--- /dev/null
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<html>
+
+<head>
+ <link rel="stylesheet" href="stylemain.css" type="text/css">
+ <link rel="stylesheet" href="colors.css" type="text/css">
+ <meta http-equiv="Pragma" content="no-cache">
+ <title> IPSec Settings</title>
+
+ <script language="javascript" src="util.js"></script>
+ <script language="javascript">
+
+<!-- hide
+
+var ipsTableIndex = '<%ejGetJS(ipsTableIndex)%>';
+var ipsConnName = '<%ejGetJS(ipsConnName)%>';
+var ipsRemoteGWAddr = '<%ejGetJS(ipsRemoteGWAddr)%>';
+var ipsLocalIPMode = '<%ejGetJS(ipsLocalIPMode)%>';
+var ipsLocalIP = '<%ejGetJS(ipsLocalIP)%>';
+var ipsLocalMask = '<%ejGetJS(ipsLocalMask)%>';
+var ipsLocalRangeLo = '<%ejGetJS(ipsLocalRangeLo)%>';
+var ipsLocalRangeHi = '<%ejGetJS(ipsLocalRangeHi)%>';
+var ipsRemoteIPMode = '<%ejGetJS(ipsRemoteIPMode)%>';
+var ipsRemoteIP = '<%ejGetJS(ipsRemoteIP)%>';
+var ipsRemoteMask = '<%ejGetJS(ipsRemoteMask)%>';
+var ipsRemoteRangeLo = '<%ejGetJS(ipsRemoteRangeLo)%>';
+var ipsRemoteRangeHi = '<%ejGetJS(ipsRemoteRangeHi)%>';
+var ipsKeyExM = '<%ejGetJS(ipsKeyExM)%>';
+var ipsAuthM = '<%ejGetJS(ipsAuthM)%>';
+var ipsPSK = '<%ejGetJS(ipsPSK)%>';
+var ipsCertificateName = '<%ejGetJS(ipsCertificateName)%>';
+var ipsPerfectFSEn = '<%ejGetJS(ipsPerfectFSEn)%>';
+var ipsManualEncryptionAlgo = '<%ejGetJS(ipsManualEncryptionAlgo)%>';
+var ipsManualEncryptionKey = '<%ejGetJS(ipsManualEncryptionKey)%>';
+var ipsManualAuthAlgo = '<%ejGetJS(ipsManualAuthAlgo)%>';
+var ipsManualAuthKey = '<%ejGetJS(ipsManualAuthKey)%>';
+var ipsSPI = '<%ejGetJS(ipsSPI)%>';
+var ipsPh1Mode = '<%ejGetJS(ipsPh1Mode)%>';
+var ipsPh1EncryptionAlgo = '<%ejGetJS(ipsPh1EncryptionAlgo)%>';
+var ipsPh1IntegrityAlgo = '<%ejGetJS(ipsPh1IntegrityAlgo)%>';
+var ipsPh1DHGroup = '<%ejGetJS(ipsPh1DHGroup)%>';
+var ipsPh1KeyTime = '<%ejGetJS(ipsPh1KeyTime)%>';
+var ipsPh2EncryptionAlgo = '<%ejGetJS(ipsPh2EncryptionAlgo)%>';
+var ipsPh2IntegrityAlgo = '<%ejGetJS(ipsPh2IntegrityAlgo)%>';
+var ipsPh2DHGroup = '<%ejGetJS(ipsPh2DHGroup)%>';
+var ipsPh2KeyTime = '<%ejGetJS(ipsPh2KeyTime)%>';
+
+
+var showAdv = 0;
+
+
+function setSelect(item, value)
+{
+ for (i=0; i<item.options.length; i++) {
+ if (item.options[i].value == value) {
+ item.selectedIndex = i;
+ break;
+ }
+ }
+}
+
+function submitText(item, name)
+{
+ return '&' + name + '=' + item.value;
+}
+
+function getSelect(item)
+{
+ var idx;
+ if (item.options.length > 0) {
+ idx = item.selectedIndex;
+ return item.options[idx].value;
+ }
+ else {
+ return '';
+ }
+}
+
+function submitSelect(item, name)
+{
+ return '&' + name + '=' + getSelect(item);
+}
+
+function loadCertList()
+{
+ with ( document.forms[0] ) {
+<%ejGetStr(ipsCertList)%>
+ }
+}
+
+function localIPModeChange() {
+ with ( document.forms[0] ) {
+ var mode = localIPMode[localIPMode.selectedIndex].value;
+ switch ( mode ) {
+ case "subnet":
+ showhide("IP11", 1);
+ showhide("IP12", 1);
+ break;
+ case "single":
+ showhide("IP11", 1);
+ showhide("IP12", 0);
+ break;
+ default:
+ }
+ }
+}
+
+function remoteIPModeChange() {
+ with ( document.forms[0] ) {
+ var mode = remoteIPMode[remoteIPMode.selectedIndex].value;
+ switch ( mode ) {
+ case "subnet":
+ showhide("IP21", 1);
+ showhide("IP22", 1);
+ break;
+ case "single":
+ showhide("IP21", 1);
+ showhide("IP22", 0);
+ break;
+ default:
+ }
+ }
+}
