mirror of
https://github.com/lucaspalomodevelop/core.git
synced 2026-03-14 16:44:39 +00:00
(legacy) quick refactor of vpn_pptp.php
This commit is contained in:
Ad Schellevis
parent
bec1cc375f
commit
b5cd617e86
@ -1,30 +1,30 @@
|
||||
<?php
|
||||
|
||||
/*
|
||||
Copyright (C) 2014-2015 Deciso B.V.
|
||||
Copyright (C) 2003-2005 Manuel Kasper <mk@neon1.net>.
|
||||
All rights reserved.
|
||||
Copyright (C) 2014-2016 Deciso B.V.
|
||||
Copyright (C) 2003-2005 Manuel Kasper <mk@neon1.net>.
|
||||
All rights reserved.
|
||||
|
||||
Redistribution and use in source and binary forms, with or without
|
||||
modification, are permitted provided that the following conditions are met:
|
||||
Redistribution and use in source and binary forms, with or without
|
||||
modification, are permitted provided that the following conditions are met:
|
||||
|
||||
1. Redistributions of source code must retain the above copyright notice,
|
||||
this list of conditions and the following disclaimer.
|
||||
1. Redistributions of source code must retain the above copyright notice,
|
||||
this list of conditions and the following disclaimer.
|
||||
|
||||
2. Redistributions in binary form must reproduce the above copyright
|
||||
notice, this list of conditions and the following disclaimer in the
|
||||
documentation and/or other materials provided with the distribution.
|
||||
2. Redistributions in binary form must reproduce the above copyright
|
||||
notice, this list of conditions and the following disclaimer in the
|
||||
documentation and/or other materials provided with the distribution.
|
||||
|
||||
THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
|
||||
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
|
||||
AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
||||
AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
|
||||
OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
||||
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
||||
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
||||
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
||||
POSSIBILITY OF SUCH DAMAGE.
|
||||
THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
|
||||
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
|
||||
AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
||||
AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
|
||||
OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
||||
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
||||
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
||||
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
||||
POSSIBILITY OF SUCH DAMAGE.
|
||||
*/
|
||||
|
||||
require_once('guiconfig.inc');
|
||||
@ -41,31 +41,31 @@ if (!is_array($config['pptpd']['radius'])) {
|
||||
}
|
||||
$pptpcfg = &$config['pptpd'];
|
||||
|
||||
$pconfig['remoteip'] = $pptpcfg['remoteip'];
|
||||
$pconfig['localip'] = $pptpcfg['localip'];
|
||||
$pconfig['redir'] = $pptpcfg['redir'];
|
||||
$pconfig['mode'] = $pptpcfg['mode'];
|
||||
$pconfig['wins'] = $pptpcfg['wins'];
|
||||
$pconfig['req128'] = isset($pptpcfg['req128']);
|
||||
$pconfig['n_pptp_units'] = $pptpcfg['n_pptp_units'];
|
||||
$pconfig['pptp_dns1'] = $pptpcfg['dns1'];
|
||||
$pconfig['pptp_dns2'] = $pptpcfg['dns2'];
|
||||
$pconfig['radiusenable'] = isset($pptpcfg['radius']['server']['enable']);
|
||||
$pconfig['radiusissueips'] = isset($pptpcfg['radius']['radiusissueips']);
|
||||
$pconfig['radiussecenable'] = isset($pptpcfg['radius']['server2']['enable']);
|
||||
$pconfig['radacct_enable'] = isset($pptpcfg['radius']['accounting']);
|
||||
$pconfig['radiusserver'] = $pptpcfg['radius']['server']['ip'];
|
||||
$pconfig['radiusserverport'] = $pptpcfg['radius']['server']['port'];
|
||||
