+++ /dev/null
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
-<html>
-
-<head>
- <link rel="stylesheet" href="stylemain.css" type="text/css">
- <link rel="stylesheet" href="colors.css" type="text/css">
- <meta http-equiv="Pragma" content="no-cache">
- <title> IPSec Settings</title>
-
- <script language="javascript" src="util.js"></script>
- <script language="javascript">
-
-<!-- hide
-
-var ipsTableIndex = '<%ejGetJS(ipsTableIndex)%>';
-var ipsConnName = '<%ejGetJS(ipsConnName)%>';
-var ipsRemoteGWAddr = '<%ejGetJS(ipsRemoteGWAddr)%>';
-var ipsLocalIPMode = '<%ejGetJS(ipsLocalIPMode)%>';
-var ipsLocalIP = '<%ejGetJS(ipsLocalIP)%>';
-var ipsLocalMask = '<%ejGetJS(ipsLocalMask)%>';
-var ipsLocalRangeLo = '<%ejGetJS(ipsLocalRangeLo)%>';
-var ipsLocalRangeHi = '<%ejGetJS(ipsLocalRangeHi)%>';
-var ipsRemoteIPMode = '<%ejGetJS(ipsRemoteIPMode)%>';
-var ipsRemoteIP = '<%ejGetJS(ipsRemoteIP)%>';
-var ipsRemoteMask = '<%ejGetJS(ipsRemoteMask)%>';
-var ipsRemoteRangeLo = '<%ejGetJS(ipsRemoteRangeLo)%>';
-var ipsRemoteRangeHi = '<%ejGetJS(ipsRemoteRangeHi)%>';
-var ipsKeyExM = '<%ejGetJS(ipsKeyExM)%>';
-var ipsAuthM = '<%ejGetJS(ipsAuthM)%>';
-var ipsPSK = '<%ejGetJS(ipsPSK)%>';
-var ipsCertificateName = '<%ejGetJS(ipsCertificateName)%>';
-var ipsPerfectFSEn = '<%ejGetJS(ipsPerfectFSEn)%>';
-var ipsManualEncryptionAlgo = '<%ejGetJS(ipsManualEncryptionAlgo)%>';
-var ipsManualEncryptionKey = '<%ejGetJS(ipsManualEncryptionKey)%>';
-var ipsManualAuthAlgo = '<%ejGetJS(ipsManualAuthAlgo)%>';
-var ipsManualAuthKey = '<%ejGetJS(ipsManualAuthKey)%>';
-var ipsSPI = '<%ejGetJS(ipsSPI)%>';
-var ipsPh1Mode = '<%ejGetJS(ipsPh1Mode)%>';
-var ipsPh1EncryptionAlgo = '<%ejGetJS(ipsPh1EncryptionAlgo)%>';
-var ipsPh1IntegrityAlgo = '<%ejGetJS(ipsPh1IntegrityAlgo)%>';
-var ipsPh1DHGroup = '<%ejGetJS(ipsPh1DHGroup)%>';
-var ipsPh1KeyTime = '<%ejGetJS(ipsPh1KeyTime)%>';
-var ipsPh2EncryptionAlgo = '<%ejGetJS(ipsPh2EncryptionAlgo)%>';
-var ipsPh2IntegrityAlgo = '<%ejGetJS(ipsPh2IntegrityAlgo)%>';
-var ipsPh2DHGroup = '<%ejGetJS(ipsPh2DHGroup)%>';
-var ipsPh2KeyTime = '<%ejGetJS(ipsPh2KeyTime)%>';
-
-
-var showAdv = 0;
-
-
-function setSelect(item, value)
-{
- for (i=0; i<item.options.length; i++) {
- if (item.options[i].value == value) {
- item.selectedIndex = i;
- break;
- }
- }
-}
-
-function submitText(item, name)
-{
- return '&' + name + '=' + item.value;
-}
-
-function getSelect(item)
-{
- var idx;
- if (item.options.length > 0) {
- idx = item.selectedIndex;
- return item.options[idx].value;
- }
- else {
- return '';
- }
-}
-
-function submitSelect(item, name)
-{
- return '&' + name + '=' + getSelect(item);
-}
-
-function loadCertList()
-{
- with ( document.forms[0] ) {
-<%ejGetStr(ipsCertList)%>
- }
-}
-
-function localIPModeChange() {
- with ( document.forms[0] ) {
- var mode = localIPMode[localIPMode.selectedIndex].value;
- switch ( mode ) {
- case "subnet":
- showhide("IP11", 1);
- showhide("IP12", 1);
- break;
- case "single":
- showhide("IP11", 1);
- showhide("IP12", 0);
- break;
- default:
- }
- }
-}
-
-function remoteIPModeChange() {
- with ( document.forms[0] ) {
- var mode = remoteIPMode[remoteIPMode.selectedIndex].value;
- switch ( mode ) {
- case "subnet":
- showhide("IP21", 1);
- showhide("IP22", 1);
- break;
- case "single":
- showhide("IP21", 1);
- showhide("IP22", 0);
- break;
- default:
- }
