftop.php:100
 msgid "speed"
-msgstr ""
+msgstr "速度"
 
 #: src/usr/local/www/diag_pftop.php:101
 msgid "state"
-msgstr ""
+msgstr "狀態"
 
 #: src/usr/local/www/diag_pftop.php:102
 msgid "time"
-msgstr ""
+msgstr "時間"
 
 #: src/usr/local/www/diag_pftop.php:106 src/usr/local/www/diag_smart.php:199
 #: src/usr/local/www/diag_smart.php:352
@@ -9214,42 +9217,42 @@ msgstr ""
 
 #: src/usr/local/www/diag_pftop.php:119
 msgid "Destination Address"
-msgstr ""
+msgstr "目的位址"
 
 #: src/usr/local/www/diag_pftop.php:120 src/usr/local/www/easyrule.php:96
 #: src/usr/local/www/firewall_nat_out.php:281
 #: src/usr/local/www/firewall_nat_out.php:534
 #: src/usr/local/www/status_logs_common.inc:477
 msgid "Destination Port"
-msgstr ""
+msgstr "目的通訊埠"
 
 #: src/usr/local/www/diag_pftop.php:121
 msgid "Expiry"
-msgstr ""
+msgstr "到期"
 
 #: src/usr/local/www/diag_pftop.php:122
 msgid "Peak"
-msgstr ""
+msgstr "峰值"
 
 #: src/usr/local/www/diag_pftop.php:123
 msgid "Packet"
-msgstr ""
+msgstr "封包"
 
 #: src/usr/local/www/diag_pftop.php:126 src/usr/local/www/diag_testport.php:237
 #: src/usr/local/www/firewall_nat_out.php:279
 #: src/usr/local/www/firewall_nat_out.php:532
 #: src/usr/local/www/status_logs_common.inc:436
 msgid "Source Port"
-msgstr ""
+msgstr "來源埠"
 
 #: src/usr/local/www/diag_pftop.php:127 src/usr/local/www/firewall_nat.php:228
 #: src/usr/local/www/status_logs_settings.php:345
 msgid "Source Address"
-msgstr ""
+msgstr "來源位址"
 
 #: src/usr/local/www/diag_pftop.php:113 src/usr/local/www/status_graph.php:151
 msgid "Sort by"
-msgstr ""
+msgstr "排序方式"
 
 #: src/usr/local/www/diag_pftop.php:134
 msgid "Maximum # of States"
@@ -9270,7 +9273,7 @@ msgstr ""
 #: src/usr/local/www/status_ipsec_leases.php:56
 #: src/usr/local/www/services_rfc2136_edit.php:212
 msgid "Host"
-msgstr ""
+msgstr "主機"
 
 #: src/usr/local/www/diag_ping.php:54
 #, php-format
@@ -9293,15 +9296,15 @@ msgstr ""
 #: src/usr/local/www/diag_ping.php:139 src/usr/local/www/diag_testport.php:259
 #: src/usr/local/www/diag_traceroute.php:133
 msgid "*IP Protocol"
-msgstr ""
+msgstr "*IP通訊協定"
 
 #: src/usr/local/www/diag_ping.php:148
 msgid "Automatically selected (default)"
-msgstr ""
+msgstr "自動選取(預設值)"
 
 #: src/usr/local/www/diag_ping.php:146
 msgid "*Source address"
-msgstr ""
+msgstr "*來源位址"
 
 #: src/usr/local/www/diag_ping.php:149
 msgid "Select source address for the ping."
@@ -9433,10 +9436,10 @@ msgstr ""
 #: src/usr/local/www/diag_routes.php:106 src/usr/local/www/diag_tables.php:147
 #: src/usr/local/www/head.inc:228 src/usr/local/www/pkg_mgr_install.php:244
 #: src/usr/local/www/pkg_mgr_installed.php:190
-#: src/usr/local/www/system_certmanager.php:467
-#: src/usr/local/www/system_certmanager.php:524
-#: src/usr/local/www/system_certmanager.php:890
-#: src/usr/local/www/system_certmanager.php:938
+#: src/usr/local/www/system_certmanager.php:458
+#: src/usr/local/www/system_certmanager.php:515
+#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:930
 #: src/usr/local/www/system_update_settings.php:107
 #: src/usr/local/www/widgets/widgets/installed_packages.widget.php:120
 msgid "Update"
@@ -10062,7 +10065,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:194
 #: src/usr/local/www/services_unbound_advanced.php:201
 #: src/usr/local/www/status_lb_pool.php:110
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 #: src/usr/local/www/system_gateway_groups.php:114
 #: src/usr/local/www/system_gateways.php:239
 #: src/usr/local/www/system_routes.php:225 src/usr/local/www/vpn_ipsec.php:237
@@ -10142,9 +10145,9 @@ msgstr ""
 #: src/usr/local/www/services_unbound_acls.php:338
 #: src/usr/local/www/services_wol.php:207
 #: src/usr/local/www/system_authservers.php:471
-#: src/usr/local/www/system_camanager.php:453
-#: src/usr/local/www/system_certmanager.php:773
-#: src/usr/local/www/system_certmanager.php:1093
+#: src/usr/local/www/system_camanager.php:449
+#: src/usr/local/www/system_certmanager.php:764
+#: src/usr/local/www/system_certmanager.php:1085
 #: src/usr/local/www/system_crlmanager.php:542
 #: src/usr/local/www/system_gateway_groups.php:188
 #: src/usr/local/www/system_gateways.php:332
@@ -10157,8 +10160,8 @@ msgstr ""
 #: src/usr/local/www/vpn_ipsec_keys.php:169
 #: src/usr/local/www/vpn_l2tp_users.php:124
 #: src/usr/local/www/vpn_openvpn_client.php:945
-#: src/usr/local/www/vpn_openvpn_csc.php:697
-#: src/usr/local/www/vpn_openvpn_server.php:1384
+#: src/usr/local/www/vpn_openvpn_csc.php:701
+#: src/usr/local/www/vpn_openvpn_server.php:1388
 msgid "Add"
 msgstr "新增"
 
@@ -10247,10 +10250,10 @@ msgstr ""
 #: src/usr/local/www/services_rfc2136_edit.php:148
 #: src/usr/local/www/services_unbound_acls.php:180
 #: src/usr/local/www/services_wol_edit.php:111
-#: src/usr/local/www/system_advanced_sysctl.php:124
+#: src/usr/local/www/system_advanced_sysctl.php:118
 #: src/usr/local/www/system_authservers.php:412
-#: src/usr/local/www/system_camanager.php:325
-#: src/usr/local/www/system_certmanager.php:525
+#: src/usr/local/www/system_camanager.php:321
+#: src/usr/local/www/system_certmanager.php:516
 #: src/usr/local/www/system_crlmanager.php:262
 #: src/usr/local/www/system_gateway_groups_edit.php:147
 #: src/usr/local/www/system_gateways_edit.php:551
@@ -10258,7 +10261,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_routes_edit.php:224
 #: src/usr/local/www/system_usermanager.php:546
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/vpn_ipsec_keys_edit.php:122
 #: src/usr/local/www/vpn_l2tp_users_edit.php:29
 #: src/usr/local/www/vpn_openvpn_client.php:454
@@ -10544,8 +10547,8 @@ msgstr ""
 #: src/usr/local/www/system_authservers.php:233
 #: src/usr/local/www/system_authservers.php:256
 #: src/usr/local/www/system_authservers.php:443
-#: src/usr/local/www/system_certmanager.php:740
-#: src/usr/local/www/system_certmanager.php:748
+#: src/usr/local/www/system_certmanager.php:731
+#: src/usr/local/www/system_certmanager.php:739
 #: src/usr/local/www/vpn_ipsec_keys.php:102
 #: src/usr/local/www/vpn_ipsec_phase2.php:524
 #: src/usr/local/www/vpn_ipsec_phase2.php:550
@@ -12046,7 +12049,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:297
 #: src/usr/local/www/system_groupmanager_addprivs.php:139
 #: src/usr/local/www/system_usermanager.php:566
-#: src/usr/local/www/system_usermanager_addprivs.php:137
+#: src/usr/local/www/system_usermanager_addprivs.php:131
 #: src/usr/local/www/system_usermanager_settings.php:109
 #: src/usr/local/www/system_usermanager_settings.php:184
 #: src/usr/local/www/system_usermanager_settings.php:195
@@ -13737,8 +13740,8 @@ msgstr ""
 #: src/usr/local/www/guiconfig.inc:1139
 #: src/usr/local/www/services_dhcp.php:1321
 #: src/usr/local/www/services_dhcpv6.php:947
-#: src/usr/local/www/system_advanced_sysctl.php:163
-#: src/usr/local/www/system_certmanager.php:755
+#: src/usr/local/www/system_advanced_sysctl.php:157
+#: src/usr/local/www/system_certmanager.php:746
 msgid "Value"
 msgstr "值"
 
@@ -13748,9 +13751,9 @@ msgstr "值"
 #: src/usr/local/www/system_advanced_misc.php:293
 #: src/usr/local/www/system_advanced_network.php:141
 #: src/usr/local/www/system_advanced_notifications.php:194
-#: src/usr/local/www/system_advanced_sysctl.php:120
+#: src/usr/local/www/system_advanced_sysctl.php:114
 #: src/usr/local/www/system_gateways_edit.php:705
-#: src/usr/local/www/vpn_openvpn_csc.php:579
+#: src/usr/local/www/vpn_openvpn_csc.php:582
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Advanced"
 msgstr "進階"
@@ -13787,7 +13790,7 @@ msgstr "憑證管理"
 #: src/usr/local/www/system_groupmanager.php:276
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
 #: src/usr/local/www/system_usermanager.php:542
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 #: src/usr/local/www/system_usermanager_settings.php:109
 msgid "User Manager"
 msgstr "使用者管理"
@@ -15944,7 +15947,7 @@ msgstr ""
 #: src/usr/local/www/interfaces_ppps_edit.php:839
 #: src/usr/local/www/vpn_ipsec_phase2.php:674
 #: src/usr/local/www/vpn_openvpn_client.php:859
-#: src/usr/local/www/vpn_openvpn_server.php:1288
+#: src/usr/local/www/vpn_openvpn_server.php:1292
 #: src/usr/local/www/interfaces.php:1938 src/usr/local/www/interfaces.php:2122
 msgid "Advanced Configuration"
 msgstr ""
@@ -16483,7 +16486,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_groups_edit.php:243
 #: src/usr/local/www/interfaces_vlan_edit.php:225
-#: src/usr/local/www/system_advanced_sysctl.php:227
+#: src/usr/local/www/system_advanced_sysctl.php:221
 msgid "id"
 msgstr ""
 
@@ -16911,7 +16914,7 @@ msgstr ""
 
 #: src/usr/local/www/interfaces_ppps_edit.php:861
 #: src/usr/local/www/vpn_openvpn_client.php:824
-#: src/usr/local/www/vpn_openvpn_server.php:1074
+#: src/usr/local/www/vpn_openvpn_server.php:1078
 msgid "Compression"
 msgstr ""
 