$pconfig['radiusserveracctport'] = $pptpcfg['radius']['server']['acctport'];
|
||||
$pconfig['radiussecret'] = $pptpcfg['radius']['server']['secret'];
|
||||
$pconfig['radiusserver2'] = $pptpcfg['radius']['server2']['ip'];
|
||||
$pconfig['radiusserver2port'] = $pptpcfg['radius']['server2']['port'];
|
||||
$pconfig['radiusserver2acctport'] = $pptpcfg['radius']['server2']['acctport'];
|
||||
$pconfig['radiussecret2'] = $pptpcfg['radius']['server2']['secret2'];
|
||||
$pconfig['radius_acct_update'] = $pptpcfg['radius']['acct_update'];
|
||||
$pconfig['radius_nasip'] = $pptpcfg['radius']['nasip'];
|
||||
|
||||
if ($_POST) {
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'GET') {
|
||||
$pconfig['remoteip'] = $pptpcfg['remoteip'];
|
||||
$pconfig['localip'] = $pptpcfg['localip'];
|
||||
$pconfig['redir'] = $pptpcfg['redir'];
|
||||
$pconfig['mode'] = $pptpcfg['mode'];
|
||||
$pconfig['wins'] = $pptpcfg['wins'];
|
||||
$pconfig['req128'] = isset($pptpcfg['req128']);
|
||||
$pconfig['n_pptp_units'] = $pptpcfg['n_pptp_units'];
|
||||
$pconfig['pptp_dns1'] = $pptpcfg['dns1'];
|
||||
$pconfig['pptp_dns2'] = $pptpcfg['dns2'];
|
||||
$pconfig['radiusenable'] = isset($pptpcfg['radius']['server']['enable']);
|
||||
$pconfig['radiusissueips'] = isset($pptpcfg['radius']['radiusissueips']);
|
||||
$pconfig['radiussecenable'] = isset($pptpcfg['radius']['server2']['enable']);
|
||||
$pconfig['radacct_enable'] = isset($pptpcfg['radius']['accounting']);
|
||||
$pconfig['radiusserver'] = $pptpcfg['radius']['server']['ip'];
|
||||
$pconfig['radiusserverport'] = $pptpcfg['radius']['server']['port'];
|
||||
$pconfig['radiusserveracctport'] = $pptpcfg['radius']['server']['acctport'];
|
||||
$pconfig['radiussecret'] = $pptpcfg['radius']['server']['secret'];
|
||||
$pconfig['radiusserver2'] = $pptpcfg['radius']['server2']['ip'];
|
||||
$pconfig['radiusserver2port'] = $pptpcfg['radius']['server2']['port'];
|
||||
$pconfig['radiusserver2acctport'] = $pptpcfg['radius']['server2']['acctport'];
|
||||
$pconfig['radiussecret2'] = $pptpcfg['radius']['server2']['secret2'];
|
||||
$pconfig['radius_acct_update'] = $pptpcfg['radius']['acct_update'];
|
||||
$pconfig['radius_nasip'] = $pptpcfg['radius']['nasip'];
|
||||
} elseif ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
if (isset($input_errors) && count($input_errors) > 0) {
|
||||
unset($input_errors);
|
||||
}
|
||||
@ -197,341 +197,269 @@ if ($_POST) {
|
||||
}
|
||||
|
||||
$service_hook = 'pptpd';
|
||||
|
||||
legacy_html_escape_form_data($pconfig);
|
||||
include("head.inc");
|
||||
|
||||
?>
|
||||
|
||||
<body>
|
||||
<?php include("fbegin.inc"); ?>
|
||||
<script type="text/javascript">
|
||||
//<![CDATA[
|
||||
function get_radio_value(obj)
|
||||
{
|
||||
for (i = 0; i < obj.length; i++) {
|
||||
if (obj[i].checked)
|
||||
return obj[i].value;
|
||||
}
|
||||
return null;
|
||||
}
|
||||
|
||||
function enable_change(enable_over) {
|
||||
if ((get_radio_value(document.iform.mode) == "server") || enable_over) {
|
||||
document.iform.remoteip.disabled = 0;
|
||||
document.iform.localip.disabled = 0;
|
||||
document.iform.req128.disabled = 0;
|
||||
document.iform.radiusenable.disabled = 0;
|
||||
document.iform.radiusissueips.disabled = 0;
|
||||
document.iform.wins.disabled = 0;
|
||||
document.iform.n_pptp_units.disabled = 0;
|
||||
document.iform.pptp_dns1.disabled = 0;
|
||||
document.iform.pptp_dns2.disabled = 0;
|
||||
|
||||
if (document.iform.radiusenable.checked || enable_over) {
|
||||
document.iform.radiussecenable.disabled = 0;
|
||||
document.iform.radacct_enable.disabled = 0;
|
||||
document.iform.radiusserver.disabled = 0;
|
||||
document.iform.radiusserverport.disabled = 0;
|
||||
document.iform.radiusserveracctport.disabled = 0;
|
||||