- }
-}
-
-
-function keyauthChange() {
- with ( document.forms[0] ) {
- var keymode = keyExM[keyExM.selectedIndex].value;
- var authmode = authM[authM.selectedIndex].value;
- switch (keymode) {
- case "auto":
- showhide("AutoKeyEx", 1);
- showhide("ManualKey", 0);
- switch (authmode) {
- case "pre_shared_key":
- showhide("PSK", 1);
- showhide("Certificate", 0);
- break;
- case "certificate":
- showhide("PSK", 0);
- showhide("Certificate", 1);
- break;
- default:
- }
- break;
- case "manual":
- showhide("AutoKeyEx", 0);
- showhide("ManualKey", 1);
- showhide("PSK", 0);
- showhide("Certificate", 0);
- showAdv = 0;
- showhideAdv(showAdv);
- break;
- default:
- }
- }
-}
-
-function switchAdv() {
- with ( document.forms[0] ) {
- showAdv = !showAdv;
- showhideAdv(showAdv);
- }
-}
-
-function showhideAdv(show) {
- with ( document.forms[0] ) {
- showhide("adv", show);
- if (show) {
- advSWButton.value = "Hide Advanced Settings";
- }
- else {
- advSWButton.value = "Show Advanced Settings";
- }
- showAdv = show;
- }
-}
-
-//////////////////////////
-
-function formLoad()
-{
- loadCertList();
- with ( document.forms[0] ) {
- connName.value = ipsConnName;
- remoteGWAddr.value = ipsRemoteGWAddr;
- setSelect(localIPMode, ipsLocalIPMode);
- localIP.value = ipsLocalIP;
- localMask.value = ipsLocalMask;
- setSelect(remoteIPMode, ipsRemoteIPMode);
- remoteIP.value = ipsRemoteIP;
- remoteMask.value = ipsRemoteMask;
- setSelect(keyExM, ipsKeyExM);
- setSelect(authM, ipsAuthM);
- psk.value = ipsPSK;
- setSelect(certificateName, ipsCertificateName);
- perfectFSEn.value = ipsPerfectFSEn;
- setSelect(manualEncryptionAlgo, ipsManualEncryptionAlgo);
- manualEncryptionKey.value = ipsManualEncryptionKey;
- setSelect(manualAuthAlgo, ipsManualAuthAlgo)
- manualAuthKey.value = ipsManualAuthKey;
- spi.value = ipsSPI;
- setSelect(ph1Mode, ipsPh1Mode);
- setSelect(ph1EncryptionAlgo, ipsPh1EncryptionAlgo);
- setSelect(ph1IntegrityAlgo, ipsPh1IntegrityAlgo);
- setSelect(ph1DHGroup, ipsPh1DHGroup);
- ph1KeyTime.value = ipsPh1KeyTime;
- setSelect(ph2EncryptionAlgo, ipsPh2EncryptionAlgo);
- setSelect(ph2IntegrityAlgo, ipsPh2IntegrityAlgo);
- setSelect(ph2DHGroup, ipsPh2DHGroup);
- ph2KeyTime.value = ipsPh2KeyTime;
- }
-
- localIPModeChange();
- remoteIPModeChange();
- keyauthChange();
- showhideAdv(showAdv);
-
-}
-
-function applyClick() {
- var loc = 'ipsec.cmd?action=editsubmit';
- with ( document.forms[0] ) {
-
- if ( isValidNameWSpace(connName.value) == false ) {
- alert('Invalid connection name "' + connName.value + '".');
- return;
- }
-
- if ( isValidIpAddress(localIP.value) == false ) {
- alert('Local IP Address "' + localIP.value + '" is invalid.');
- return;
- }
- if ( getSelect(localIPMode) == "subnet" && isValidSubnetMask(localMask.value) == false ) {
- alert('Local Subnet Mask "' + localMask.value + '" is invalid.');
- return;
- }
- if ( isValidIpAddress(remoteIP.value) == false ) {
- alert('Remote IP Address "' + remoteIP.value + '" is invalid.');
- return;
- }
- if ( getSelect(remoteIPMode) == "subnet" && isValidSubnetMask(remoteMask.value) == false ) {
- alert('Remote Subnet Mask "' + remoteMask.value + '" is invalid.');
- return;
- }
- if ( getSelect(keyExM) == "auto" ) {
- val = parseInt(ph1KeyTime.value);
- if ( isNaN(val) == true || val < 0 ) {
- alert('Phase 1 Key Life Time is invalid.');
- showhideAdv(1);