@@ -20167,7 +20170,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/services_dhcp.php:940
-#: src/usr/local/www/vpn_openvpn_csc.php:552
+#: src/usr/local/www/vpn_openvpn_csc.php:555
 msgid "WINS servers"
 msgstr "WINS servers"
 
@@ -20369,14 +20372,14 @@ msgstr ""
 #: src/usr/local/www/services_dhcp.php:1138
 #: src/usr/local/www/services_dhcp_edit.php:652
 #: src/usr/local/www/services_dhcpv6.php:835
-#: src/usr/local/www/vpn_openvpn_server.php:1214
+#: src/usr/local/www/vpn_openvpn_server.php:1218
 msgid "NTP Server 1"
 msgstr "NTP Server 1"
 
 #: src/usr/local/www/services_dhcp.php:1145
 #: src/usr/local/www/services_dhcp_edit.php:660
 #: src/usr/local/www/services_dhcpv6.php:843
-#: src/usr/local/www/vpn_openvpn_server.php:1221
+#: src/usr/local/www/vpn_openvpn_server.php:1225
 msgid "NTP Server 2"
 msgstr "NTP Server 2"
 
@@ -20693,7 +20696,7 @@ msgstr "WINS Servers"
 #: src/usr/local/www/services_dhcpv6.php:687
 #: src/usr/local/www/services_pppoe_edit.php:353
 #: src/usr/local/www/system.php:469 src/usr/local/www/vpn_ipsec_mobile.php:607
-#: src/usr/local/www/vpn_openvpn_csc.php:460
+#: src/usr/local/www/vpn_openvpn_csc.php:463
 msgid "DNS Servers"
 msgstr "DNS Servers"
 
@@ -20791,7 +20794,7 @@ msgstr "NTP servers"
 
 #: src/usr/local/www/services_dhcp_edit.php:648
 #: src/usr/local/www/services_dhcpv6.php:831
-#: src/usr/local/www/vpn_openvpn_csc.php:501
+#: src/usr/local/www/vpn_openvpn_csc.php:504
 msgid "NTP Servers"
 msgstr "NTP Servers"
 
@@ -21270,7 +21273,7 @@ msgstr ""
 #: src/usr/local/www/services_unbound.php:344
 #: src/usr/local/www/services_unbound.php:358
 #: src/usr/local/www/vpn_openvpn_client.php:864
-#: src/usr/local/www/vpn_openvpn_server.php:1292
+#: src/usr/local/www/vpn_openvpn_server.php:1296
 msgid "Custom options"
 msgstr ""
 
@@ -23509,7 +23512,7 @@ msgstr ""
 #: src/usr/local/www/status.php:333
 #, php-format
 msgid ""
-"Whenz the page has finished loading, the output will be stored in %1$s. It "
+"When the page has finished loading, the output will be stored in %1$s. It "
 "may be downloaded via scp or %2$sDiagnostics > Command Prompt%3$s."
 msgstr ""
 
@@ -25184,21 +25187,21 @@ msgid "Remote log servers"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:364
-#: src/usr/local/www/vpn_openvpn_csc.php:473
-#: src/usr/local/www/vpn_openvpn_csc.php:514
-#: src/usr/local/www/vpn_openvpn_csc.php:564
+#: src/usr/local/www/vpn_openvpn_csc.php:476
+#: src/usr/local/www/vpn_openvpn_csc.php:517
+#: src/usr/local/www/vpn_openvpn_csc.php:567
 msgid "Server 1"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:372
-#: src/usr/local/www/vpn_openvpn_csc.php:480
-#: src/usr/local/www/vpn_openvpn_csc.php:521
-#: src/usr/local/www/vpn_openvpn_csc.php:571
+#: src/usr/local/www/vpn_openvpn_csc.php:483
+#: src/usr/local/www/vpn_openvpn_csc.php:524
+#: src/usr/local/www/vpn_openvpn_csc.php:574
 msgid "Server 2"
 msgstr ""
 
 #: src/usr/local/www/status_logs_settings.php:380
-#: src/usr/local/www/vpn_openvpn_csc.php:487
+#: src/usr/local/www/vpn_openvpn_csc.php:490
 msgid "Server 3"
 msgstr ""
 
@@ -25355,7 +25358,7 @@ msgstr ""
 
 #: src/usr/local/www/status_openvpn.php:103
 #: src/usr/local/www/status_openvpn.php:188
-#: src/usr/local/www/vpn_openvpn_csc.php:659
+#: src/usr/local/www/vpn_openvpn_csc.php:663
 msgid "Common Name"
 msgstr ""
 
@@ -25714,7 +25717,7 @@ msgstr ""
 
 #: src/usr/local/www/system.php:569
 #: src/usr/local/www/system_advanced_admin.php:308
-#: src/usr/local/www/system_certmanager.php:1029
+#: src/usr/local/www/system_certmanager.php:1021
 msgid "webConfigurator"
 msgstr ""
 
@@ -25768,7 +25771,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:307
 #: src/usr/local/www/system_advanced_network.php:154
 #: src/usr/local/www/system_advanced_notifications.php:207
-#: src/usr/local/www/system_advanced_sysctl.php:142
+#: src/usr/local/www/system_advanced_sysctl.php:136
 msgid "Admin Access"
 msgstr ""
 
@@ -25778,7 +25781,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:308
 #: src/usr/local/www/system_advanced_network.php:155
 #: src/usr/local/www/system_advanced_notifications.php:208
-#: src/usr/local/www/system_advanced_sysctl.php:143
+#: src/usr/local/www/system_advanced_sysctl.php:137
 msgid "Firewall & NAT"
 msgstr ""
 
@@ -25788,7 +25791,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:310
 #: src/usr/local/www/system_advanced_network.php:157
 #: src/usr/local/www/system_advanced_notifications.php:210
-#: src/usr/local/www/system_advanced_sysctl.php:145
+#: src/usr/local/www/system_advanced_sysctl.php:139
 #: src/usr/local/www/widgets/widgets/thermal_sensors.widget.php:246
 msgid "Miscellaneous"
 msgstr ""
@@ -25798,9 +25801,9 @@ msgstr ""
 #: src/usr/local/www/system_advanced_misc.php:311
 #: src/usr/local/www/system_advanced_network.php:158
 #: src/usr/local/www/system_advanced_notifications.php:211
-#: src/usr/local/www/system_advanced_sysctl.php:120
-#: src/usr/local/www/system_advanced_sysctl.php:146
-#: src/usr/local/www/system_advanced_sysctl.php:153
+#: src/usr/local/www/system_advanced_sysctl.php:114
+#: src/usr/local/www/system_advanced_sysctl.php:140
+#: src/usr/local/www/system_advanced_sysctl.php:147
 msgid "System Tunables"
 msgstr ""
 
@@ -25810,7 +25813,7 @@ msgstr ""
 #: src/usr/local/www/system_advanced_network.php:159
 #: src/usr/local/www/system_advanced_notifications.php:194
 #: src/usr/local/www/system_advanced_notifications.php:212
-#: src/usr/local/www/system_advanced_sysctl.php:147
+#: src/usr/local/www/system_advanced_sysctl.php:141
 msgid "Notifications"
 msgstr ""
 
@@ -27155,51 +27158,51 @@ msgid ""
 "A test notification will be sent even if the service is marked as disabled."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:98
+#: src/usr/local/www/system_advanced_sysctl.php:92
 msgid "Both a name and a value must be specified."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:100
+#: src/usr/local/www/system_advanced_sysctl.php:94
 msgid "The value may only contain alphanumeric characters, -, _, %, and /."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:138
+#: src/usr/local/www/system_advanced_sysctl.php:132
 msgid "The firewall tunables have changed."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "NOTE: "
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:158
+#: src/usr/local/www/system_advanced_sysctl.php:152
 msgid "The options on this page are intended for use by advanced users only."
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:161
+#: src/usr/local/www/system_advanced_sysctl.php:155
 msgid "Tunable Name"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:164
+#: src/usr/local/www/system_advanced_sysctl.php:158
 msgid "New"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:184
+#: src/usr/local/www/system_advanced_sysctl.php:178
 msgid "Edit tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:186
+#: src/usr/local/www/system_advanced_sysctl.php:180
 msgid "Delete/Reset tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:201
+#: src/usr/local/www/system_advanced_sysctl.php:195
 msgid "Edit Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:205
+#: src/usr/local/www/system_advanced_sysctl.php:199
 msgid "*Tunable"
 msgstr ""
 
-#: src/usr/local/www/system_advanced_sysctl.php:212
+#: src/usr/local/www/system_advanced_sysctl.php:206
 msgid "*Value"
 msgstr ""
 
@@ -27218,13 +27221,13 @@ msgstr ""
 
 #: src/usr/local/www/system_authservers.php:232
 #: src/usr/local/www/system_authservers.php:255
-#: src/usr/local/www/system_camanager.php:170
-#: src/usr/local/www/system_camanager.php:187
-#: src/usr/local/www/system_camanager.php:202
-#: src/usr/local/www/system_certmanager.php:228
-#: src/usr/local/www/system_certmanager.php:244
-#: src/usr/local/www/system_certmanager.php:262
-#: src/usr/local/www/system_certmanager.php:474
+#: src/usr/local/www/system_camanager.php:166
+#: src/usr/local/www/system_camanager.php:183
+#: src/usr/local/www/system_camanager.php:198
+#: src/usr/local/www/system_certmanager.php:219
+#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_certmanager.php:253
+#: src/usr/local/www/system_certmanager.php:465
 #: src/usr/local/www/system_crlmanager.php:203
 #: src/usr/local/www/system_crlmanager.php:209
 #: src/usr/local/www/system_usermanager.php:186
@@ -27301,7 +27304,7 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager.php:298
 #: src/usr/local/www/system_groupmanager_addprivs.php:140
 #: src/usr/local/www/system_usermanager.php:567
-#: src/usr/local/www/system_usermanager_addprivs.php:138
+#: src/usr/local/www/system_usermanager_addprivs.php:132
 #: src/usr/local/www/system_usermanager_settings.php:185
 msgid "Authentication Servers"
 msgstr ""
@@ -27312,8 +27315,8 @@ msgstr ""
 #: src/usr/local/www/system_usermanager.php:542
 #: src/usr/local/www/system_usermanager.php:564
 #: src/usr/local/www/system_usermanager.php:574
-#: src/usr/local/www/system_usermanager_addprivs.php:45
-#: src/usr/local/www/system_usermanager_addprivs.php:135
+#: src/usr/local/www/system_usermanager_addprivs.php:41
+#: src/usr/local/www/system_usermanager_addprivs.php:129
 #: src/usr/local/www/system_usermanager_settings.php:182
 #: src/usr/local/www/vpn_l2tp.php:183 src/usr/local/www/vpn_l2tp_users.php:29
 #: src/usr/local/www/vpn_l2tp_users.php:85
@@ -27329,7 +27332,7 @@ msgstr "使用者"
 #: src/usr/local/www/system_groupmanager_addprivs.php:138
 #: src/usr/local/www/system_usermanager.php:565
 #: src/usr/local/www/system_usermanager.php:584
-#: src/usr/local/www/system_usermanager_addprivs.php:136
+#: src/usr/local/www/system_usermanager_addprivs.php:130
 #: src/usr/local/www/system_usermanager_settings.php:183
 msgid "Groups"
 msgstr ""
@@ -27339,12 +27342,12 @@ msgid "Server Name"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:456
-#: src/usr/local/www/vpn_openvpn_server.php:1368
+#: src/usr/local/www/vpn_openvpn_server.php:1372
 msgid "Edit server"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:457
-#: src/usr/local/www/vpn_openvpn_server.php:1369
+#: src/usr/local/www/vpn_openvpn_server.php:1373
 msgid "Delete server"
 msgstr ""
 