+
+
+function keyauthChange() {
+ with ( document.forms[0] ) {
+ var keymode = keyExM[keyExM.selectedIndex].value;
+ var authmode = authM[authM.selectedIndex].value;
+ switch (keymode) {
+ case "auto":
+ showhide("AutoKeyEx", 1);
+ showhide("ManualKey", 0);
+ switch (authmode) {
+ case "pre_shared_key":
+ showhide("PSK", 1);
+ showhide("Certificate", 0);
+ break;
+ case "certificate":
+ showhide("PSK", 0);
+ showhide("Certificate", 1);
+ break;
+ default:
+ }
+ break;
+ case "manual":
+ showhide("AutoKeyEx", 0);
+ showhide("ManualKey", 1);
+ showhide("PSK", 0);
+ showhide("Certificate", 0);
+ showAdv = 0;
+ showhideAdv(showAdv);
+ break;
+ default:
+ }
+ }
+}
+
+function switchAdv() {
+ with ( document.forms[0] ) {
+ showAdv = !showAdv;
+ showhideAdv(showAdv);
+ }
+}
+
+function showhideAdv(show) {
+ with ( document.forms[0] ) {
+ showhide("adv", show);
+ if (show) {
+ advSWButton.value = "Hide Advanced Settings";
+ }
+ else {
+ advSWButton.value = "Show Advanced Settings";
+ }
+ showAdv = show;
+ }
+}
+
+//////////////////////////
+
+function formLoad()
+{
+ loadCertList();
+ with ( document.forms[0] ) {
+ connName.value = ipsConnName;
+ remoteGWAddr.value = ipsRemoteGWAddr;
+ setSelect(localIPMode, ipsLocalIPMode);
+ localIP.value = ipsLocalIP;
+ localMask.value = ipsLocalMask;
+ setSelect(remoteIPMode, ipsRemoteIPMode);
+ remoteIP.value = ipsRemoteIP;
+ remoteMask.value = ipsRemoteMask;
+ setSelect(keyExM, ipsKeyExM);
+ setSelect(authM, ipsAuthM);
+ psk.value = ipsPSK;
+ setSelect(certificateName, ipsCertificateName);
+ perfectFSEn.value = ipsPerfectFSEn;
+ setSelect(manualEncryptionAlgo, ipsManualEncryptionAlgo);
+ manualEncryptionKey.value = ipsManualEncryptionKey;
+ setSelect(manualAuthAlgo, ipsManualAuthAlgo)
+ manualAuthKey.value = ipsManualAuthKey;
+ spi.value = ipsSPI;
+ setSelect(ph1Mode, ipsPh1Mode);
+ setSelect(ph1EncryptionAlgo, ipsPh1EncryptionAlgo);
+ setSelect(ph1IntegrityAlgo, ipsPh1IntegrityAlgo);
+ setSelect(ph1DHGroup, ipsPh1DHGroup);
+ ph1KeyTime.value = ipsPh1KeyTime;
+ setSelect(ph2EncryptionAlgo, ipsPh2EncryptionAlgo);
+ setSelect(ph2IntegrityAlgo, ipsPh2IntegrityAlgo);
+ setSelect(ph2DHGroup, ipsPh2DHGroup);
+ ph2KeyTime.value = ipsPh2KeyTime;
+ }
+
+ localIPModeChange();
+ remoteIPModeChange();
+ keyauthChange();
+ showhideAdv(showAdv);
+
+}
+
+function applyClick() {
+ var loc = 'ipsec.cmd?action=editsubmit';
+ with ( document.forms[0] ) {
+
+ if ( isValidNameWSpace(connName.value) == false ) {
+ alert('Invalid connection name "' + connName.value + '".');
+ return;
+ }
+
+ if ( isValidIpAddress(localIP.value) == false ) {
+ alert('Local IP Address "' + localIP.value + '" is invalid.');
+ return;
+ }
+ if ( getSelect(localIPMode) == "subnet" && isValidSubnetMask(localMask.value) == false ) {
+ alert('Local Subnet Mask "' + localMask.value + '" is invalid.');
+ return;
+ }
+ if ( isValidIpAddress(remoteIP.value) == false ) {
+ alert('Remote IP Address "' + remoteIP.value + '" is invalid.');
+ return;
+ }
+ if ( getSelect(remoteIPMode) == "subnet" && isValidSubnetMask(remoteMask.value) == false ) {
+ alert('Remote Subnet Mask "' + remoteMask.value + '" is invalid.');
+ return;
+ }
+ if ( getSelect(keyExM) == "auto" ) {
+ val = parseInt(ph1KeyTime.value);
+ if ( isNaN(val) == true || val < 0 ) {
+ alert('Phase 1 Key Life Time is invalid.');
+ showhideAdv(1);
+ return;