- return;
- }
- val = parseInt(ph2KeyTime.value);
- if ( isNaN(val) == true || val < 0 ) {
- alert('Phase 2 Key Life Time is invalid.');
- showhideAdv(1);
- return;
- }
- if ( getSelect(authM) == "certificate") {
- if ( certificateName.options.length == 0) {
- alert('No certificate avaiable for authentication. Use Certificate menu to add certificates or choose another autentication method.');
- return;
- }
- }
- }
- if ( getSelect(keyExM) == "manual" ) {
- var ekeys;
- if ( getSelect(manualEncryptionAlgo) == "des-cbc") {
- ekeys = 16;
- }
- else if ( getSelect(manualEncryptionAlgo) == "3des-cbc") {
- ekeys = 48;
- }
- else {
- ekeys = -1;
- }
- if ( ekeys != -1 && isValidHexKey(manualEncryptionKey.value, ekeys) == false) {
- alert('Invalid Manual Encryption Key.');
- return;
- }
- var akeys;
- if ( getSelect(manualAuthAlgo) == "hmac-md5") {
- akeys = 32;
- }
- else if ( getSelect(manualAuthAlgo) == "hmac-sha1") {
- akeys = 40;
- }
- else {
- akeys = -1;
- }
- if ( akeys != -1 && isValidHexKey(manualAuthKey.value, akeys) == false) {
- alert('Invalid Manual Authentication Key.');
- return;
- }
- }
-
- loc += '&ipsTableIndex=' + ipsTableIndex;
- loc += '&ipsConnName=' + connName.value;
- loc += submitText(connName, 'ipsConnName');
- loc += submitText(remoteGWAddr, 'ipsRemoteGWAddr');
- loc += submitSelect(localIPMode, 'ipsLocalIPMode');
- loc += submitText(localIP, 'ipsLocalIP');
- loc += submitText(localMask, 'ipsLocalMask');
- loc += submitSelect(remoteIPMode, 'ipsRemoteIPMode');
- loc += submitText(remoteIP, 'ipsRemoteIP');
- loc += submitText(remoteMask, 'ipsRemoteMask');
- loc += submitSelect(keyExM, 'ipsKeyExM');
- loc += submitSelect(authM, 'ipsAuthM');
- loc += submitText(psk, 'ipsPSK');
- loc += submitSelect(certificateName, 'ipsCertificateName');
- loc += submitSelect(perfectFSEn, 'ipsPerfectFSEn');
- loc += submitSelect(manualEncryptionAlgo, 'ipsManualEncryptionAlgo');
- loc += submitText(manualEncryptionKey, 'ipsManualEncryptionKey');
- loc += submitSelect(manualAuthAlgo, 'ipsManualAuthAlgo');
- loc += submitText(manualAuthKey, 'ipsManualAuthKey');
- loc += submitText(spi, 'ipsSPI');
- loc += submitSelect(ph1Mode, 'ipsPh1Mode');
- loc += submitSelect(ph1EncryptionAlgo, 'ipsPh1EncryptionAlgo');
- loc += submitSelect(ph1IntegrityAlgo, 'ipsPh1IntegrityAlgo');
- loc += submitSelect(ph1DHGroup, 'ipsPh1DHGroup');
- loc += submitText(ph1KeyTime, 'ipsPh1KeyTime');
- loc += submitSelect(ph2EncryptionAlgo, 'ipsPh2EncryptionAlgo');
- loc += submitSelect(ph2IntegrityAlgo, 'ipsPh2IntegrityAlgo');
- loc += submitSelect(ph2DHGroup, 'ipsPh2DHGroup');
- loc += submitText(ph2KeyTime, 'ipsPh2KeyTime');
-
- }
- var code = 'location = "' + loc + '"';
- eval(code);
-}
-
-// done hiding -->
-</script>
-
-</head>
-
-<body onLoad="formLoad()">
-<blockquote>
-<form>
- <b>IPSec Settings</b>
- <br><br>
- <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%"> IPSec Connection Name </td>
- <td> <input name="connName" size="20" maxlength="60" value="testconnection" type="text"> </td>
- </tr>
- <tr>
- <td width="40%">Remote IPSec Gateway Address (IP or Domain Name)</td>
- <td><input name="remoteGWAddr" size="20" maxlength="255" value="" type="text"></td>
- </tr>
- </table></div>
- <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr><td> </td></tr>
- <tr>
- <td width="40%"> Tunnel access from local IP addresses </td>