@@ -27353,9 +27356,9 @@ msgid "Server Settings"
 msgstr ""
 
 #: src/usr/local/www/system_authservers.php:493
-#: src/usr/local/www/system_camanager.php:485
-#: src/usr/local/www/system_certmanager.php:590
-#: src/usr/local/www/system_certmanager.php:898
+#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_certmanager.php:581
+#: src/usr/local/www/system_certmanager.php:890
 #: src/usr/local/www/system_crlmanager.php:363
 #: src/usr/local/www/system_crlmanager.php:428
 msgid "*Descriptive name"
@@ -27569,331 +27572,331 @@ msgstr ""
 msgid "Create an intermediate Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:97
+#: src/usr/local/www/system_camanager.php:93
 #, php-format
 msgid "Certificate Authority %s and its CRLs (if any) successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:171
-#: src/usr/local/www/system_certmanager.php:229
+#: src/usr/local/www/system_camanager.php:167
+#: src/usr/local/www/system_certmanager.php:220
 msgid "Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:173
-#: src/usr/local/www/system_certmanager.php:232
+#: src/usr/local/www/system_camanager.php:169
+#: src/usr/local/www/system_certmanager.php:223
 msgid "This certificate does not appear to be valid."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:176
+#: src/usr/local/www/system_camanager.php:172
 msgid "Encrypted private keys are not yet supported."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:179
-#: src/usr/local/www/system_certmanager.php:235
+#: src/usr/local/www/system_camanager.php:175
+#: src/usr/local/www/system_certmanager.php:226
 msgid ""
 "The submitted private key does not match the submitted certificate data."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:188
-#: src/usr/local/www/system_camanager.php:204
-#: src/usr/local/www/system_certmanager.php:246
-#: src/usr/local/www/system_certmanager.php:263
+#: src/usr/local/www/system_camanager.php:184
+#: src/usr/local/www/system_camanager.php:200
+#: src/usr/local/www/system_certmanager.php:237
+#: src/usr/local/www/system_certmanager.php:254
 #: src/usr/local/www/system_usermanager.php:188
 #: src/usr/local/www/system_usermanager.php:901
 msgid "Key length"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:189
-#: src/usr/local/www/system_camanager.php:205
-#: src/usr/local/www/system_certmanager.php:248
+#: src/usr/local/www/system_camanager.php:185
+#: src/usr/local/www/system_camanager.php:201
+#: src/usr/local/www/system_certmanager.php:239
 #: src/usr/local/www/system_usermanager.php:189
 #: src/usr/local/www/system_usermanager.php:921
 #: src/usr/local/www/vpn_ipsec_phase2.php:667
 msgid "Lifetime"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:190
-#: src/usr/local/www/system_camanager.php:206
-#: src/usr/local/www/system_certmanager.php:249
-#: src/usr/local/www/system_certmanager.php:264
+#: src/usr/local/www/system_camanager.php:186
+#: src/usr/local/www/system_camanager.php:202
+#: src/usr/local/www/system_certmanager.php:240
+#: src/usr/local/www/system_certmanager.php:255
 msgid "Distinguished name Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:191
-#: src/usr/local/www/system_camanager.php:207
-#: src/usr/local/www/system_certmanager.php:250
-#: src/usr/local/www/system_certmanager.php:265
+#: src/usr/local/www/system_camanager.php:187
+#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_certmanager.php:241
+#: src/usr/local/www/system_certmanager.php:256
 msgid "Distinguished name State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:192
-#: src/usr/local/www/system_camanager.php:208
-#: src/usr/local/www/system_certmanager.php:251
-#: src/usr/local/www/system_certmanager.php:266
+#: src/usr/local/www/system_camanager.php:188
+#: src/usr/local/www/system_camanager.php:204
+#: src/usr/local/www/system_certmanager.php:242
+#: src/usr/local/www/system_certmanager.php:257
 msgid "Distinguished name City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:193
-#: src/usr/local/www/system_camanager.php:209
-#: src/usr/local/www/system_certmanager.php:252
-#: src/usr/local/www/system_certmanager.php:267
+#: src/usr/local/www/system_camanager.php:189
+#: src/usr/local/www/system_camanager.php:205
+#: src/usr/local/www/system_certmanager.php:243
+#: src/usr/local/www/system_certmanager.php:258
 msgid "Distinguished name Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:194
-#: src/usr/local/www/system_camanager.php:210
-#: src/usr/local/www/system_certmanager.php:253
-#: src/usr/local/www/system_certmanager.php:268
+#: src/usr/local/www/system_camanager.php:190
+#: src/usr/local/www/system_camanager.php:206
+#: src/usr/local/www/system_certmanager.php:244
+#: src/usr/local/www/system_certmanager.php:259
 msgid "Distinguished name Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:195
-#: src/usr/local/www/system_camanager.php:211
-#: src/usr/local/www/system_certmanager.php:254
-#: src/usr/local/www/system_certmanager.php:269
+#: src/usr/local/www/system_camanager.php:191
+#: src/usr/local/www/system_camanager.php:207
+#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:260
 msgid "Distinguished name Common Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:203
+#: src/usr/local/www/system_camanager.php:199
 msgid "Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:218
+#: src/usr/local/www/system_camanager.php:214
 msgid "The field 'Descriptive Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:224
-#: src/usr/local/www/system_certmanager.php:340
+#: src/usr/local/www/system_camanager.php:220
+#: src/usr/local/www/system_certmanager.php:331
 msgid ""
 "The field 'Distinguished name Email Address' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:228
-#: src/usr/local/www/system_certmanager.php:344
+#: src/usr/local/www/system_camanager.php:224
+#: src/usr/local/www/system_certmanager.php:335
 msgid ""
 "The field 'Distinguished name Common Name' contains invalid characters."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:235
-#: src/usr/local/www/system_certmanager.php:352
-#: src/usr/local/www/system_certmanager.php:359
+#: src/usr/local/www/system_camanager.php:231
+#: src/usr/local/www/system_certmanager.php:343
+#: src/usr/local/www/system_certmanager.php:350
 msgid "Please select a valid Key Length."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:238
-#: src/usr/local/www/system_certmanager.php:355
-#: src/usr/local/www/system_certmanager.php:362
+#: src/usr/local/www/system_camanager.php:234
+#: src/usr/local/www/system_certmanager.php:346
+#: src/usr/local/www/system_certmanager.php:353
 msgid "Please select a valid Digest Algorithm."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_certmanager.php:521
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_certmanager.php:512
 #: src/usr/local/www/system_crlmanager.php:258
 msgid "Certificate Manager"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:321
-#: src/usr/local/www/system_camanager.php:350
-#: src/usr/local/www/system_certmanager.php:539
+#: src/usr/local/www/system_camanager.php:317
+#: src/usr/local/www/system_camanager.php:346
+#: src/usr/local/www/system_certmanager.php:530
 #: src/usr/local/www/system_crlmanager.php:341
 msgid "CAs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:351
-#: src/usr/local/www/system_camanager.php:367
-#: src/usr/local/www/system_certmanager.php:521
-#: src/usr/local/www/system_certmanager.php:540
-#: src/usr/local/www/system_certmanager.php:947
+#: src/usr/local/www/system_camanager.php:347
+#: src/usr/local/www/system_camanager.php:363
+#: src/usr/local/www/system_certmanager.php:512
+#: src/usr/local/www/system_certmanager.php:531
+#: src/usr/local/www/system_certmanager.php:939
 #: src/usr/local/www/system_crlmanager.php:342
 #: src/usr/local/www/system_crlmanager.php:585
 msgid "Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:352
-#: src/usr/local/www/system_certmanager.php:541
+#: src/usr/local/www/system_camanager.php:348
+#: src/usr/local/www/system_certmanager.php:532
 #: src/usr/local/www/system_crlmanager.php:258
 #: src/usr/local/www/system_crlmanager.php:343
 msgid "Certificate Revocation"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:358
+#: src/usr/local/www/system_camanager.php:354
 msgid "Certificate Authorities"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:365
+#: src/usr/local/www/system_camanager.php:361
 #: src/usr/local/www/system_crlmanager.php:584
 msgid "Internal"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:366
-#: src/usr/local/www/system_certmanager.php:954
+#: src/usr/local/www/system_camanager.php:362
+#: src/usr/local/www/system_certmanager.php:946
 msgid "Issuer"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:368
-#: src/usr/local/www/system_certmanager.php:955
+#: src/usr/local/www/system_camanager.php:364
+#: src/usr/local/www/system_certmanager.php:947
 msgid "Distinguished Name"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:381
-#: src/usr/local/www/system_certmanager.php:979
+#: src/usr/local/www/system_camanager.php:377
+#: src/usr/local/www/system_certmanager.php:971
 msgid "self-signed"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:383
-#: src/usr/local/www/system_certmanager.php:981
+#: src/usr/local/www/system_camanager.php:379
+#: src/usr/local/www/system_certmanager.php:973
 msgid "external"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid From"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:415
-#: src/usr/local/www/system_certmanager.php:1020
+#: src/usr/local/www/system_camanager.php:411
+#: src/usr/local/www/system_certmanager.php:1012
 msgid "Valid Until"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:426
-#: src/usr/local/www/system_certmanager.php:1041
+#: src/usr/local/www/system_camanager.php:422
+#: src/usr/local/www/system_certmanager.php:1033
 msgid "IPsec Tunnel"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:429
+#: src/usr/local/www/system_camanager.php:425
 msgid "LDAP Server"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:433
+#: src/usr/local/www/system_camanager.php:429
 msgid "Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:434
+#: src/usr/local/www/system_camanager.php:430
 msgid "Export CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:436
+#: src/usr/local/www/system_camanager.php:432
 msgid "Export key"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:439
+#: src/usr/local/www/system_camanager.php:435
 msgid "Delete CA and its CRLs"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:481
+#: src/usr/local/www/system_camanager.php:477
 msgid "Create / Edit CA"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:493
-#: src/usr/local/www/system_certmanager.php:582
+#: src/usr/local/www/system_camanager.php:489
+#: src/usr/local/www/system_certmanager.php:573
 #: src/usr/local/www/system_crlmanager.php:354
 msgid "*Method"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:501
+#: src/usr/local/www/system_camanager.php:497
 msgid "Existing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:506
-#: src/usr/local/www/system_certmanager.php:601
+#: src/usr/local/www/system_camanager.php:502
+#: src/usr/local/www/system_certmanager.php:592
 msgid "*Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:508
-#: src/usr/local/www/system_certmanager.php:603
+#: src/usr/local/www/system_camanager.php:504
+#: src/usr/local/www/system_certmanager.php:594
 msgid "Paste a certificate in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:512
+#: src/usr/local/www/system_camanager.php:508
 msgid "Certificate Private Key (optional)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:514
+#: src/usr/local/www/system_camanager.php:510
 msgid ""
 "Paste the private key for the above certificate here. This is optional in "
 "most cases, but is required when generating a Certificate Revocation List "
 "(CRL)."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:520
+#: src/usr/local/www/system_camanager.php:516
 msgid "Serial for next certificate"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:523
+#: src/usr/local/www/system_camanager.php:519
 msgid ""
 "Enter a decimal number to be used as the serial number for the next "
 "certificate to be created using this CA."
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:528
+#: src/usr/local/www/system_camanager.php:524
 msgid "Internal Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:540
+#: src/usr/local/www/system_camanager.php:536
 msgid "*Signing Certificate Authority"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:552
+#: src/usr/local/www/system_camanager.php:548
 msgid "*Key length (bits)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:559
-#: src/usr/local/www/system_certmanager.php:649
-#: src/usr/local/www/system_certmanager.php:791
+#: src/usr/local/www/system_camanager.php:555
+#: src/usr/local/www/system_certmanager.php:640
+#: src/usr/local/www/system_certmanager.php:783
 msgid "*Digest Algorithm"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:562
-#: src/usr/local/www/system_certmanager.php:652
+#: src/usr/local/www/system_camanager.php:558
+#: src/usr/local/www/system_certmanager.php:643
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible."
 ""
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:567
-#: src/usr/local/www/system_certmanager.php:665
+#: src/usr/local/www/system_camanager.php:563
+#: src/usr/local/www/system_certmanager.php:656
 msgid "*Lifetime (days)"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:574
-#: src/usr/local/www/system_certmanager.php:672
-#: src/usr/local/www/system_certmanager.php:799
+#: src/usr/local/www/system_camanager.php:570
+#: src/usr/local/www/system_certmanager.php:663
+#: src/usr/local/www/system_certmanager.php:791
 msgid "*Country Code"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:581
-#: src/usr/local/www/system_certmanager.php:679
-#: src/usr/local/www/system_certmanager.php:806
+#: src/usr/local/www/system_camanager.php:577
+#: src/usr/local/www/system_certmanager.php:670
+#: src/usr/local/www/system_certmanager.php:798
 msgid "*State or Province"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:589
-#: src/usr/local/www/system_certmanager.php:687
-#: src/usr/local/www/system_certmanager.php:814
+#: src/usr/local/www/system_camanager.php:585
+#: src/usr/local/www/system_certmanager.php:678
+#: src/usr/local/www/system_certmanager.php:806
 msgid "*City"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:597
-#: src/usr/local/www/system_certmanager.php:695
-#: src/usr/local/www/system_certmanager.php:822
+#: src/usr/local/www/system_camanager.php:593
+#: src/usr/local/www/system_certmanager.php:686
+#: src/usr/local/www/system_certmanager.php:814
 msgid "*Organization"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:605
-#: src/usr/local/www/system_certmanager.php:703
-#: src/usr/local/www/system_certmanager.php:830
+#: src/usr/local/www/system_camanager.php:601
+#: src/usr/local/www/system_certmanager.php:694
+#: src/usr/local/www/system_certmanager.php:822
 msgid "Organizational Unit"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:613
-#: src/usr/local/www/system_certmanager.php:711
-#: src/usr/local/www/system_certmanager.php:838
+#: src/usr/local/www/system_camanager.php:609
+#: src/usr/local/www/system_certmanager.php:702
+#: src/usr/local/www/system_certmanager.php:830
 msgid "*Email Address"
 msgstr ""
 
