<acl>
    <!-- ACLs for MVC code -->
    <page-vpn-ipsec-keypairs>
        <name>VPN: IPsec: Key Pairs</name>
        <description>Allow access to the IPsec Key Pairs</description>
        <patterns>
            <pattern>ui/ipsec/key_pairs/*</pattern>
            <pattern>api/ipsec/key_pairs/*</pattern>
            <pattern>api/ipsec/service/*</pattern>
        </patterns>
    </page-vpn-ipsec-keypairs>
    <page-vpn-ipsec>
        <name>VPN: IPsec: Tunnels [legacy]</name>
        <patterns>
            <pattern>ui/ipsec/tunnels</pattern>
            <pattern>api/ipsec/tunnel/*</pattern>
            <pattern>api/ipsec/legacy_subsystem/*</pattern>
        </patterns>
    </page-vpn-ipsec>
    <page-vpn-ipsec-connections>
        <name>VPN: IPsec: Connections</name>
        <patterns>
            <pattern>ui/ipsec/connections</pattern>
            <pattern>ui/ipsec/vti</pattern>
            <pattern>api/ipsec/connections/*</pattern>
            <pattern>api/ipsec/pools/*</pattern>
            <pattern>api/ipsec/service/*</pattern>
            <pattern>api/ipsec/vti/*</pattern>
        </patterns>
    </page-vpn-ipsec-connections>

    <!-- ACLs for legacy code -->
    <page-vpn-ipsec-editphase1>
        <name>VPN: IPsec: Edit Phase 1</name>
        <patterns>
            <pattern>vpn_ipsec_phase1.php*</pattern>
        </patterns>
    </page-vpn-ipsec-editphase1>
    <page-vpn-ipsec-editphase2>
        <name>VPN: IPsec: Edit Phase 2</name>
        <patterns>
            <pattern>vpn_ipsec_phase2.php*</pattern>
        </patterns>
    </page-vpn-ipsec-editphase2>
    <page-vpn-ipsec-editkeys>
        <name>VPN: IPsec: Edit Pre-Shared Keys</name>
        <patterns>
            <pattern>ui/ipsec/pre_shared_keys</pattern>
            <pattern>api/ipsec/pre_shared_keys/*</pattern>
            <pattern>api/ipsec/service/*</pattern>
        </patterns>
    </page-vpn-ipsec-editkeys>
    <page-vpn-ipsec-mobile>
        <name>VPN: IPsec: Mobile [legacy]</name>
        <patterns>
            <pattern>vpn_ipsec_mobile.php*</pattern>
        </patterns>
    </page-vpn-ipsec-mobile>
    <page-status-ipsec>
        <name>Status: IPsec</name>
        <patterns>
            <pattern>ui/ipsec/sessions</pattern>
            <pattern>api/ipsec/sessions/*</pattern>
        </patterns>
    </page-status-ipsec>
    <page-status-ipsec-leases>
        <name>Status: IPsec: Leasespage</name>
        <patterns>
            <pattern>ui/ipsec/leases</pattern>
            <pattern>api/ipsec/leases/*</pattern>
        </patterns>
    </page-status-ipsec-leases>
    <page-status-ipsec-sad>
        <name>Status: IPsec: SAD</name>
        <patterns>
            <pattern>ui/ipsec/sad</pattern>
            <pattern>api/ipsec/sad/*</pattern>
        </patterns>
    </page-status-ipsec-sad>
    <page-status-ipsec-spd>
        <name>Status: IPsec: SPD</name>
        <patterns>
            <pattern>ui/ipsec/spd</pattern>
            <pattern>api/ipsec/spd/*</pattern>
            <pattern>api/ipsec/manual_spd/*</pattern>
            <pattern>api/ipsec/service/*</pattern>
        </patterns>
    </page-status-ipsec-spd>
    <page-status-systemlogs-ipsecvpn>
        <name>Status: System logs: IPsec VPN</name>
        <patterns>
            <pattern>ui/diagnostics/log/core/ipsec/*</pattern>
            <pattern>api/diagnostics/log/core/ipsec/*</pattern>
        </patterns>
    </page-status-systemlogs-ipsecvpn>
</acl>
