summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_ipsec_phase1.php
diff options
context:
space:
mode:
authorErmal LUÇI <eri@pfsense.org>2015-01-31 19:49:17 +0100
committerErmal LUÇI <eri@pfsense.org>2015-01-31 19:49:17 +0100
commitfdc9ac09ef07752da6153cd3c28f734c61985372 (patch)
tree41e3e7656670559e399cd462d50bbb9873f16429 /usr/local/www/vpn_ipsec_phase1.php
parent908edbd3d17a6fac747b6583322be9e547026f7f (diff)
downloadpfsense-fdc9ac09ef07752da6153cd3c28f734c61985372.zip
pfsense-fdc9ac09ef07752da6153cd3c28f734c61985372.tar.gz
Fixes #4360 allow marking a connection as responder only, the same behviour as mobile connections
Diffstat (limited to 'usr/local/www/vpn_ipsec_phase1.php')
-rw-r--r--usr/local/www/vpn_ipsec_phase1.php14
1 files changed, 14 insertions, 0 deletions
diff --git a/usr/local/www/vpn_ipsec_phase1.php b/usr/local/www/vpn_ipsec_phase1.php
index 6e85046..07f8c8b 100644
--- a/usr/local/www/vpn_ipsec_phase1.php
+++ b/usr/local/www/vpn_ipsec_phase1.php
@@ -113,6 +113,8 @@ if (isset($p1index) && $a_phase1[$p1index]) {
$pconfig['reauth_enable'] = true;
if (isset($a_phase1[$p1index]['rekey_enable']))
$pconfig['rekey_enable'] = true;
+ if (isset($a_phase1[$p1index]['responderonly']))
+ $pconfig['responderonly'] = true;
if ($a_phase1[$p1index]['dpd_delay'] && $a_phase1[$p1index]['dpd_maxfail']) {
$pconfig['dpd_enable'] = true;
@@ -383,6 +385,11 @@ if ($_POST) {
else
unset($ph1ent['rekey_enable']);
+ if (isset($pconfig['responderonly']))
+ $ph1ent['responderonly'] = true;
+ else
+ unset($ph1ent['responderonly']);
+
if (isset($pconfig['dpd_enable'])) {
$ph1ent['dpd_delay'] = $pconfig['dpd_delay'];
$ph1ent['dpd_maxfail'] = $pconfig['dpd_maxfail'];
@@ -888,6 +895,13 @@ function dpdchkbox_change() {
</td>
</tr>
<tr>
+ <td width="22%" valign="top" class="vncell"><?=gettext("Only repsonder");?></td>
+ <td width="78%" class="vtable">
+ <input name="responderonly" type="checkbox" id="responderonly" value="yes" <?php if (isset($pconfig['responderonly'])) echo "checked=\"checked\""; ?> />
+ <?=gettext("Whether a connection should be passive on a connection and just wait connectivity from the other peer.."); ?><br />
+ </td>
+ </tr>
+ <tr>
<td width="22%" valign="top" class="vncell"><?=gettext("NAT Traversal"); ?></td>
<td width="78%" class="vtable">
<select name="nat_traversal" class="formselect">
OpenPOWER on IntegriCloud