document.iform.radiussecret.disabled = 0;
|
||||
document.iform.radius_nasip.disabled = 0;
|
||||
document.iform.radius_acct_update.disabled = 0;
|
||||
document.iform.radiusissueips.disabled = 0;
|
||||
if (document.iform.radiussecenable.checked || enable_over) {
|
||||
document.iform.radiusserver2.disabled = 0;
|
||||
document.iform.radiussecret2.disabled = 0;
|
||||
document.iform.radiusserver2port.disabled = 0;
|
||||
document.iform.radiusserver2acctport.disabled = 0;
|
||||
} else {
|
||||
|
||||
document.iform.radiusserver2.disabled = 1;
|
||||
document.iform.radiussecret2.disabled = 1;
|
||||
document.iform.radiusserver2port.disabled = 1;
|
||||
document.iform.radiusserver2acctport.disabled = 1;
|
||||
}
|
||||
} else {
|
||||
document.iform.radacct_enable.disabled = 1;
|
||||
document.iform.radiusserver.disabled = 1;
|
||||
document.iform.radiusserverport.disabled = 1;
|
||||
document.iform.radiusissueips.disabled = 1;
|
||||
document.iform.radiusserveracctport.disabled = 1;
|
||||
document.iform.radiussecret.disabled = 1;
|
||||
document.iform.radius_nasip.disabled = 1;
|
||||
document.iform.radius_acct_update.disabled = 1;
|
||||
document.iform.radiusissueips.disabled = 1;
|
||||
document.iform.radiusserver2.disabled = 1;
|
||||
document.iform.radiussecret2.disabled = 1;
|
||||
document.iform.radiusserver2port.disabled = 1;
|
||||
document.iform.radiusserver2acctport.disabled = 1;
|
||||
}
|
||||
|
||||
} else {
|
||||
document.iform.remoteip.disabled = 1;
|
||||
document.iform.localip.disabled = 1;
|
||||
document.iform.req128.disabled = 1;
|
||||
document.iform.n_pptp_units.disabled = 1;
|
||||
document.iform.pptp_dns1.disabled = 1;
|
||||
document.iform.pptp_dns2.disabled = 1;
|
||||
document.iform.radiusenable.disabled = 1;
|
||||
document.iform.radacct_enable.disabled = 1;
|
||||
document.iform.radiusserver.disabled = 1;
|
||||
document.iform.radiusserverport.disabled = 1;
|
||||
document.iform.radiusissueips.disabled = 1;
|
||||
document.iform.radiusserveracctport.disabled = 1;
|
||||
document.iform.radiussecret.disabled = 1;
|
||||
document.iform.radius_nasip.disabled = 1;
|
||||
document.iform.radius_acct_update.disabled = 1;
|
||||
document.iform.radiussecenable.disabled = 1;
|
||||
document.iform.radiusserver2.disabled = 1;
|
||||
document.iform.radiusserver2port.disabled = 1;
|
||||
document.iform.radiusserver2acctport.disabled = 1;
|
||||
document.iform.radiussecret2.disabled = 1;
|
||||
document.iform.wins.disabled = 1;
|
||||
document.iform.radiusissueips.disabled = 1;
|
||||
}
|
||||
if ((get_radio_value(document.iform.mode) == "redir") || enable_over) {
|
||||
document.iform.redir.disabled = 0;
|
||||
} else {
|
||||
document.iform.redir.disabled = 1;
|
||||
}
|
||||
}
|
||||
//]]>
|
||||
</script>
|
||||
|
||||
<section class="page-content-main">
|
||||
<div class="container-fluid">
|
||||
<div class="row">
|
||||
|
||||
|
||||
<?php if (isset($input_errors) && count($input_errors) > 0) {
|
||||
<section class="page-content-main">
|
||||
<div class="container-fluid">
|
||||
<div class="row">
|
||||
<?php if (isset($input_errors) && count($input_errors) > 0) {
|
||||
print_input_errors($input_errors);
|
||||
} ?>
|
||||
<?php if (isset($savemsg)) {
|
||||
<?php if (isset($savemsg)) {
|
||||
print_info_box($savemsg);
|
||||
} ?>
|
||||
<?php print_alert_box(
|
||||
gettext(
|
||||
'PPTP is not considered a secure VPN technology, because it relies upon ' .
|
||||
'the compromised MS-CHAPv2 protocol. If you choose to use PPTP, be aware ' .
|
||||
'that your traffic can be decrypted by virtually any third party. ' .
|
||||
'It should be considered an unencrypted tunneling protocol.'
|
||||
) . ' <a href="https://isc.sans.edu/diary/End+of+Days+for+MS-CHAPv2/13807">' .