-#: src/usr/local/www/system_camanager.php:621
-#: src/usr/local/www/system_certmanager.php:719
-#: src/usr/local/www/system_certmanager.php:846
+#: src/usr/local/www/system_camanager.php:617
+#: src/usr/local/www/system_certmanager.php:710
+#: src/usr/local/www/system_certmanager.php:838
 #: src/usr/local/www/vpn_openvpn_csc.php:342
 msgid "*Common Name"
 msgstr ""
@@ -27910,185 +27913,185 @@ msgstr ""
 msgid "Create a Certificate Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:55
+#: src/usr/local/www/system_certmanager.php:52
 msgid "Choose an existing certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:103
+#: src/usr/local/www/system_certmanager.php:94
 #, php-format
 msgid "Certificate %s successfully deleted."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:230
+#: src/usr/local/www/system_certmanager.php:221
 msgid "Key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:245
+#: src/usr/local/www/system_certmanager.php:236
 #: src/usr/local/www/system_usermanager.php:187
 #: src/usr/local/www/system_usermanager.php:894
 msgid "Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:247
+#: src/usr/local/www/system_certmanager.php:238
 msgid "Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:274
+#: src/usr/local/www/system_certmanager.php:265
 msgid "Existing Certificate Choice"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:475
+#: src/usr/local/www/system_certmanager.php:466
 msgid "Final Certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:499
+#: src/usr/local/www/system_certmanager.php:490
 #, php-format
 msgid "The certificate modulus does not match the signing request modulus."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:577
+#: src/usr/local/www/system_certmanager.php:568
 msgid "Add a New Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:596
+#: src/usr/local/www/system_certmanager.php:587
 msgid "Import Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:607
+#: src/usr/local/www/system_certmanager.php:598
 msgid "*Private key data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:609
+#: src/usr/local/www/system_certmanager.php:600
 msgid "Paste a private key in X.509 PEM format here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:612
+#: src/usr/local/www/system_certmanager.php:603
 msgid "Internal Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:618
+#: src/usr/local/www/system_certmanager.php:609
 msgid "No internal Certificate Authorities have been defined. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:619
+#: src/usr/local/www/system_certmanager.php:610
 msgid ""
 "An internal CA must be defined in order to create an internal certificate. "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:620
+#: src/usr/local/www/system_certmanager.php:611
 #, php-format
 msgid "%1$sCreate%2$s an internal CA."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:617
-#: src/usr/local/www/system_certmanager.php:634
+#: src/usr/local/www/system_certmanager.php:608
+#: src/usr/local/www/system_certmanager.php:625
 msgid "*Certificate authority"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:642
-#: src/usr/local/www/system_certmanager.php:784
+#: src/usr/local/www/system_certmanager.php:633
+#: src/usr/local/www/system_certmanager.php:776
 msgid "*Key length"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:657
+#: src/usr/local/www/system_certmanager.php:648
 msgid "*Certificate Type"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:660
+#: src/usr/local/www/system_certmanager.php:651
 msgid ""
 "Type of certificate to generate. Used for placing restrictions on the usage "
 "of the generated certificate."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:736
+#: src/usr/local/www/system_certmanager.php:727
 msgid "Alternative Names"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:743
+#: src/usr/local/www/system_certmanager.php:734
 msgid "FQDN or Hostname"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:745
+#: src/usr/local/www/system_certmanager.php:736
 msgid "URI"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:746
+#: src/usr/local/www/system_certmanager.php:737
 msgid "email address"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:779
+#: src/usr/local/www/system_certmanager.php:771
 msgid "External Signing Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:794
+#: src/usr/local/www/system_certmanager.php:786
 msgid ""
 "NOTE: It is recommended to use an algorithm stronger than SHA1 when possible"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:853
+#: src/usr/local/www/system_certmanager.php:845
 msgid "Choose an Existing Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:882
+#: src/usr/local/www/system_certmanager.php:874
 msgid "*Existing Certificates"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:894
+#: src/usr/local/www/system_certmanager.php:886
 msgid "Complete Signing Request for "
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:905
+#: src/usr/local/www/system_certmanager.php:897
 msgid "Signing request data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:909
+#: src/usr/local/www/system_certmanager.php:901
 msgid ""
 "Copy the certificate signing data from here and forward it to a certificate "
 "authority for signing."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:913
+#: src/usr/local/www/system_certmanager.php:905
 msgid "*Final certificate data"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:916
+#: src/usr/local/www/system_certmanager.php:908
 msgid "Paste the certificate received from the certificate authority here."
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:991
+#: src/usr/local/www/system_certmanager.php:983
 msgid "private key only"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:996
+#: src/usr/local/www/system_certmanager.php:988
 msgid "external - signature pending"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1032
+#: src/usr/local/www/system_certmanager.php:1024
 msgid "User Cert"
 msgstr "使用者憑證"
 
-#: src/usr/local/www/system_certmanager.php:1068
+#: src/usr/local/www/system_certmanager.php:1060
 msgid "Export Certificate"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1069
-#: src/usr/local/www/system_certmanager.php:1074
+#: src/usr/local/www/system_certmanager.php:1061
+#: src/usr/local/www/system_certmanager.php:1066
 msgid "Export Key"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1070
+#: src/usr/local/www/system_certmanager.php:1062
 msgid "Export P12"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1072
+#: src/usr/local/www/system_certmanager.php:1064
 msgid "Update CSR"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1073
+#: src/usr/local/www/system_certmanager.php:1065
 msgid "Export Request"
 msgstr ""
 
-#: src/usr/local/www/system_certmanager.php:1077
+#: src/usr/local/www/system_certmanager.php:1069
 msgid "Delete Certificate"
 msgstr ""
 
@@ -28925,8 +28928,8 @@ msgstr ""
 #: src/usr/local/www/system_groupmanager_addprivs.php:162
 #: src/usr/local/www/system_groupmanager_addprivs.php:171
 #: src/usr/local/www/system_usermanager.php:830
-#: src/usr/local/www/system_usermanager_addprivs.php:152
-#: src/usr/local/www/system_usermanager_addprivs.php:161
+#: src/usr/local/www/system_usermanager_addprivs.php:146
+#: src/usr/local/www/system_usermanager_addprivs.php:155
 msgid "Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items."
 msgstr ""
 
@@ -28935,12 +28938,12 @@ msgid "Assigned Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:44
-#: src/usr/local/www/system_usermanager_addprivs.php:45
+#: src/usr/local/www/system_usermanager_addprivs.php:41
 msgid "Add Privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:68
-#: src/usr/local/www/system_usermanager_addprivs.php:71
+#: src/usr/local/www/system_usermanager_addprivs.php:65
 msgid "Selected privileges"
 msgstr ""
 