+ }
+ val = parseInt(ph2KeyTime.value);
+ if ( isNaN(val) == true || val < 0 ) {
+ alert('Phase 2 Key Life Time is invalid.');
+ showhideAdv(1);
+ return;
+ }
+ if ( getSelect(authM) == "certificate") {
+ if ( certificateName.options.length == 0) {
+ alert('No certificate avaiable for authentication. Use Certificate menu to add certificates or choose another autentication method.');
+ return;
+ }
+ }
+ }
+ if ( getSelect(keyExM) == "manual" ) {
+ var ekeys;
+ if ( getSelect(manualEncryptionAlgo) == "des-cbc") {
+ ekeys = 16;
+ }
+ else if ( getSelect(manualEncryptionAlgo) == "3des-cbc") {
+ ekeys = 48;
+ }
+ else {
+ ekeys = -1;
+ }
+ if ( ekeys != -1 && isValidHexKey(manualEncryptionKey.value, ekeys) == false) {
+ alert('Invalid Manual Encryption Key.');
+ return;
+ }
+ var akeys;
+ if ( getSelect(manualAuthAlgo) == "hmac-md5") {
+ akeys = 32;
+ }
+ else if ( getSelect(manualAuthAlgo) == "hmac-sha1") {
+ akeys = 40;
+ }
+ else {
+ akeys = -1;
+ }
+ if ( akeys != -1 && isValidHexKey(manualAuthKey.value, akeys) == false) {
+ alert('Invalid Manual Authentication Key.');
+ return;
+ }
+ }
+
+ loc += '&ipsTableIndex=' + ipsTableIndex;
+ loc += '&ipsConnName=' + connName.value;
+ loc += submitText(connName, 'ipsConnName');
+ loc += submitText(remoteGWAddr, 'ipsRemoteGWAddr');
+ loc += submitSelect(localIPMode, 'ipsLocalIPMode');
+ loc += submitText(localIP, 'ipsLocalIP');
+ loc += submitText(localMask, 'ipsLocalMask');
+ loc += submitSelect(remoteIPMode, 'ipsRemoteIPMode');
+ loc += submitText(remoteIP, 'ipsRemoteIP');
+ loc += submitText(remoteMask, 'ipsRemoteMask');
+ loc += submitSelect(keyExM, 'ipsKeyExM');
+ loc += submitSelect(authM, 'ipsAuthM');
+ loc += submitText(psk, 'ipsPSK');
+ loc += submitSelect(certificateName, 'ipsCertificateName');
+ loc += submitSelect(perfectFSEn, 'ipsPerfectFSEn');
+ loc += submitSelect(manualEncryptionAlgo, 'ipsManualEncryptionAlgo');
+ loc += submitText(manualEncryptionKey, 'ipsManualEncryptionKey');
+ loc += submitSelect(manualAuthAlgo, 'ipsManualAuthAlgo');
+ loc += submitText(manualAuthKey, 'ipsManualAuthKey');
+ loc += submitText(spi, 'ipsSPI');
+ loc += submitSelect(ph1Mode, 'ipsPh1Mode');
+ loc += submitSelect(ph1EncryptionAlgo, 'ipsPh1EncryptionAlgo');
+ loc += submitSelect(ph1IntegrityAlgo, 'ipsPh1IntegrityAlgo');
+ loc += submitSelect(ph1DHGroup, 'ipsPh1DHGroup');
+ loc += submitText(ph1KeyTime, 'ipsPh1KeyTime');
+ loc += submitSelect(ph2EncryptionAlgo, 'ipsPh2EncryptionAlgo');
+ loc += submitSelect(ph2IntegrityAlgo, 'ipsPh2IntegrityAlgo');
+ loc += submitSelect(ph2DHGroup, 'ipsPh2DHGroup');
+ loc += submitText(ph2KeyTime, 'ipsPh2KeyTime');
+
+ }
+ var code = 'location = "' + loc + '"';
+ eval(code);
+}
+
+// done hiding -->
+</script>
+
+</head>
+
+<body onLoad="formLoad()">
+<blockquote>
+<form>
+ <b>IPSec Settings</b>
+ <br><br>
+ <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%"> IPSec Connection Name </td>
+ <td> <input name="connName" size="20" maxlength="60" value="testconnection" type="text"> </td>
+ </tr>
+ <tr>
+ <td width="40%">Remote IPSec Gateway Address (IP or Domain Name)</td>
+ <td><input name="remoteGWAddr" size="20" maxlength="255" value="" type="text"></td>
+ </tr>
+ </table></div>
+ <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr><td> </td></tr>
+ <tr>
+ <td width="40%"> Tunnel access from local IP addresses </td>
