summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_ipsec_mobile.php
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2007-08-04 20:33:43 +0000
committerScott Ullrich <sullrich@pfsense.org>2007-08-04 20:33:43 +0000
commite4298413c85fc555b223cfcc81135ab2338c514d (patch)
treefac4a19229ea6fff7aa1972055d581708afaa375 /usr/local/www/vpn_ipsec_mobile.php
parent725dd10ae2512af0dc26cf812ea16376b035fb08 (diff)
downloadpfsense-e4298413c85fc555b223cfcc81135ab2338c514d.zip
pfsense-e4298413c85fc555b223cfcc81135ab2338c514d.tar.gz
Sync NATT support from m0n0wall
Diffstat (limited to 'usr/local/www/vpn_ipsec_mobile.php')
-rwxr-xr-xusr/local/www/vpn_ipsec_mobile.php10
1 files changed, 10 insertions, 0 deletions
diff --git a/usr/local/www/vpn_ipsec_mobile.php b/usr/local/www/vpn_ipsec_mobile.php
index 38af3d1..cd7892f 100755
--- a/usr/local/www/vpn_ipsec_mobile.php
+++ b/usr/local/www/vpn_ipsec_mobile.php
@@ -49,6 +49,7 @@ if (count($a_ipsec) == 0) {
$pconfig['p2pfsgroup'] = "0";
} else {
$pconfig['enable'] = isset($a_ipsec['enable']);
+ $pconfig['natt'] = isset($a_ipsec['natt']);
$pconfig['p1mode'] = $a_ipsec['p1']['mode'];
if (isset($a_ipsec['p1']['myident']['myaddress']))
@@ -120,6 +121,7 @@ if ($_POST) {
$ipsecent = array();
$ipsecent['enable'] = $_POST['enable'] ? true : false;
$ipsecent['p1']['mode'] = $_POST['p1mode'];
+ $ipsecent['natt'] = $_POST['natt'] ? true : false;
$ipsecent['p1']['myident'] = array();
switch ($_POST['p1myidentt']) {
@@ -211,6 +213,14 @@ function methodsel_change() {
<input name="enable" type="checkbox" id="enable" value="yes" <?php if ($pconfig['enable']) echo "checked"; ?>>
<strong>Allow mobile clients</strong></td>
</tr>
+ <tr>
+ <td width="22%" valign="top">&nbsp;</td>
+ <td width="78%">
+ <input name="natt" type="checkbox" id="natt" value="yes" <?php if ($pconfig['natt']) echo "checked"; ?>>
+ <strong>Enable NAT Traversal (NAT-T)</strong><br>
+ <span class="vexpl">Set this option to enable the use of NAT-T (i.e. the encapsulation of ESP in UDP packets) if needed,
+ which can help with clients that are behind restrictive firewalls.</span></td>
+ </tr>
<tr>
<td colspan="2" valign="top" class="listtopic">Phase 1 proposal
(Authentication)</td>
OpenPOWER on IntegriCloud