@@ -28949,22 +28952,22 @@ msgid "Add Privileges for "
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:157
-#: src/usr/local/www/system_usermanager_addprivs.php:147
+#: src/usr/local/www/system_usermanager_addprivs.php:141
 msgid "*Assigned privileges"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:166
-#: src/usr/local/www/system_usermanager_addprivs.php:156
+#: src/usr/local/www/system_usermanager_addprivs.php:150
 msgid "Shadow"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:178
-#: src/usr/local/www/system_usermanager_addprivs.php:168
+#: src/usr/local/www/system_usermanager_addprivs.php:162
 msgid "Show only the choices containing this term"
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:181
-#: src/usr/local/www/system_usermanager_addprivs.php:171
+#: src/usr/local/www/system_usermanager_addprivs.php:165
 msgid "Privilege information"
 msgstr ""
 
@@ -28976,12 +28979,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:189
-#: src/usr/local/www/system_usermanager_addprivs.php:179
+#: src/usr/local/www/system_usermanager_addprivs.php:173
 msgid "Please take care when granting these privileges."
 msgstr ""
 
 #: src/usr/local/www/system_groupmanager_addprivs.php:219
-#: src/usr/local/www/system_usermanager_addprivs.php:219
+#: src/usr/local/www/system_usermanager_addprivs.php:213
 msgid "Select a privilege from the list above for a description"
 msgstr ""
 
@@ -29598,18 +29601,18 @@ msgstr "請輸入此使用者驗證的SSH金鑰"
 msgid "IPsec Pre-Shared Key"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:143
+#: src/usr/local/www/system_usermanager_addprivs.php:137
 msgid "User Privileges"
 msgstr "使用者權限"
 
-#: src/usr/local/www/system_usermanager_addprivs.php:173
+#: src/usr/local/www/system_usermanager_addprivs.php:167
 msgid ""
 "The following privileges effectively give the user administrator-level "
 "access  because the user gains access to execute general commands, edit "
 "system files,  modify users, change passwords or similar:"
 msgstr ""
 
-#: src/usr/local/www/system_usermanager_addprivs.php:239
+#: src/usr/local/www/system_usermanager_addprivs.php:233
 msgid ""
 "(This privilege effectively gives administrator-level access to the user)"
 msgstr ""
@@ -30146,9 +30149,9 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:561
-#: src/usr/local/www/vpn_openvpn_csc.php:440
-#: src/usr/local/www/vpn_openvpn_server.php:1144
-#: src/usr/local/www/vpn_openvpn_server.php:1151
+#: src/usr/local/www/vpn_openvpn_csc.php:443
+#: src/usr/local/www/vpn_openvpn_server.php:1148
+#: src/usr/local/www/vpn_openvpn_server.php:1155
 msgid "DNS Default Domain"
 msgstr ""
 
@@ -30439,8 +30442,8 @@ msgid "Select a certificate previously configured in the Certificate Manager."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:772
-#: src/usr/local/www/vpn_openvpn_client.php:660
-#: src/usr/local/www/vpn_openvpn_client.php:666
+#: src/usr/local/www/vpn_openvpn_client.php:658
+#: src/usr/local/www/vpn_openvpn_client.php:664
 #: src/usr/local/www/vpn_openvpn_server.php:797
 #: src/usr/local/www/vpn_openvpn_server.php:803
 msgid "*Peer Certificate Authority"
@@ -30457,8 +30460,8 @@ msgid "Phase 1 Proposal (Algorithms)"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_phase1.php:781
-#: src/usr/local/www/vpn_openvpn_client.php:709
-#: src/usr/local/www/vpn_openvpn_server.php:888
+#: src/usr/local/www/vpn_openvpn_client.php:707
+#: src/usr/local/www/vpn_openvpn_server.php:890
 msgid "*Encryption Algorithm"
 msgstr ""
 
@@ -30741,43 +30744,44 @@ msgid "Configure Unique IDs as"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_settings.php:250
+#, php-format
 msgid ""
 "Whether a particular participant ID should be kept unique, with any new "
 "IKE_SA using an ID deemed to replace all old ones using that ID. Participant "
 "IDs normally are unique, so a new IKE_SA using the same ID is almost "
-"invariably intended to replace an old one. The difference between <b>no</b> "
-"and <b>never</b> is that the old IKE_SAs will be replaced when receiving an "
+"invariably intended to replace an old one. The difference between %1$sno%2$s "
+"and %1$snever%2$s is that the old IKE_SAs will be replaced when receiving an "
 "INITIAL_CONTACT notify if the option is no but will ignore these notifies if "
-"<b>never</b> is configured. The daemon also accepts the value <b>keep</b> to "
-"reject new IKE_SA setups and keep the duplicate established earlier. "
+"%1$snever%2$s is configured. The daemon also accepts the value %1$skeep%2$s "
+"to reject new IKE_SA setups and keep the duplicate established earlier. "
 "Defaults to Yes."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:261
+#: src/usr/local/www/vpn_ipsec_settings.php:262
 msgid "IP Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:264
+#: src/usr/local/www/vpn_ipsec_settings.php:265
 msgid "IPComp compression of content is proposed on the connection."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:268
+#: src/usr/local/www/vpn_ipsec_settings.php:269
 #: src/usr/local/www/services_dnsmasq.php:340
 msgid "Strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:271
+#: src/usr/local/www/vpn_ipsec_settings.php:272
 msgid ""
 "Enable strongSwan's interfaces_use option to bind specific interfaces only. "
 "This option is known to break IPsec with dynamic IP interfaces. This is not "
 "recommended at this time."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:275
+#: src/usr/local/www/vpn_ipsec_settings.php:276
 msgid "Unencrypted payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:279
+#: src/usr/local/www/vpn_ipsec_settings.php:280
 msgid ""
 "Some implementations send the third Main Mode message unencrypted, probably "
 "to find the PSKs for the specified ID for authentication. This is very "
@@ -30788,46 +30792,46 @@ msgid ""
 "such devices (for example, some SonicWall boxes)."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:287
+#: src/usr/local/www/vpn_ipsec_settings.php:288
 msgid "Enable Maximum MSS"
 msgstr "啟用 Maximum MSS"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:292
-#: src/usr/local/www/vpn_ipsec_settings.php:301
+#: src/usr/local/www/vpn_ipsec_settings.php:293
+#: src/usr/local/www/vpn_ipsec_settings.php:302
 msgid "Maximum MSS"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:305
+#: src/usr/local/www/vpn_ipsec_settings.php:306
 msgid ""
 "Enable MSS clamping on TCP flows over VPN. This helps overcome problems with "
 "PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:313
+#: src/usr/local/www/vpn_ipsec_settings.php:314
 msgid "Enable Cisco Extensions"
 msgstr "啟用 Cisco Extensions"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:316
+#: src/usr/local/www/vpn_ipsec_settings.php:317
 msgid ""
 "Enable Unity Plugin which provides Cisco Extension support such as Split-"
 "Include, Split-Exclude and Split-Dns."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:320
+#: src/usr/local/www/vpn_ipsec_settings.php:321
 msgid "Strict CRL Checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:323
+#: src/usr/local/www/vpn_ipsec_settings.php:324
 msgid ""
 "Check this to require availability of a fresh CRL for peer authentication "
 "based on RSA signatures to succeed."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:327
+#: src/usr/local/www/vpn_ipsec_settings.php:328
 msgid "Make before Break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:330
+#: src/usr/local/www/vpn_ipsec_settings.php:331
 msgid ""
 "Instead of a break-before-make scheme. Make-before-break uses overlapping "
 "IKE and CHILD_SA during reauthentication by first recreating all new SAs "
@@ -30836,11 +30840,11 @@ msgid ""
 "overlapping SAs by the peer."
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:336
+#: src/usr/local/www/vpn_ipsec_settings.php:337
 msgid "Auto-exclude LAN address"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:339
+#: src/usr/local/www/vpn_ipsec_settings.php:340
 msgid "Exclude traffic from LAN subnet to LAN IP address from IPsec."
 msgstr ""
 
@@ -30875,10 +30879,11 @@ msgid "*Server address"
 msgstr ""
 
 #: src/usr/local/www/vpn_l2tp.php:221
+#, php-format
 msgid ""
 "Enter the IP address the L2TP server should give to clients for use as their "
-"\"gateway\". <br />Typically this is set to an unused IP just outside of the "
-"client range.<br /><br />NOTE: This should NOT be set to any IP address "
+"\"gateway\". %1$sTypically this is set to an unused IP just outside of the "
+"client range.%1$s%1$sNOTE: This should NOT be set to any IP address "
 "currently in use on this firewall."
 msgstr ""
 
@@ -31061,7 +31066,7 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:335
 #: src/usr/local/www/vpn_openvpn_server.php:444
-#: src/usr/local/www/vpn_openvpn_server.php:874
+#: src/usr/local/www/vpn_openvpn_server.php:876
 msgid "Shared key"
 msgstr ""
 
@@ -31102,10 +31107,11 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:512
 #: src/usr/local/www/vpn_openvpn_server.php:724
+#, php-format
 msgid ""
 "\"tun\" mode carries IPv4 and IPv6 (OSI layer 3) and is the most common and "
-"compatible mode across all platforms.<br/>\"tap\" mode is capable of "
-"carrying 802.3 (OSI Layer 2.)"
+"compatible mode across all platforms.%1$s\"tap\" mode is capable of carrying "
+"802.3 (OSI Layer 2.)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:520
@@ -31156,9 +31162,10 @@ msgid "Proxy host or address"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:557
+#, php-format
 msgid ""
 "The address for an HTTP Proxy this client can use to connect to a remote "
-"server.<br/>TCP must be used for the client and server protocol."
+"server.%1$sTCP must be used for the client and server protocol."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:562
@@ -31220,126 +31227,152 @@ msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:639
 #: src/usr/local/www/vpn_openvpn_server.php:775
+#, php-format
 msgid ""
-"Paste the TLS key here.<br/>This key is used to sign control channel packets "
+"Paste the TLS key here.%1$sThis key is used to sign control channel packets "
 "with an HMAC signature for authentication when establishing the tunnel. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:645
+#: src/usr/local/www/vpn_openvpn_client.php:644
 #: src/usr/local/www/vpn_openvpn_server.php:781
 msgid "*TLS Key Usage Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:648
+#: src/usr/local/www/vpn_openvpn_client.php:647
 #: src/usr/local/www/vpn_openvpn_server.php:784
+#, php-format
 msgid ""
 "In Authentication mode the TLS key is used only as HMAC authentication for "
-"the control channel, protecting the peers from unauthorized connections. <br/"
-">Encryption and Authentication mode also encrypts control channel "
+"the control channel, protecting the peers from unauthorized connections. "
+"%1$sEncryption and Authentication mode also encrypts control channel "
 "communication, providing more privacy and traffic control channel "
 "obfuscation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:674
-#: src/usr/local/www/vpn_openvpn_client.php:680
+#: src/usr/local/www/vpn_openvpn_client.php:672
+#: src/usr/local/www/vpn_openvpn_client.php:678
 #: src/usr/local/www/vpn_openvpn_server.php:811
 #: src/usr/local/www/vpn_openvpn_server.php:817
 msgid "Peer Certificate Revocation list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:687
+#: src/usr/local/www/vpn_openvpn_client.php:685
 msgid "Auto generate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:694
-#: src/usr/local/www/vpn_openvpn_server.php:882
+#: src/usr/local/www/vpn_openvpn_client.php:692
+#: src/usr/local/www/vpn_openvpn_server.php:884
 msgid "*Shared Key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:696
-#: src/usr/local/www/vpn_openvpn_server.php:884
+#: src/usr/local/www/vpn_openvpn_client.php:694
+#: src/usr/local/www/vpn_openvpn_server.php:886
 msgid "Paste the shared key here"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:702
+#: src/usr/local/www/vpn_openvpn_client.php:700
 msgid "Client Certificate"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:712
-#: src/usr/local/www/vpn_openvpn_server.php:891
+#: src/usr/local/www/vpn_openvpn_client.php:710
+#: src/usr/local/www/vpn_openvpn_server.php:893
 msgid ""
 "The Encryption Algorithm used for data channel packets when Negotiable "
 "Cryptographic Parameter (NCP) support is not available."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:716
-#: src/usr/local/www/vpn_openvpn_server.php:895
+#: src/usr/local/www/vpn_openvpn_client.php:714
+#: src/usr/local/www/vpn_openvpn_server.php:897
 msgid "Enable NCP"
 msgstr "啟用 NCP"
 