+ <td >
+ <select name="localIPMode" onchange="localIPModeChange();">
+ <option value="subnet">Subnet</option>
+ <option value="single">Single Address</option>
+ </select>
+ </td>
+ </tr>
+ </table>
+ <div id = "IP11"><table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%"> IP Address for VPN</td>
+ <td> <input name="localIP" type="text"> </td>
+ </td>
+ </tr>
+ </table></div>
+ <div id = "IP12"><table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%"> IP Subnetmask</td>
+ <td> <input name="localMask" type="text"> </td>
+ </tr>
+ </table></div>
+ <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr><td></td><td> </td></tr>
+ <tr>
+ <td width="40%"> Tunnel access from remote IP addresses </td>
+ <td >
+ <select name="remoteIPMode" onchange="remoteIPModeChange();">
+ <option value="subnet" selected>Subnet</option>
+ <option value="single">Single Address</option>
+ </select>
+ </td>
+ </tr>
+ </table>
+ <div id = "IP21"><table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%"> IP Address for VPN</td>
+ <td> <input name="remoteIP" type="text"> </td>
+ </tr>
+ </table></div>
+ <div id = "IP22"><table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%"> IP Subnetmask</td>
+ <td> <input name="remoteMask" type="text"> </td>
+ </tr>
+ </table></div>
+ <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr><td> </td><td> </td></tr>
+ <tr>
+ <td width="40%">Key Exchange Method </td>
+ <td><select name="keyExM" onChange="keyauthChange();">
+ <option value="auto">Auto(IKE)</option>
+ <option value="manual">Manual</option>
+ </select>
+ </td>
+ </tr>
+ </table>
+ <div id="AutoKeyEx"><table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%"> Authentication Method </td>
+ <td>
+ <select name="authM" onChange="keyauthChange();">
+ <option value="pre_shared_key">Pre-Shared Key</option>
+ <option value="certificate">Certificate (X.509)</option>
+ </select>
+ </td>
+ </tr>
+ </table>
+ <div id="PSK"><table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%">Pre-Shared Key</td>
+ <td> <input name="psk"></td>
+ </tr>
+ </table></div>
+ <div id="Certificate">
+ <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%"> Certificates </td>
+ <td><select name="certificateName">
+ </select></td>
+ </tr>
+ </table></div>
+ <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%">Perfect Forward Secrecy</td>
+ <td align="left" >
+ <select name="perfectFSEn">
+ <option value="enable">Enable</option>
+ <option value="disable">Disable</option>
+ </select>
+ </td>
+ </tr>
+ <tr><td> </td></tr>
+ <tr>
+ <td width="40%">Advanced IKE Settings</td>
+ <td><input name="advSWButton" type="button" value="Show Advanced Settings" onclick="switchAdv();" ></td>
+ </tr>
+ </table></div>
+ <div id="ManualKey"> <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td width="40%">Encryption Algorithm</td>
+ <td>
+ <select name="manualEncryptionAlgo">
+ <option value="des-cbc">DES</option>
+ <option value="3des-cbc" selected>3DES</option>
+ <option value="aes-ctr">AES</option>
+ </select>
+ </td>
+ </tr>
+ <tr>
+ <td width = "40%"> Encryption Key </td>
+ <td> <input name="manualEncryptionKey", size = "40" maxlength = "60" value="a0bc8475912431d1"> DES: 16 digit Hex, 3DES: 48 digit Hex <br></td>
+ </tr>
+ <tr>
+ <td width="40%">Authentication Algorithm</td>
+ <td>
+ <select name="manualAuthAlgo">