- <td >
- <select name="localIPMode" onchange="localIPModeChange();">
- <option value="subnet">Subnet</option>
- <option value="single">Single Address</option>
- </select>
- </td>
- </tr>
- </table>
- <div id = "IP11"><table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%"> IP Address for VPN</td>
- <td> <input name="localIP" type="text"> </td>
- </td>
- </tr>
- </table></div>
- <div id = "IP12"><table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%"> IP Subnetmask</td>
- <td> <input name="localMask" type="text"> </td>
- </tr>
- </table></div>
- <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr><td></td><td> </td></tr>
- <tr>
- <td width="40%"> Tunnel access from remote IP addresses </td>
- <td >
- <select name="remoteIPMode" onchange="remoteIPModeChange();">
- <option value="subnet" selected>Subnet</option>
- <option value="single">Single Address</option>
- </select>
- </td>
- </tr>
- </table>
- <div id = "IP21"><table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%"> IP Address for VPN</td>
- <td> <input name="remoteIP" type="text"> </td>
- </tr>
- </table></div>
- <div id = "IP22"><table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%"> IP Subnetmask</td>
- <td> <input name="remoteMask" type="text"> </td>
- </tr>
- </table></div>
- <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr><td> </td><td> </td></tr>
- <tr>
- <td width="40%">Key Exchange Method </td>
- <td><select name="keyExM" onChange="keyauthChange();">
- <option value="auto">Auto(IKE)</option>
- <option value="manual">Manual</option>
- </select>
- </td>
- </tr>
- </table>
- <div id="AutoKeyEx"><table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%"> Authentication Method </td>
- <td>
- <select name="authM" onChange="keyauthChange();">
- <option value="pre_shared_key">Pre-Shared Key</option>
- <option value="certificate">Certificate (X.509)</option>
- </select>
- </td>
- </tr>
- </table>
- <div id="PSK"><table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%">Pre-Shared Key</td>
- <td> <input name="psk"></td>
- </tr>
- </table></div>
- <div id="Certificate">
- <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%"> Certificates </td>
- <td><select name="certificateName">
- </select></td>
- </tr>
- </table></div>
- <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%">Perfect Forward Secrecy</td>
- <td align="left" >
- <select name="perfectFSEn">
- <option value="enable">Enable</option>
- <option value="disable">Disable</option>
- </select>
- </td>
- </tr>
- <tr><td> </td></tr>
- <tr>
- <td width="40%">Advanced IKE Settings</td>
- <td><input name="advSWButton" type="button" value="Show Advanced Settings" onclick="switchAdv();" ></td>
- </tr>
- </table></div>
- <div id="ManualKey"> <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td width="40%">Encryption Algorithm</td>
- <td>
- <select name="manualEncryptionAlgo">
- <option value="des-cbc">DES</option>
- <option value="3des-cbc" selected>3DES</option>
- <option value="aes-ctr">AES</option>
- </select>
- </td>
- </tr>
- <tr>
- <td width = "40%"> Encryption Key </td>
- <td> <input name="manualEncryptionKey", size = "40" maxlength = "60" value="a0bc8475912431d1"> DES: 16 digit Hex, 3DES: 48 digit Hex <br></td>
- </tr>
- <tr>
- <td width="40%">Authentication Algorithm</td>
- <td>
- <select name="manualAuthAlgo">