-#: src/usr/local/www/vpn_openvpn_client.php:719
-#: src/usr/local/www/vpn_openvpn_server.php:898
+#: src/usr/local/www/vpn_openvpn_client.php:721
+#: src/usr/local/www/vpn_openvpn_server.php:903
+msgid ""
+"When both peers support NCP and have it enabled, NCP overrides the "
+"Encryption Algorithm above."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:722
+msgid "When disabled, only the selected Encryption Algorithm is allowedz."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:717
+#: src/usr/local/www/vpn_openvpn_server.php:900
+#, php-format
 msgid ""
 "Check this option to allow OpenVPN clients and servers to negotiate a "
 "compatible set of acceptable cryptographic Encryption Algorithms from those "
-"selected in the NCP Algorithms list below.<div class=\"infoblock\">"
+"selected in the NCP Algorithms list below.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:727
-#: src/usr/local/www/vpn_openvpn_server.php:903
+#: src/usr/local/www/vpn_openvpn_client.php:728
+#: src/usr/local/www/vpn_openvpn_server.php:907
 msgid "NCP Algorithms"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:736
-#: src/usr/local/www/vpn_openvpn_server.php:912
+#: src/usr/local/www/vpn_openvpn_client.php:737
+#: src/usr/local/www/vpn_openvpn_server.php:916
+#, php-format
 msgid ""
-"Available NCP Encryption Algorithms<br />Click to add or remove an algorithm "
+"Available NCP Encryption Algorithms%1$sClick to add or remove an algorithm "
 "from the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:746
-#: src/usr/local/www/vpn_openvpn_server.php:922
+#: src/usr/local/www/vpn_openvpn_client.php:747
+#: src/usr/local/www/vpn_openvpn_server.php:926
 msgid ""
 "Allowed NCP Encryption Algorithms. Click an algorithm name to remove it from "
 "the list"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:748
-#: src/usr/local/www/vpn_openvpn_server.php:924
+#: src/usr/local/www/vpn_openvpn_client.php:752
+#: src/usr/local/www/vpn_openvpn_server.php:931
+msgid ""
+"For backward compatibility, when an older peer connects that does not "
+"support NCP, OpenVPN will use the Encryption Algorithm requested by the peer "
+"so long as it is selected in this list or chosen as the Encryption Algorithm."
+""
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_client.php:749
+#: src/usr/local/www/vpn_openvpn_server.php:928
+#, php-format
 msgid ""
 "The order of the selected NCP Encryption Algorithms is respected by OpenVPN."
-"<div class=\"infoblock\">"
+"%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:758
-#: src/usr/local/www/vpn_openvpn_server.php:934
+#: src/usr/local/www/vpn_openvpn_client.php:760
+#: src/usr/local/www/vpn_openvpn_server.php:939
 msgid "*Auth digest algorithm"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:761
+#: src/usr/local/www/vpn_openvpn_client.php:763
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless the server uses a "
+"not the data channel.%1$sLeave this set to SHA1 unless the server uses a "
 "different value. SHA1 is the default for OpenVPN. "
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:769
-#: src/usr/local/www/vpn_openvpn_server.php:945
+#: src/usr/local/www/vpn_openvpn_server.php:949
 #: src/usr/local/www/widgets/widgets/system_information.widget.php:38
 msgid "Hardware Crypto"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:776
 #: src/usr/local/www/vpn_openvpn_csc.php:363
-#: src/usr/local/www/vpn_openvpn_server.php:967
+#: src/usr/local/www/vpn_openvpn_server.php:971
 msgid "Tunnel Settings"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:780
 #: src/usr/local/www/vpn_openvpn_csc.php:367
-#: src/usr/local/www/vpn_openvpn_server.php:971
+#: src/usr/local/www/vpn_openvpn_server.php:975
 msgid "IPv4 Tunnel Network"
 msgstr ""
 
@@ -31351,8 +31384,8 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:789
-#: src/usr/local/www/vpn_openvpn_csc.php:378
-#: src/usr/local/www/vpn_openvpn_server.php:981
+#: src/usr/local/www/vpn_openvpn_csc.php:377
+#: src/usr/local/www/vpn_openvpn_server.php:985
 msgid "IPv6 Tunnel Network"
 msgstr ""
 
@@ -31364,12 +31397,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:798
-#: src/usr/local/www/vpn_openvpn_server.php:1049
+#: src/usr/local/www/vpn_openvpn_server.php:1053
 msgid "IPv4 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:801
-#: src/usr/local/www/vpn_openvpn_server.php:1052
+#: src/usr/local/www/vpn_openvpn_server.php:1056
 msgid ""
 "IPv4 networks that will be routed through the tunnel, so that a site-to-site "
 "VPN can be established without manually changing the routing tables. "
@@ -31379,12 +31412,12 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:807
-#: src/usr/local/www/vpn_openvpn_server.php:1058
+#: src/usr/local/www/vpn_openvpn_server.php:1062
 msgid "IPv6 Remote network(s)"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:810
-#: src/usr/local/www/vpn_openvpn_server.php:1061
+#: src/usr/local/www/vpn_openvpn_server.php:1065
 msgid ""
 "These are the IPv6 networks that will be routed through the tunnel, so that "
 "a site-to-site VPN can be established without manually changing the routing "
@@ -31405,7 +31438,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:827
-#: src/usr/local/www/vpn_openvpn_server.php:1077
+#: src/usr/local/www/vpn_openvpn_server.php:1081
 msgid ""
 "Compress tunnel packets using the LZO algorithm. Adaptive compression will "
 "dynamically disable compression for a period of time if OpenVPN detects that "
@@ -31413,7 +31446,7 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:831
-#: src/usr/local/www/vpn_openvpn_server.php:1130
+#: src/usr/local/www/vpn_openvpn_server.php:1134
 msgid "Topology"
 msgstr ""
 
@@ -31422,7 +31455,7 @@ msgid "Specifies the method used to configure a virtual adapter IP address."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:838
-#: src/usr/local/www/vpn_openvpn_server.php:1090
+#: src/usr/local/www/vpn_openvpn_server.php:1094
 msgid "Type-of-Service"
 msgstr ""
 
@@ -31451,19 +31484,20 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:870
-#: src/usr/local/www/vpn_openvpn_server.php:1299
+#: src/usr/local/www/vpn_openvpn_server.php:1303
 msgid "Verbosity level"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:873
-#: src/usr/local/www/vpn_openvpn_server.php:1302
+#: src/usr/local/www/vpn_openvpn_server.php:1306
+#, php-format
 msgid ""
 "Each level shows all info from the previous levels. Level 3 is recommended "
-"for a good summary of what's happening without being swamped by output.<br /"
-"><br />None: Only fatal errors<br />Default through 4: Normal usage range<br "
-"/>5: Output R and W characters to the console for each packet read and write."
-" Uppercase is used for TCP/UDP packets and lowercase is used for TUN/TAP "
-"packets.<br />6-11: Debug info range"
+"for a good summary of what's happening without being swamped by output."
+"%1$s%1$sNone: Only fatal errors%1$sDefault through 4: Normal usage "
+"range%1$s5: Output R and W characters to the console for each packet read "
+"and write. Uppercase is used for TCP/UDP packets and lowercase is used for "
+"TUN/TAP packets.%1$s6-11: Debug info range"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:900
@@ -31566,32 +31600,35 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:370
+#, php-format
 msgid ""
 "The virtual IPv4 network used for private communications between this client "
-"and the server expressed using CIDR (e.g. 10.0.8.5/24). <br />With subnet "
+"and the server expressed using CIDR (e.g. 10.0.8.5/24). %1$sWith subnet "
 "topology, enter the client IP address and the subnet mask must match the "
-"IPv4 Tunnel Network on the server. <br />With net30 topology, the first "
+"IPv4 Tunnel Network on the server. %1$sWith net30 topology, the first "
 "network address of the /30 is assumed to be the server address and the "
 "second network address will be assigned to the client."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:381
+#: src/usr/local/www/vpn_openvpn_csc.php:380
+#, php-format
 msgid ""
 "The virtual IPv6 network used for private communications between this client "
-"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). <br /"
-">Enter the client IPv6 address and prefix. The prefix must match the IPv6 "
-"Tunnel Network prefix on the server. "
+"and the server expressed using prefix (e.g. 2001:db9:1:1::100/64). %1$sEnter "
+"the client IPv6 address and prefix. The prefix must match the IPv6 Tunnel "
+"Network prefix on the server. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:387
+#: src/usr/local/www/vpn_openvpn_csc.php:386
 msgid "IPv4 Local Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:390
+#: src/usr/local/www/vpn_openvpn_csc.php:389
+#, php-format
 msgid ""
 "These are the IPv4 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more CIDR "
-"networks. <br />NOTE: Networks do not need to be specified here if they have "
+"networks. %1$sNOTE: Networks do not need to be specified here if they have "
 "already been defined on the main server configuration."
 msgstr ""
 