|
||||
gettext('Read more') . '</a>.',
|
||||
'danger'
|
||||
); ?>
|
||||
|
||||
<section class="col-xs-12">
|
||||
|
||||
<div class="tab-content content-box col-xs-12">
|
||||
|
||||
<form action="vpn_pptp.php" method="post" name="iform" id="iform">
|
||||
|
||||
<div class="table-responsive">
|
||||
<table class="table table-striped table-sort">
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vtable"> </td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="mode" type="radio" onclick="enable_change(false)" value="off"
|
||||
<?php if (($pconfig['mode'] != "server") && ($pconfig['mode'] != "redir")) {
|
||||
echo "checked=\"checked\"";
|
||||
}?> />
|
||||
<?=gettext("Off"); ?></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vtable"> </td>
|
||||
<td width="78%" class="vtable">
|
||||
|
||||
<input type="radio" name="mode" value="redir" onclick="enable_change(false)" <?php if ($pconfig['mode'] == "redir") {
|
||||
echo "checked=\"checked\"";
|
||||
} ?> />
|
||||
<?=gettext("Redirect incoming PPTP connections to");?>:</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncellreq"><?=gettext("PPTP redirection");?></td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="redir" type="text" class="form-control unknown" id="redir" size="20" value="<?=htmlspecialchars($pconfig['redir']);?>" />
|
||||
<br />
|
||||
<?=gettext("Enter the IP address of a host which will accept incoming " .
|
||||
"PPTP connections"); ?>.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vtable"> </td>
|
||||
<td width="78%" class="vtable">
|
||||
<input type="radio" name="mode" value="server" onclick="enable_change(false)" <?php if ($pconfig['mode'] == "server") {
|
||||
echo "checked=\"checked\"";
|
||||
} ?> />
|
||||
<?=gettext("Enable PPTP server"); ?></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncellreq"><?=gettext("No. PPTP users"); ?></td>
|
||||
<td width="78%" class="vtable">
|
||||
<select id="n_pptp_units" name="n_pptp_units">
|
||||
<?php
|
||||
$toselect = ($pconfig['n_pptp_units'] > 0) ? $pconfig['n_pptp_units'] : 16;
|
||||
for ($x=1; $x<255; $x++) {
|
||||
if ($x == $toselect) {
|
||||
$SELECTED = " selected=\"selected\"";
|
||||
} else {
|
||||
$SELECTED = "";
|
||||
}
|
||||
echo "<option value=\"{$x}\"{$SELECTED}>{$x}</option>\n";
|
||||
}
|
||||
?>
|
||||
</select>
|
||||
<br /><?=gettext("Hint: 10 is ten PPTP clients"); ?>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncellreq"><?=gettext("Server address"); ?></td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="localip" type="text" class="form-control unknown" id="localip" size="20" value="<?=htmlspecialchars($pconfig['localip']);?>" />
|
||||
<br />
|
||||
<?=gettext("Enter the IP address the PPTP server should give to clients for use as their \"gateway\""); ?>.
|
||||
<br />
|
||||
<?=gettext("Typically this is set to an unused IP just outside of the client range"); ?>.
|
||||
<br />
|
||||
<br />
|
||||
<?=gettext("NOTE: This should NOT be set to any IP address currently in use on this firewall"); ?>.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncellreq"><?=gettext("Remote address " .
|
||||
"range"); ?></td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="remoteip" type="text" class="form-control unknown" id="remoteip" size="20" value="<?=htmlspecialchars($pconfig['remoteip']);?>" />
|
||||
<br />
|
||||
<?=gettext("Specify the starting address for the client IP subnet"); ?>.<br />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("PPTP DNS Servers"); ?></td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="pptp_dns1" type="text" class="form-control unknown" id="pptp_dns1" size="20" value="<?=htmlspecialchars($pconfig['pptp_dns1']);?>" />
|
||||
<br />
|
||||
<input name="pptp_dns2" type="text" class="form-control unknown" id="pptp_dns2" size="20" value="<?=htmlspecialchars($pconfig['pptp_dns2']);?>" />
|
||||
<br />
|
||||
<?=gettext("primary and secondary DNS servers assigned to PPTP clients"); ?><br />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("WINS Server"); ?></td>
|
||||
<td width="78%" valign="top" class="vtable">
|
||||
<input name="wins" class="form-control unknown" id="wins" size="20" value="<?=htmlspecialchars($pconfig['wins']);?>" />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("RADIUS"); ?></td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="radiusenable" type="checkbox" id="radiusenable" onclick="enable_change(false)" value="yes" <?php if ($pconfig['radiusenable']) {
|
||||
echo "checked=\"checked\"";
|
||||
} ?> />
|
||||
<strong><?=gettext("Use a RADIUS server for authentication"); ?></strong><br />
|
||||
<?=gettext("When set, all users will be authenticated using " .
