From a93e56c58af2611650d1f97190ffe54782479423 Mon Sep 17 00:00:00 2001 From: Matthew Grooms Date: Fri, 11 Jul 2008 01:55:30 +0000 Subject: Overhaul IPsec related code. Shared functions have been consolidated into a new file named /etc/ipsec.inc. Tunnel definitions have been split into phase1 and phase2. This allows any number of phase2 definitions to be created for a single phase1 definition. Several facets of configuration have also been improved. The key size for variable length algorithms can now be selected and the phase1 ID options have been extended to allow for more flexible configuration. Several NAT-T related issues have also been resolved. Please note, IPsec remote access functionality has been temporarily disabled. An improved implementation will be included in a follow up commit. --- usr/local/www/diag_ipsec.php | 236 ++++++++++++++++--------------------------- 1 file changed, 89 insertions(+), 147 deletions(-) (limited to 'usr/local/www/diag_ipsec.php') diff --git a/usr/local/www/diag_ipsec.php b/usr/local/www/diag_ipsec.php index 4b16fe5..a61a5a1 100644 --- a/usr/local/www/diag_ipsec.php +++ b/usr/local/www/diag_ipsec.php @@ -3,6 +3,7 @@ /* diag_ipsec.php Copyright (C) 2007 Scott Ullrich + Copyright (C) 2008 Shrew Soft Inc . All rights reserved. Parts of this code was originally based on vpn_ipsec_sad.php @@ -30,170 +31,111 @@ POSSIBILITY OF SUCH DAMAGE. */ +global $g; + $pgtitle = array("Status","IPsec"); require("guiconfig.inc"); include("head.inc"); + +if (!is_array($config['ipsec']['phase2'])) + $config['ipsec']['phase2'] = array(); + +$a_phase2 = &$config['ipsec']['phase2']; + +$spd = ipsec_dump_spd(); +$sad = ipsec_dump_sad(); + ?> ">
- - - - - - +
- -
- -
- - - - - - - - - - - - - - - - - - - - - + - -
SourceDestinationDescriptionStatus
-
- + 		+ -
- -
-

- No IPsec security associations. -

-
-

- - - - Note:
- - - You can configure your IPsec - here. - -

+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Local IPRemote IPLocal NetworkRemote NetworkDescriptionStatus
+ + + + + + + + + +
+

+ No IPsec security associations. +

+
+

+ + + Note:
 + + You can configure your IPsec + here. + +

+
+
-
- -
-"; -} - -?> -- cgit v1.1