@@ -31600,109 +31637,113 @@ msgid "IPv6 Local Network/s"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_csc.php:398
+#, php-format
 msgid ""
 "These are the IPv6 server-side networks that will be accessible from this "
 "particular client. Expressed as a comma-separated list of one or more IP/"
-"PREFIX networks.<br />NOTE: Networks do not need to be specified here if "
-"they have already been defined on the main server configuration."
+"PREFIX networks.%1$sNOTE: Networks do not need to be specified here if they "
+"have already been defined on the main server configuration."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:403
+#: src/usr/local/www/vpn_openvpn_csc.php:404
 msgid "IPv4 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:406
+#: src/usr/local/www/vpn_openvpn_csc.php:407
+#, php-format
 msgid ""
 "These are the IPv4 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more CIDR ranges. May be left "
-"blank if there are no client-side networks to be routed.<br />NOTE: Remember "
+"blank if there are no client-side networks to be routed.%1$sNOTE: Remember "
 "to add these subnets to the IPv4 Remote Networks list on the corresponding "
 "OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:412
+#: src/usr/local/www/vpn_openvpn_csc.php:414
 msgid "IPv6 Remote Network/s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:415
+#: src/usr/local/www/vpn_openvpn_csc.php:417
+#, php-format
 msgid ""
 "These are the IPv6 client-side networks that will be routed to this client "
 "specifically using iroute, so that a site-to-site VPN can be established. "
 "Expressed as a comma-separated list of one or more IP/PREFIX networks. May "
-"be left blank if there are no client-side networks to be routed.<br />NOTE: "
+"be left blank if there are no client-side networks to be routed.%1$sNOTE: "
 "Remember to add these subnets to the IPv6 Remote Networks list on the "
 "corresponding OpenVPN server settings."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:421
-#: src/usr/local/www/vpn_openvpn_server.php:1023
+#: src/usr/local/www/vpn_openvpn_csc.php:424
+#: src/usr/local/www/vpn_openvpn_server.php:1027
 msgid "Redirect Gateway"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:428
-#: src/usr/local/www/vpn_openvpn_server.php:1111
+#: src/usr/local/www/vpn_openvpn_csc.php:431
+#: src/usr/local/www/vpn_openvpn_server.php:1115
 msgid "Client Settings"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:433
+#: src/usr/local/www/vpn_openvpn_csc.php:436
 msgid "Server Definitions"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:445
-#: src/usr/local/www/vpn_openvpn_csc.php:450
+#: src/usr/local/www/vpn_openvpn_csc.php:448
+#: src/usr/local/www/vpn_openvpn_csc.php:453
 msgid "DNS Domain"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:494
+#: src/usr/local/www/vpn_openvpn_csc.php:497
 msgid "Server 4"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:529
+#: src/usr/local/www/vpn_openvpn_csc.php:532
 msgid "NetBIOS Options"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:532
+#: src/usr/local/www/vpn_openvpn_csc.php:535
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:536
-#: src/usr/local/www/vpn_openvpn_server.php:1235
+#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_server.php:1239
 msgid "Node Type"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:539
+#: src/usr/local/www/vpn_openvpn_csc.php:542
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast). "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:547
+#: src/usr/local/www/vpn_openvpn_csc.php:550
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:581
+#: src/usr/local/www/vpn_openvpn_csc.php:584
+#, php-format
 msgid ""
 "Enter any additional options to add for this client specific override, "
-"separated by a semicolon. <br />EXAMPLE: push \"route 10.0.0.0 255.255.255."
+"separated by a semicolon. %1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
 "0\"; "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:653
+#: src/usr/local/www/vpn_openvpn_csc.php:657
 msgid "CSC Overrides"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:681
+#: src/usr/local/www/vpn_openvpn_csc.php:685
 msgid "Edit CSC Override"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:682
+#: src/usr/local/www/vpn_openvpn_csc.php:686
 msgid "Delete CSC Override"
 msgstr ""
 
@@ -31798,7 +31839,7 @@ msgid "The port used by OpenVPN to receive client connections."
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_server.php:828
-#: src/usr/local/www/vpn_openvpn_server.php:1758
+#: src/usr/local/www/vpn_openvpn_server.php:1762
 msgid ""
 "Warning: The selected server certificate was not created as an SSL Server "
 "certificate and may not work as expected"
@@ -31821,58 +31862,80 @@ msgstr "*伺服器憑證"
 msgid "*DH Parameter Length"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:852
+#: src/usr/local/www/vpn_openvpn_server.php:854
+msgid "Only DH parameter sets which exist in /etc/ are shown."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:856
 msgid ""
-"Diffie-Hellman (DH) parameter set used for key exchange.<div class="
-"\"infoblock\">"
+"Generating new or stronger DH parameters is CPU-intensive and must be "
+"performed manually."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:857
+#, php-format
+msgid ""
+"Consult %1$sthe doc wiki article on DH Parameters%2$sfor information on "
+"generating new or stronger paramater sets."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:852
+#, php-format
+msgid "Diffie-Hellman (DH) parameter set used for key exchange.%1$s%2$s%3$s"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:863
+#: src/usr/local/www/vpn_openvpn_server.php:865
 msgid "ECDH Curve"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:866
+#: src/usr/local/www/vpn_openvpn_server.php:868
+#, php-format
 msgid ""
-"The Elliptic Curve to use for key exchange. <br/>The curve from the server "
+"The Elliptic Curve to use for key exchange. %1$sThe curve from the server "
 "certificate is used by default when the server uses an ECDSA certificate. "
 "Otherwise, secp384r1 is used as a fallback."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:937
+#: src/usr/local/www/vpn_openvpn_server.php:904
+msgid "When disabled, only the selected Encryption Algorithm is allowed."
+msgstr ""
+
+#: src/usr/local/www/vpn_openvpn_server.php:942
+#, php-format
 msgid ""
 "The algorithm used to authenticate data channel packets, and control channel "
-"packets if a TLS Key is present.<br />When an AEAD Encryption Algorithm mode "
+"packets if a TLS Key is present.%1$sWhen an AEAD Encryption Algorithm mode "
 "is used, such as AES-GCM, this digest is used for the control channel only, "
-"not the data channel.<br />Leave this set to SHA1 unless all clients are set "
+"not the data channel.%1$sLeave this set to SHA1 unless all clients are set "
 "to match. SHA1 is the default for OpenVPN. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:954
+#: src/usr/local/www/vpn_openvpn_server.php:958
 msgid "Do Not Check"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:952
+#: src/usr/local/www/vpn_openvpn_server.php:956
 msgid "*Certificate Depth"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:955
+#: src/usr/local/www/vpn_openvpn_server.php:959
 msgid ""
 "When a certificate-based client logs in, do not accept certificates below "
 "this depth. Useful for denying certificates made with intermediate CAs "
 "generated from the same CA as the server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:960
+#: src/usr/local/www/vpn_openvpn_server.php:964
 msgid "Strict User-CN Matching"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:963
+#: src/usr/local/www/vpn_openvpn_server.php:967
 msgid ""
 "When authenticating users, enforce a match between the common name of the "
 "client certificate and the username given at login."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:974
+#: src/usr/local/www/vpn_openvpn_server.php:978
 msgid ""
 "This is the IPv4 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. 10.0.8.0/24). The "
@@ -31881,7 +31944,7 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:984
+#: src/usr/local/www/vpn_openvpn_server.php:988
 msgid ""
 "This is the IPv6 virtual network used for private communications between "
 "this server and client hosts expressed using CIDR (e.g. fe80::/64). The "
@@ -31890,15 +31953,15 @@ msgid ""
 "(see Address Pool)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:991
+#: src/usr/local/www/vpn_openvpn_server.php:995
 msgid "Bridge DHCP"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:998
+#: src/usr/local/www/vpn_openvpn_server.php:1002
 msgid "Bridge Interface"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1001
+#: src/usr/local/www/vpn_openvpn_server.php:1005
 msgid ""
 "The interface to which this TAP instance will be bridged. This is not done "
 "automatically. This interface must be assigned and the bridge created "
@@ -31907,11 +31970,11 @@ msgid ""
 "Server Bridge DHCP settings below to be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1007
+#: src/usr/local/www/vpn_openvpn_server.php:1011
 msgid "Server Bridge DHCP Start"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1010
+#: src/usr/local/www/vpn_openvpn_server.php:1014
 msgid ""
 "When using TAP mode as a multi-point server, a DHCP range may optionally be "
 "supplied to use on the interface to which this TAP instance is bridged. If "
@@ -31919,15 +31982,15 @@ msgid ""
 "the interface setting above will be ignored."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1016
+#: src/usr/local/www/vpn_openvpn_server.php:1020
 msgid "Server Bridge DHCP End"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1030
+#: src/usr/local/www/vpn_openvpn_server.php:1034
 msgid "IPv4 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1033
+#: src/usr/local/www/vpn_openvpn_server.php:1037
 msgid ""
 "IPv4 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more CIDR ranges. This may be left blank if "
@@ -31935,11 +31998,11 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1040
+#: src/usr/local/www/vpn_openvpn_server.php:1044
 msgid "IPv6 Local network(s)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1043
+#: src/usr/local/www/vpn_openvpn_server.php:1047
 msgid ""
 "IPv6 networks that will be accessible from the remote endpoint. Expressed as "
 "a comma-separated list of one or more IP/PREFIX. This may be left blank if "
@@ -31947,171 +32010,173 @@ msgid ""
 "machine. This is generally set to the LAN network."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1067
+#: src/usr/local/www/vpn_openvpn_server.php:1071
 msgid "Concurrent connections"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1070
+#: src/usr/local/www/vpn_openvpn_server.php:1074
 msgid ""
 "Specify the maximum number of clients allowed to concurrently connect to "
 "this server."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1083
+#: src/usr/local/www/vpn_openvpn_server.php:1087
 msgid "Push Compression"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1097
+#: src/usr/local/www/vpn_openvpn_server.php:1101
 msgid "Inter-client communication"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1104
+#: src/usr/local/www/vpn_openvpn_server.php:1108
 msgid "Duplicate Connection"
 msgstr "重複連線"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1107
+#: src/usr/local/www/vpn_openvpn_server.php:1111
 msgid ""
 "(This is not generally recommended, but may be needed for some scenarios.)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1116
+#: src/usr/local/www/vpn_openvpn_server.php:1120
 msgid "Dynamic IP"
 msgstr "動態IP"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1123
+#: src/usr/local/www/vpn_openvpn_server.php:1127
 msgid "Address Pool"
 msgstr "位置池"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1133
+#: src/usr/local/www/vpn_openvpn_server.php:1137
+#, php-format
 msgid ""
 "Specifies the method used to supply a virtual adapter IP address to clients "
-"when using TUN mode on IPv4.<br />Some clients may require this be set to "
+"when using TUN mode on IPv4.%1$sSome clients may require this be set to "
 "\"subnet\" even for IPv6, such as OpenVPN Connect (iOS/Android). Older "
 "versions of OpenVPN (before 2.0.9) or clients such as Yealink phones may "
 "require \"net30\"."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1139
+#: src/usr/local/www/vpn_openvpn_server.php:1143
 msgid "Advanced Client Settings"
 msgstr "進階客戶端設定"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1158
+#: src/usr/local/www/vpn_openvpn_server.php:1162
 msgid "DNS Server enable"
 msgstr "啟用DNS伺服器"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1165
+#: src/usr/local/www/vpn_openvpn_server.php:1169
 msgid "DNS Server 1"
 msgstr "DNS 伺服器 1"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1172
+#: src/usr/local/www/vpn_openvpn_server.php:1176
 msgid "DNS Server 2"
 msgstr "DNS 伺服器 2"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1179
+#: src/usr/local/www/vpn_openvpn_server.php:1183
 msgid "DNS Server 3"
 msgstr "DNS 伺服器 3"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1186
+#: src/usr/local/www/vpn_openvpn_server.php:1190
 msgid "DNS Server 4"
 msgstr "DNS 伺服器 4"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1193
+#: src/usr/local/www/vpn_openvpn_server.php:1197
 msgid "Block Outside DNS"
 msgstr "封鎖外部DNS"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1196
+#: src/usr/local/www/vpn_openvpn_server.php:1200
 msgid ""
 "Requires Windows 10 and OpenVPN 2.3.9 or later. Only Windows 10 is prone to "
 "DNS leakage in this way, other clients will ignore the option as they are "
 "not affected."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1200
+#: src/usr/local/www/vpn_openvpn_server.php:1204
 msgid "Force DNS cache update"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1203
+#: src/usr/local/www/vpn_openvpn_server.php:1207
 msgid "This is known to kick Windows into recognizing pushed DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1207
+#: src/usr/local/www/vpn_openvpn_server.php:1211
 msgid "NTP Server enable"
 msgstr "啟用NTP伺服器"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1228
+#: src/usr/local/www/vpn_openvpn_server.php:1232
 msgid "NetBIOS enable"
 msgstr "啟用NetBIOS "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1231
+#: src/usr/local/www/vpn_openvpn_server.php:1235
 msgid ""
 "If this option is not set, all NetBIOS-over-TCP/IP options (including WINS) "
 "will be disabled."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1238
+#: src/usr/local/www/vpn_openvpn_server.php:1242
 msgid ""
 "Possible options: b-node (broadcasts), p-node (point-to-point name queries "
 "to a WINS server), m-node (broadcast then query name server), and h-node "
 "(query name server, then broadcast)"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1243
+#: src/usr/local/www/vpn_openvpn_server.php:1247
 msgid "Scope ID"
 msgstr "Scope ID"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1246
+#: src/usr/local/www/vpn_openvpn_server.php:1250
 msgid ""
 "A NetBIOS Scope ID provides an extended naming service for NetBIOS over TCP/"
 "IP. The NetBIOS scope ID isolates NetBIOS traffic on a single network to "
 "only those nodes with the same NetBIOS scope ID"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1252
+#: src/usr/local/www/vpn_openvpn_server.php:1256
 msgid "WINS server enable"
 msgstr "啟用WINS server"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1259
+#: src/usr/local/www/vpn_openvpn_server.php:1263
 msgid "WINS Server 1"
 msgstr "WINS Server 1"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1266
+#: src/usr/local/www/vpn_openvpn_server.php:1270
 msgid "WINS Server 2"
 msgstr "WINS Server 2"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1273
+#: src/usr/local/www/vpn_openvpn_server.php:1277
 msgid "Enable custom port "
 msgstr "啟用自訂port "
 
