From 3da9a135d462261965170a7efbd9e654ad884b21 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Tue, 25 Jan 2005 21:32:40 +0000
Subject: [PATCH] Add IPCOMP (IP Compression) support to IPSEC VPN's

---
 etc/inc/filter.inc          | 5 +++++
 usr/local/www/vpn_ipsec.php | 9 ++++++++-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index a26c9cea5e..73d46d7833 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -1411,6 +1411,11 @@ EOD;
 	$lan_subnet = $config['interfaces']['lan']['subnet'];
 	$wan_ip = $config['interfaces']['wan']['ipaddr'];
 	$internal_subnet = gen_subnet($lan_ip, $lan_subnet) . "/" . $config['interfaces']['lan']['subnet'];
+	/* Is IP Compression enabled? */
+	if(isset($config['ipsec']['ipcomp'])
+		exec("/sbin/sysctl net.inet.ipcomp.ipcomp_enable=1");
+	else
+		exec("/sbin/sysctl net.inet.ipcomp.ipcomp_enable=0");
 	if(is_array($config['ipsec']['tunnel'])) {
 		foreach ($config['ipsec']['tunnel'] as $tunnel) {
 			$remote_gateway = $tunnel['remote-gateway'];
diff --git a/usr/local/www/vpn_ipsec.php b/usr/local/www/vpn_ipsec.php
index f34c897af6..3863293e39 100755
--- a/usr/local/www/vpn_ipsec.php
+++ b/usr/local/www/vpn_ipsec.php
@@ -8,7 +8,7 @@
 	originally part of m0n0wall (http://m0n0.ch/wall)
 	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
 	All rights reserved.
-	
+
 	Redistribution and use in source and binary forms, with or without
 	modification, are permitted provided that the following conditions are met:
 
@@ -41,6 +41,7 @@ $wancfg = &$config['interfaces']['wan'];
 
 $pconfig['enable'] = isset($config['ipsec']['enable']);
 $pconfig['preferredoldsa'] = isset($config['ipsec']['preferredoldsa']);
+$pconfig['ipcomp'] = isset($config['ipsec']['ipcomp']);
 
 if ($_POST) {
 
@@ -58,6 +59,7 @@ if ($_POST) {
 
 		$config['ipsec']['enable'] = $_POST['enable'] ? true : false;
 		$config['ipsec']['preferredoldsa'] = $_POST['preferredoldsa'] ? true : false;
+		$config['ipsec']['ipcomp'] = $_POST['ipcomp'] ? true : false;
 
 		write_config();
 
@@ -124,6 +126,11 @@ if ($_GET['act'] == "del") {
 		      <strong>Prefer newer SA's.<br>
 		      </strong></p>
 		  </td>
+		  <td class="vtable"><p><span class="vexpl"> </span>
+		      <input name="ipcomp" type="checkbox" id="ipcomp" value="yes" <?php if ($pconfig['ipcomp'] == "yes") echo "checked";?>>
+		      <strong>Enable VPN IP Compression<br>
+		      </strong></p>
+		  </td>
                 </tr>
                 <tr>
                   <td> <input name="submit" type="submit" class="formbtn" value="Save">