|
||||
"the RADIUS server specified below. The local user database " .
|
||||
"will not be used"); ?>.<br />
|
||||
<br />
|
||||
<input name="radacct_enable" type="checkbox" id="radacct_enable" onclick="enable_change(false)" value="yes" <?php if ($pconfig['radacct_enable']) {
|
||||
echo "checked=\"checked\"";
|
||||
} ?> />
|
||||
<strong><?=gettext("Enable RADIUS accounting"); ?> <br />
|
||||
</strong><?=gettext("Sends accounting packets to the RADIUS server"); ?>.<br />
|
||||
<br />
|
||||
<input name="radiussecenable" type="checkbox" id="radiussecenable" onclick="enable_change(false)" value="yes" <?php if ($pconfig['radiussecenable']) {
|
||||
echo "checked=\"checked\"";
|
||||
} ?> />
|
||||
<strong><?=gettext("Secondary RADIUS server for failover authentication"); ?></strong><br />
|
||||
<?=gettext("When set, all requests will go to the secondary server when primary fails"); ?><br />
|
||||
<br />
|
||||
<input name="radiusissueips" value="yes" type="checkbox" class="form-control" id="radiusissueips"<?php if ($pconfig['radiusissueips']) {
|
||||
echo " checked=\"checked\"";
|
||||
} ?> />
|
||||
<strong><?=gettext("RADIUS issued IPs"); ?></strong>
|
||||
<br /><?=gettext("Issue IP addresses via RADIUS server"); ?>.
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("RADIUS NAS IP"); ?></td>
|
||||
<td width="78%" valign="top" class="vtable">
|
||||
<input name="radius_nasip" class="form-control unknown" id="radius_nasip" size="20" value="<?=htmlspecialchars($pconfig['radius_nasip']);?>" />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("RADIUS Accounting Update"); ?></td>
|
||||
<td width="78%" valign="top" class="vtable">
|
||||
<input name="radius_acct_update" class="form-control unknown" id="radius_acct_update" size="20" value="<?=htmlspecialchars($pconfig['radius_acct_update']);?>" />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("RADIUS Server"); ?> </td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="radiusserver" type="text" class="form-control unknown" id="radiusserver" size="20" value="<?=htmlspecialchars($pconfig['radiusserver']);?>" />
|
||||
<input name="radiusserverport" type="text" class="form-control unknown" id="radiusserverport" size="4" value="<?=htmlspecialchars($pconfig['radiusserverport']);?>" />
|
||||
<input name="radiusserveracctport" type="text" class="form-control unknown" id="radiusserveracctport" size="4" value="<?=htmlspecialchars($pconfig['radiusserveracctport']);?>" />
|
||||
<br />
|
||||
<?=gettext("Enter the IP address, RADIUS port, and RADIUS accounting port of the RADIUS server"); ?>.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("RADIUS shared secret"); ?></td>
|
||||
<td width="78%" valign="top" class="vtable">
|
||||
<input name="radiussecret" type="password" class="form-control pwd" id="radiussecret" size="20" value="<?=htmlspecialchars($pconfig['radiussecret']);?>" />
|
||||
<br />
|
||||
<?=gettext("Enter the shared secret that will be used to authenticate " .
|
||||
"to the RADIUS server"); ?>.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("Secondary RADIUS server"); ?> </td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="radiusserver2" type="text" class="form-control unknown" id="radiusserver2" size="20" value="<?=htmlspecialchars($pconfig['radiusserver2']);?>" />
|
||||
<input name="radiusserver2port" type="text" class="form-control unknown" id="radiusserver2port" size="4" value="<?=htmlspecialchars($pconfig['radiusserver2port']);?>" />
|
||||
<input name="radiusserver2acctport" type="text" class="form-control unknown" id="radiusserver2acctport" size="4" value="<?=htmlspecialchars($pconfig['radiusserver2acctport']);?>" />
|
||||
<br />
|
||||
<?=gettext("Enter the IP address, RADIUS port, and RADIUS accounting port of the RADIUS server"); ?>.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top" class="vncell"><?=gettext("Secondary RADIUS shared secret"); ?></td>
|
||||
<td width="78%" valign="top" class="vtable">
|
||||
<input name="radiussecret2" type="password" class="form-control pwd" id="radiussecret2" size="20" value="<?=htmlspecialchars($pconfig['radiussecret2']);?>" />
|
||||
<br />
|
||||
<?=gettext("Enter the shared secret that will be used to authenticate " .