-#: src/usr/local/www/vpn_openvpn_server.php:1280
+#: src/usr/local/www/vpn_openvpn_server.php:1284
 msgid "Management port"
 msgstr "系統管理port"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1283
+#: src/usr/local/www/vpn_openvpn_server.php:1287
 msgid ""
 "The default port is 166. Specify a different port if the client machines "
 "need to select from multiple OpenVPN links."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1294
+#: src/usr/local/www/vpn_openvpn_server.php:1298
+#, php-format
 msgid ""
 "Enter any additional options to add to the OpenVPN server configuration "
-"here, separated by semicolon.<br />EXAMPLE: push \"route 10.0.0.0 255.255."
-"255.0\""
+"here, separated by semicolon.%1$sEXAMPLE: push \"route 10.0.0.0 255.255.255."
+"0\""
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1330
+#: src/usr/local/www/vpn_openvpn_server.php:1334
 msgid "OpenVPN Servers"
 msgstr "OpenVPN 伺服器"
 
-#: src/usr/local/www/vpn_openvpn_server.php:1335
+#: src/usr/local/www/vpn_openvpn_server.php:1339
 msgid "Protocol / Port"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1336
+#: src/usr/local/www/vpn_openvpn_server.php:1340
 msgid "Tunnel Network"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1337
+#: src/usr/local/www/vpn_openvpn_server.php:1341
 msgid "Crypto"
 msgstr ""
 
@@ -34195,7 +34260,7 @@ msgstr ""
 
 #: src/usr/local/www/system_gateways_edit.php:813
 #: src/usr/local/www/system_groupmanager_addprivs.php:182
-#: src/usr/local/www/system_usermanager_addprivs.php:172
+#: src/usr/local/www/system_usermanager_addprivs.php:166
 msgid "<span class=\"help-block\">"
 msgstr ""
 
@@ -34350,8 +34415,8 @@ msgid "Allow clients to save Xauth passwords (Cisco VPN client only)."
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:562
-#: src/usr/local/www/vpn_openvpn_csc.php:441
-#: src/usr/local/www/vpn_openvpn_server.php:1145
+#: src/usr/local/www/vpn_openvpn_csc.php:444
+#: src/usr/local/www/vpn_openvpn_server.php:1149
 msgid "Provide a default domain name to clients"
 msgstr ""
 
@@ -34362,13 +34427,13 @@ msgid ""
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:608
-#: src/usr/local/www/vpn_openvpn_csc.php:461
+#: src/usr/local/www/vpn_openvpn_csc.php:464
 msgid "Provide a DNS server list to clients"
 msgstr ""
 
 #: src/usr/local/www/vpn_ipsec_mobile.php:633
-#: src/usr/local/www/vpn_openvpn_csc.php:553
-#: src/usr/local/www/vpn_openvpn_server.php:1253
+#: src/usr/local/www/vpn_openvpn_csc.php:556
+#: src/usr/local/www/vpn_openvpn_server.php:1257
 msgid "Provide a WINS server list to clients"
 msgstr ""
 
@@ -34418,35 +34483,35 @@ msgstr "啟用 DPD"
 msgid "Disable this phase 2 entry without removing it from the list. "
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:262
+#: src/usr/local/www/vpn_ipsec_settings.php:263
 msgid "Enable IPCompression"
 msgstr "啟用 IPCompression"
 
-#: src/usr/local/www/vpn_ipsec_settings.php:269
+#: src/usr/local/www/vpn_ipsec_settings.php:270
 msgid "Enable strict interface binding"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:276
+#: src/usr/local/www/vpn_ipsec_settings.php:277
 msgid "Accept unencrypted ID and HASH payloads in IKEv1 Main Mode"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:288
+#: src/usr/local/www/vpn_ipsec_settings.php:289
 msgid "Enable MSS clamping on VPN traffic"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:314
+#: src/usr/local/www/vpn_ipsec_settings.php:315
 msgid "Enable Unity Plugin"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:321
+#: src/usr/local/www/vpn_ipsec_settings.php:322
 msgid "Enable strict Certificate Revocation List checking"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:328
+#: src/usr/local/www/vpn_ipsec_settings.php:329
 msgid "Initiate IKEv2 reauthentication with a make-before-break"
 msgstr ""
 
-#: src/usr/local/www/vpn_ipsec_settings.php:337
+#: src/usr/local/www/vpn_ipsec_settings.php:338
 msgid "Enable bypass for LAN interface IP"
 msgstr ""
 
@@ -34480,18 +34545,18 @@ msgstr ""
 msgid "Automatically generate a TLS Key."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:688
-#: src/usr/local/www/vpn_openvpn_server.php:875
+#: src/usr/local/www/vpn_openvpn_client.php:686
+#: src/usr/local/www/vpn_openvpn_server.php:877
 msgid "Automatically generate a shared key"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_client.php:717
-#: src/usr/local/www/vpn_openvpn_server.php:896
+#: src/usr/local/www/vpn_openvpn_client.php:715
+#: src/usr/local/www/vpn_openvpn_server.php:898
 msgid "Enable Negotiable Cryptographic Parameters"
 msgstr ""
 
 #: src/usr/local/www/vpn_openvpn_client.php:839
-#: src/usr/local/www/vpn_openvpn_server.php:1091
+#: src/usr/local/www/vpn_openvpn_server.php:1095
 msgid ""
 "Set the TOS IP header value of tunnel packets to match the encapsulated "
 "packet value."
@@ -34513,23 +34578,23 @@ msgstr ""
 msgid "Block this client connection based on its common name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:422
-#: src/usr/local/www/vpn_openvpn_server.php:1024
+#: src/usr/local/www/vpn_openvpn_csc.php:425
+#: src/usr/local/www/vpn_openvpn_server.php:1028
 msgid "Force all client generated traffic through the tunnel."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:434
+#: src/usr/local/www/vpn_openvpn_csc.php:437
 msgid ""
 "Prevent this client from receiving any server-defined client settings. "
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:502
-#: src/usr/local/www/vpn_openvpn_server.php:1208
+#: src/usr/local/www/vpn_openvpn_csc.php:505
+#: src/usr/local/www/vpn_openvpn_server.php:1212
 msgid "Provide an NTP server list to clients"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_csc.php:530
-#: src/usr/local/www/vpn_openvpn_server.php:1229
+#: src/usr/local/www/vpn_openvpn_csc.php:533
+#: src/usr/local/www/vpn_openvpn_server.php:1233
 msgid "Enable NetBIOS over TCP/IP"
 msgstr "啟用 NetBIOS over TCP/IP"
 
@@ -34537,54 +34602,54 @@ msgstr "啟用 NetBIOS over TCP/IP"
 msgid "Disable this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:961
+#: src/usr/local/www/vpn_openvpn_server.php:965
 msgid "Enforce match"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:992
+#: src/usr/local/www/vpn_openvpn_server.php:996
 msgid "Allow clients on the bridge to obtain DHCP."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1084
+#: src/usr/local/www/vpn_openvpn_server.php:1088
 msgid "Push the selected Compression setting to connecting clients."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1098
+#: src/usr/local/www/vpn_openvpn_server.php:1102
 msgid "Allow communication between clients connected to this server"
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1105
+#: src/usr/local/www/vpn_openvpn_server.php:1109
 msgid ""
 "Allow multiple concurrent connections from clients using the same Common "
 "Name."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1117
+#: src/usr/local/www/vpn_openvpn_server.php:1121
 msgid ""
 "Allow connected clients to retain their connections if their IP address "
 "changes."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1124
+#: src/usr/local/www/vpn_openvpn_server.php:1128
 msgid "Provide a virtual adapter IP address to clients (see Tunnel Network)."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1159
+#: src/usr/local/www/vpn_openvpn_server.php:1163
 msgid "Provide a DNS server list to clients. Addresses may be IPv4 or IPv6."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1194
+#: src/usr/local/www/vpn_openvpn_server.php:1198
 msgid ""
 "Make Windows 10 Clients Block access to DNS servers except across OpenVPN "
 "while connected, forcing clients to use only VPN DNS servers."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1201
+#: src/usr/local/www/vpn_openvpn_server.php:1205
 msgid ""
 "Run \"net stop dnscache\", \"net start dnscache\", \"ipconfig /flushdns\" "
 "and \"ipconfig /registerdns\" on connection initiation."
 msgstr ""
 
-#: src/usr/local/www/vpn_openvpn_server.php:1274
+#: src/usr/local/www/vpn_openvpn_server.php:1278
 msgid "Use a different management port for clients."
 msgstr ""