+ <option value="hmac-md5">MD5</option>
+ <option value="hmac-sha1">SHA1</option>
+ </select>
+ </td>
+ </tr>
+ <tr>
+ <td> Authentication Key </td>
+ <td> <input name="manualAuthKey" size="50" maxlength = "60" value="a0bc8475912431d1a7bc458ef12837516"> MD5: 32 digit Hex, SHA1: 40 digit Hex </td>
+ </tr>
+ <tr>
+ <td> SPI </td>
+ <td> <input name="spi" size="8" maxlength = "8" value="105"> Hex 100-FFFFFFFF</td>
+ </tr>
+ </table></div>
+ <div id = "adv">
+ <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr>
+ <td> Phase 1</td>
+ </tr>
+ <tr>
+ <td width="40%">Mode</td>
+ <td>
+ <select name="ph1Mode">
+ <option value="main">Main</option>
+ <option value="aggressive">Aggressive</option>
+ </select>
+ </td>
+ </tr>
+ <tr>
+ <td width="40%">Encryption Algorithm</td>
+ <td>
+ <select name="ph1EncryptionAlgo">
+ <option value="des">DES</option>
+ <option value="3des" selected>3DES</option>
+ <option value="aes128">AES - 128</option>
+ <option value="aes192">AES - 192</option>
+ <option value="aes256">AES - 256</option>
+ </select>
+ </td>
+ </tr>
+ <tr>
+ <td width="40%">Integrity Algorithm</td>
+ <td>
+ <select name="ph1IntegrityAlgo">
+ <option value="md5">MD5</option>
+ <option value="sha1">SHA1</option>
+ </select>
+ </td>
+ <tr>
+ <td width="40%">Select Diffie-Hellman Group for Key Exchange</td>
+ <td>
+ <select name="ph1DHGroup">
+ <option value="modp768">768bit</option>
+ <option value="modp1024">1024bit</option>
+ <option value="modp1536">1536bit</option>
+ <option value="modp2048">2048bit</option>
+ <option value="modp3072">3072bit</option>
+ <option value="modp4096">4096bit</option>
+ <option value="modp6144">6144bit</option>
+ <option value="modp8192">8192bit</option>
+ </select>
+ </td>
+ </tr>
+ <tr>
+ <td width="40%">Key Life Time </td>
+ <td> <input name="ph1KeyTime" >   Seconds </td>
+ </tr>
+ <tr>
+ <tr><td> </td></tr>
+ <tr>
+ <td> Phase 2</td>
+ </tr>
+ <tr>
+ <td width="40%">Encryption Algorithm</td>
+ <td>
+ <select name="ph2EncryptionAlgo">
+ <option value="des">DES</option>
+ <option value="3des" selected >3DES</option>
+ <option value="aes128">AES - 128</option>
+ <option value="aes192">AES - 192</option>
+ <option value="aes256">AES - 256</option>
+ </select>
+ </td>
+ </tr>
+ <tr>
+ <td width="40%">Integrity Algorithm</td>
+ <td>
+ <select name="ph2IntegrityAlgo">
+ <option value="hmac_md5">MD5</option>
+ <option value="hmac_sha1">SHA1</option>
+ </select>
+ </td>
+ </tr>
+ <tr>
+ <td width="40%">Select Diffie-Hellman Group for Key Exchange</td>
+ <td>
+ <select name="ph2DHGroup">
+ <option value="modp768">768bit</option>
+ <option value="modp1024">1024bit</option>
+ <option value="modp1536">1536bit</option>
+ <option value="modp2048">2048bit</option>
+ <option value="modp3072">3072bit</option>
+ <option value="modp4096">4096bit</option>
+ <option value="modp6144">6144bit</option>
+ <option value="modp8192">8192bit</option>
+ </select>
+ </td>
+ </tr>
+ <tr>
+ <td width="40%">Key Life Time </td>
+ <td> <input name="ph2KeyTime" >   Seconds </td>
+ </tr>
+ </table>
+ </div>
+ <table border="0" cellpadding="0" cellspacing="2" width="100%">
+ <tr><td></td><td> </td></tr>
+ <tr>
+ <td colspan="2" align="center">
+ <input value="Save / Apply" type="button" onclick="applyClick();" >
+ </td>
+ </tr>
+ </table>
+</form>
+</blockquote>
+</body>
+</html>
projects / bcm963xx.git / blobdiff