|
||||
"to the secondary RADIUS server"); ?>.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td height="16" colspan="2" valign="top"></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="middle"> </td>
|
||||
<td width="78%" class="vtable">
|
||||
<input name="req128" type="checkbox" id="req128" value="yes" <?php if ($pconfig['req128']) {
|
||||
echo "checked=\"checked\"";
|
||||
} ?> />
|
||||
<strong><?=gettext("Require 128-bit encryption"); ?></strong><br />
|
||||
<?=gettext("When set, only 128-bit encryption will be accepted. Otherwise " .
|
||||
"40-bit and 56-bit encryption will be accepted as well. Note that " .
|
||||
"encryption will always be forced on PPTP connections (i.e. " .
|
||||
"unencrypted connections will not be accepted)"); ?>.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top"> </td>
|
||||
<td width="78%">
|
||||
<input name="Submit" type="submit" class="btn btn-primary" value="<?=gettext("Save"); ?>" onclick="enable_change(true)" />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width="22%" valign="top"> </td>
|
||||
<td width="78%"><?=sprintf(gettext("Note: don't forget to %sadd a firewall rule%s to permit traffic from PPTP clients!"),'<a href="firewall_rules.php?if=pptp">','</a>') ?></td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
</form>
|
||||
|
||||
</div>
|
||||
</section>
|
||||
</div>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<script type="text/javascript">
|
||||
//<![CDATA[
|
||||
enable_change(false);
|
||||
//]]>
|
||||
</script>
|
||||
<?php print_alert_box(
|
||||
gettext(
|
||||
'PPTP is not considered a secure VPN technology, because it relies upon ' .
|
||||
'the compromised MS-CHAPv2 protocol. If you choose to use PPTP, be aware ' .
|
||||
'that your traffic can be decrypted by virtually any third party. ' .
|
||||
'It should be considered an unencrypted tunneling protocol.'
|
||||
) . ' <a href="https://isc.sans.edu/diary/End+of+Days+for+MS-CHAPv2/13807">' .
|
||||
gettext('Read more') . '</a>.',
|
||||
'danger'
|
||||
); ?>
|
||||
<section class="col-xs-12">
|
||||
<div class="tab-content content-box col-xs-12">
|
||||
<form method="post" name="iform" id="iform">
|
||||
<div class="table-responsive">
|
||||
<table class="table table-striped">
|
||||
<tr>
|
||||
<td width="22%"><b><?=gettext("PPTP settings"); ?></b></td>
|
||||
<td width="78%" align="right">
|
||||
<small><?=gettext("full help"); ?> </small>
|
||||
<i class="fa fa-toggle-off text-danger" style="cursor: pointer;" id="show_all_help_page" type="button"></i>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td>
|
||||
<td>
|
||||
<input name="mode" type="radio" value="off" <?=(($pconfig['mode'] != "server") && ($pconfig['mode'] != "redir")) ? "checked=\"checked\"" : "";?>/>
|
||||
<?=gettext("Off"); ?><br/>
|
||||
<input type="radio" name="mode" value="redir" <?=($pconfig['mode'] == "redir") ? "checked=\"checked\"" : "";?>/>
|
||||
<?=gettext("Redirect incoming PPTP connections to");?>:
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_redir" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("PPTP redirection");?></td>
|
||||
<td>
|
||||
<input name="redir" type="text" id="redir" value="<?=$pconfig['redir'];?>" />
|
||||
<div class="hidden" for="help_for_redir">
|
||||
<?=gettext("Enter the IP address of a host which will accept incoming PPTP connections."); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td>
|
||||
<td>
|
||||
<input type="radio" name="mode" value="server" <?=($pconfig['mode'] == "server") ? "checked=\"checked\"" : "";?>/>
|
||||
<?=gettext("Enable PPTP server"); ?>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_n_pptp_units" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("No. PPTP users"); ?></td>
|
||||
<td>
|
||||
<select id="n_pptp_units" name="n_pptp_units">
|
||||
<?php
|
||||
$toselect = ($pconfig['n_pptp_units'] > 0) ? $pconfig['n_pptp_units'] : 16;
|
||||
for ($x=1; $x<255; $x++) {
|
||||
if ($x == $toselect) {
|
||||
$SELECTED = " selected=\"selected\"";
|
||||
} else {
|
||||
$SELECTED = "";
|
||||
}
|
||||
echo "<option value=\"{$x}\"{$SELECTED}>{$x}</option>\n";
|
||||
}
|
||||
?>
|
||||
</select>
|
||||
<div class="hidden" for="help_for_n_pptp_units">
|
||||
