mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Bug #1560. IPsec GUI needs to reject duplicate subnets in phase 2s for a given phase 1(mobile clients).

Browse Source
This commit is contained in:
Evgeny Yurchenko 2011-05-31 05:03:39 -04:00
parent edb2a3dab4
commit 061f28bfd5
1 changed files with 28 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
usr/local/www/vpn_ipsec_phase2.php
View File

@ -142,7 +142,34 @@ if ($_POST) {
}
/* TODO : Validate enabled phase2's are not duplicates */
if (isset($pconfig['mobile'])){
foreach($a_phase2 as $name){
if (isset($name['mobile'])){
/* check duplicate localids only for mobile clents */
if ($name['localid']['type'] == $pconfig['localid_type']){
/* Types match, check further */
switch($pconfig['localid_type']){
case "none":
case "lan":
case "wan":
$input_errors[] = gettext("Phase2 with this Local Network is already defined for mobile clients.");
break;
case "address":
if ($name['localid']['address'] == $pconfig['localid_address'])
$input_errors[] = gettext("Phase2 with this Local Address is already defined for mobile clients.");
break;
case "network":
if ($name['localid']['address'] == $pconfig['localid_address'] &&
$name['localid']['netbits'] == $pconfig['localid_netbits'])
$input_errors[] = gettext("Phase2 with this Local Network is already defined for mobile clients.");
break;
}
if (count($input_errors) > 0)
break; /* there is an error, stop checking other phase2 definitions */
}
}
}
}
$ealgos = pconfig_to_ealgos($pconfig);
if (!count($ealgos)) {