- <option value="hmac-md5">MD5</option>
- <option value="hmac-sha1">SHA1</option>
- </select>
- </td>
- </tr>
- <tr>
- <td> Authentication Key </td>
- <td> <input name="manualAuthKey" size="50" maxlength = "60" value="a0bc8475912431d1a7bc458ef12837516"> MD5: 32 digit Hex, SHA1: 40 digit Hex </td>
- </tr>
- <tr>
- <td> SPI </td>
- <td> <input name="spi" size="8" maxlength = "8" value="105"> Hex 100-FFFFFFFF</td>
- </tr>
- </table></div>
- <div id = "adv">
- <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr>
- <td> Phase 1</td>
- </tr>
- <tr>
- <td width="40%">Mode</td>
- <td>
- <select name="ph1Mode">
- <option value="main">Main</option>
- <option value="aggressive">Aggressive</option>
- </select>
- </td>
- </tr>
- <tr>
- <td width="40%">Encryption Algorithm</td>
- <td>
- <select name="ph1EncryptionAlgo">
- <option value="des">DES</option>
- <option value="3des" selected>3DES</option>
- <option value="aes128">AES - 128</option>
- <option value="aes192">AES - 192</option>
- <option value="aes256">AES - 256</option>
- </select>
- </td>
- </tr>
- <tr>
- <td width="40%">Integrity Algorithm</td>
- <td>
- <select name="ph1IntegrityAlgo">
- <option value="md5">MD5</option>
- <option value="sha1">SHA1</option>
- </select>
- </td>
- <tr>
- <td width="40%">Select Diffie-Hellman Group for Key Exchange</td>
- <td>
- <select name="ph1DHGroup">
- <option value="modp768">768bit</option>
- <option value="modp1024">1024bit</option>
- <option value="modp1536">1536bit</option>
- <option value="modp2048">2048bit</option>
- <option value="modp3072">3072bit</option>
- <option value="modp4096">4096bit</option>
- <option value="modp6144">6144bit</option>
- <option value="modp8192">8192bit</option>
- </select>
- </td>
- </tr>
- <tr>
- <td width="40%">Key Life Time </td>
- <td> <input name="ph1KeyTime" >   Seconds </td>
- </tr>
- <tr>
- <tr><td> </td></tr>
- <tr>
- <td> Phase 2</td>
- </tr>
- <tr>
- <td width="40%">Encryption Algorithm</td>
- <td>
- <select name="ph2EncryptionAlgo">
- <option value="des">DES</option>
- <option value="3des" selected >3DES</option>
- <option value="aes128">AES - 128</option>
- <option value="aes192">AES - 192</option>
- <option value="aes256">AES - 256</option>
- </select>
- </td>
- </tr>
- <tr>
- <td width="40%">Integrity Algorithm</td>
- <td>
- <select name="ph2IntegrityAlgo">
- <option value="hmac_md5">MD5</option>
- <option value="hmac_sha1">SHA1</option>
- </select>
- </td>
- </tr>
- <tr>
- <td width="40%">Select Diffie-Hellman Group for Key Exchange</td>
- <td>
- <select name="ph2DHGroup">
- <option value="modp768">768bit</option>
- <option value="modp1024">1024bit</option>
- <option value="modp1536">1536bit</option>
- <option value="modp2048">2048bit</option>
- <option value="modp3072">3072bit</option>
- <option value="modp4096">4096bit</option>
- <option value="modp6144">6144bit</option>
- <option value="modp8192">8192bit</option>
- </select>
- </td>
- </tr>
- <tr>
- <td width="40%">Key Life Time </td>
- <td> <input name="ph2KeyTime" >   Seconds </td>
- </tr>
- </table>
- </div>
- <table border="0" cellpadding="0" cellspacing="2" width="100%">
- <tr><td></td><td> </td></tr>
- <tr>
- <td colspan="2" align="center">
- <input value="Save / Apply" type="button" onclick="applyClick();" >
- </td>
- </tr>
- </table>
-</form>
-</blockquote>
-</body>
-</html>