<?=gettext("Hint: 10 is ten PPTP clients"); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_localip" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("Server address"); ?></td>
|
||||
<td>
|
||||
<input name="localip" type="text" id="localip" value="<?=$pconfig['localip'];?>" />
|
||||
<div class="hidden" for="help_for_localip">
|
||||
<?=gettext("Enter the IP address the PPTP server should give to clients for use as their \"gateway\"."); ?>
|
||||
<br />
|
||||
<?=gettext("Typically this is set to an unused IP just outside of the client range."); ?>
|
||||
<br />
|
||||
<br />
|
||||
<?=gettext("NOTE: This should NOT be set to any IP address currently in use on this firewall."); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_remoteip" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("Remote address range"); ?></td>
|
||||
<td>
|
||||
<input name="remoteip" type="text" id="remoteip" value="<?=htmlspecialchars($pconfig['remoteip']);?>" />
|
||||
<div class="hidden" for="help_for_remoteip">
|
||||
<?=gettext("Specify the starting address for the client IP subnet."); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_pptp_dns" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("PPTP DNS Servers"); ?></td>
|
||||
<td>
|
||||
<input name="pptp_dns1" type="text" id="pptp_dns1" value="<?=$pconfig['pptp_dns1'];?>" /><br />
|
||||
<input name="pptp_dns2" type="text" id="pptp_dns2" value="<?=$pconfig['pptp_dns2'];?>" />
|
||||
<div class="hidden" for="help_for_pptp_dns">
|
||||
<?=gettext("primary and secondary DNS servers assigned to PPTP clients"); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><i class="fa fa-info-circle text-muted"></i> <?=gettext("WINS Server"); ?></td>
|
||||
<td>
|
||||
<input name="wins" type="text" id="wins" value="<?=htmlspecialchars($pconfig['wins']);?>" />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_radius" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("RADIUS"); ?></td>
|
||||
<td>
|
||||
<input name="radiusenable" type="checkbox" id="radiusenable" value="yes" <?=($pconfig['radiusenable']) ? "checked=\"checked\"" : "";?>/>
|
||||
<strong><?=gettext("Use a RADIUS server for authentication"); ?></strong><br/>
|
||||
<div class="hidden" for="help_for_radius">
|
||||
<?=gettext("When set, all users will be authenticated using " .
|
||||
"the RADIUS server specified below. The local user database " .
|
||||
"will not be used."); ?>
|
||||
</div>
|
||||
<input name="radacct_enable" type="checkbox" id="radacct_enable" value="yes" <?=($pconfig['radacct_enable']) ? "checked=\"checked\"" : "";?>/>
|
||||
<strong><?=gettext("Enable RADIUS accounting"); ?></strong><br/>
|
||||
<div class="hidden" for="help_for_radius">
|
||||
<?=gettext("Sends accounting packets to the RADIUS server."); ?>
|
||||
</div>
|
||||
<input name="radiussecenable" type="checkbox" id="radiussecenable" value="yes" <?=($pconfig['radiussecenable']) ? "checked=\"checked\"" : "";?>/>
|
||||
<strong><?=gettext("Secondary RADIUS server for failover authentication"); ?></strong><br />
|
||||
<div class="hidden" for="help_for_radius">
|
||||
<?=gettext("When set, all requests will go to the secondary server when primary fails"); ?>
|
||||
</div>
|
||||
<input name="radiusissueips" value="yes" type="checkbox" id="radiusissueips"<?=($pconfig['radiusissueips']) ? " checked=\"checked\"" : "";?>/>
|
||||
<strong><?=gettext("RADIUS issued IPs"); ?></strong>
|
||||
<div class="hidden" for="help_for_radius">
|
||||
<?=gettext("Issue IP addresses via RADIUS server."); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><i class="fa fa-info-circle text-muted"></i> <?=gettext("RADIUS NAS IP"); ?></td>
|
||||
<td>
|
||||
<input name="radius_nasip" type="text" id="radius_nasip" value="<?=$pconfig['radius_nasip'];?>" />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_radius_acct_update" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("RADIUS Accounting Update"); ?></td>
|
||||
<td>
|
||||
<input name="radius_acct_update" type="text" id="radius_acct_update" value="<?=$pconfig['radius_acct_update'];?>" />
|
||||
<div class="hidden" for="help_for_radius_acct_update">
|
||||
<?=gettext("RADIUS accounting update period in seconds"); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_radiusserver" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("RADIUS server Primary"); ?></td>
