This fixes some broken generated rules.
NOTE: That some more work is needed to make it comply to interfaces that are set as dhcp or to produce nat rules for interfaces other then WAN.
mobile client tab is now used to configure user authentication (Xauth) and
client configuration (mode-cfg) options. User authentication is currently
limited to system password file entries. This will be extended to support
external RADIUS and LDAP account DBs in a follow up comiit.
a new file named /etc/ipsec.inc. Tunnel definitions have been split into
phase1 and phase2. This allows any number of phase2 definitions to be
created for a single phase1 definition. Several facets of configuration
have also been improved. The key size for variable length algorithms can
now be selected and the phase1 ID options have been extended to allow for
more flexible configuration. Several NAT-T related issues have also been
resolved.
Please note, IPsec remote access functionality has been temporarily
disabled. An improved implementation will be included in a follow up
commit.
* On bootup without this change the parent interface will be configured twice.
* Even when the system is up a vlan does not have to mock up with the parent apart guaranteeing that it is up.
The only thing that does not work is makeing a VLAN on dynamic interfaces like pppoe/pptp.
Afaik it has never worked and i do not think that many people would use vlans over pppoe,
if a feature request for such things comes up it will be on my TODO around 2.x of pfSense.
* Speedup very much the vlan creation/editing but not reconfiguring all the other interfaces
but just the one where the vlan resides.
NOTE: It is even questionable if it is needed at all to reconfigure the underlying interface since the only thing that vlan needs from the parent is the former to be up so packets can travel.