|
||||
<td>
|
||||
<table class="table table-condensed">
|
||||
<thead>
|
||||
<tr>
|
||||
<th><?=gettext("Server");?></th>
|
||||
<th><?=gettext("Port");?></th>
|
||||
<th><?=gettext("AccPort");?></th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td><input name="radiusserver" type="text" value="<?=$pconfig['radiusserver'];?>" /></td>
|
||||
<td><input name="radiusserverport" type="text" value="<?=$pconfig['radiusserverport'];?>" /></td>
|
||||
<td><input name="radiusserveracctport" type="text" value="<?=$pconfig['radiusserveracctport'];?>" /></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<div class="hidden" for="help_for_radiusserver">
|
||||
<?=gettext("Enter the IP address, authentication port and accounting port (optional) of the RADIUS server."); ?><br />
|
||||
<br /> <?=gettext("standard port 1812 and 1813 accounting"); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_radiussecret" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("RADIUS primary shared secret"); ?></td>
|
||||
<td>
|
||||
<input name="radiussecret" type="password" value="<?=$pconfig['radiussecret'];?>" />
|
||||
<div class="hidden" for="help_for_radiussecret">
|
||||
<?=gettext("Enter the shared secret that will be used to authenticate " .
|
||||
"to the RADIUS server"); ?>.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_radiusserver2" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("RADIUS server Secondary"); ?></td>
|
||||
<td>
|
||||
<table class="table table-condensed">
|
||||
<thead>
|
||||
<tr>
|
||||
<th><?=gettext("Server");?></th>
|
||||
<th><?=gettext("Port");?></th>
|
||||
<th><?=gettext("AccPort");?></th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td><input name="radiusserver2" type="text" value="<?=$pconfig['radiusserver2'];?>" /></td>
|
||||
<td><input name="radiusserver2port" type="text" value="<?=$pconfig['radiusserver2port'];?>" /></td>
|
||||
<td><input name="radiusserver2acctport" type="text" value="<?=$pconfig['radiusserver2acctport'];?>" /></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<div class="hidden" for="help_for_radiusserver2">
|
||||
<?=gettext("Enter the IP address, authentication port and accounting port (optional) of the backup RADIUS server."); ?><br />
|
||||
<br /> <?=gettext("standard port 1812 and 1813 accounting"); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_radiussecret2" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("RADIUS secondary shared secret"); ?></td>
|
||||
<td>
|
||||
<input name="radiussecret2" type="password" id="radiussecret2" size="20" value="<?=htmlspecialchars($pconfig['radiussecret2']);?>" />
|
||||
<div class="hidden" for="help_for_radiussecret2">
|
||||
<?=gettext("Enter the shared secret that will be used to authenticate " ."to the RADIUS server"); ?>.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a id="help_for_req128" href="#" class="showhelp"><i class="fa fa-info-circle"></i></a> <?=gettext("Security");?></td>
|
||||
<td>
|
||||
<input name="req128" type="checkbox" id="req128" value="yes" <?=($pconfig['req128']) ? "checked=\"checked\"" : "";?> />
|
||||
<strong><?=gettext("Require 128-bit encryption"); ?></strong>
|
||||
<div class="hidden" for="help_for_req128">
|
||||
<?=gettext("When set, only 128-bit encryption will be accepted. Otherwise " .
|
||||
"40-bit and 56-bit encryption will be accepted as well. Note that " .
|
||||
"encryption will always be forced on PPTP connections (i.e. " .
|
||||
"unencrypted connections will not be accepted)."); ?>
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td>
|
||||
<td>
|
||||
<input name="Submit" type="submit" class="btn btn-primary" value="<?=gettext("Save"); ?>" />
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td></td>
|
||||
<td><?=sprintf(gettext("Note: don't forget to %sadd a firewall rule%s to permit traffic from PPTP clients!"),'<a href="firewall_rules.php?if=pptp">','</a>') ?></td>
|
||||
</tr>
|
||||
</table>
|
||||
</div>
|
||||
</form>
|
||||
</div>
|
||||
</section>
|
||||
</div>
|
||||
</div>
|
||||
</section>
|
||||
<?php include("foot.inc");
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user