"Status: IPsec" GUI improvements

corradolab · Jan 29, 2014, 1:49 PM

Hi,

I suggest the following improvements to the "Status: IPsec" page:

Allow start/stop enable/disable for a single tunnel. Actually it's only possibile to start it. To restart a tunnel I must go to "VPN: IPsec", disable it, save changes, re-enable it and save changes again. This is time consuming and cannot be delegated to the end user, because letting him access the "VPN: IPsec" page means he could mess up tunnels setup.
Show disabled tunnels. They does not appear now.

Also I can't see any user in the "Mobile Users" table, despite an active connection.
Maybe connections without xauth does not shows up?

Regards,
Corrado

jimp · Jan 31, 2014, 5:04 PM

1. Isn't easily possible to do in a general way that would work for every tunnel every time
2. Wouldn't be hard to do just isn't something we do now.

mobile users list only works for xauth.

silvertip257 · Feb 16, 2014, 9:28 PM

@corradolab:

Hi,

I suggest the following improvements to the "Status: IPsec" page:

Allow start/stop enable/disable for a single tunnel. Actually it's only possibile to start it. To restart a tunnel I must go to "VPN: IPsec", disable it, save changes, re-enable it and save changes again. This is time consuming and cannot be delegated to the end user, because letting him access the "VPN: IPsec" page means he could mess up tunnels setup.

Show disabled tunnels. They does not appear now.

Also I can't see any user in the "Mobile Users" table, despite an active connection.
Maybe connections without xauth does not shows up?

Regards,
Corrado

KAME Racoon does not allow one tunnel to be downed without bouncing all the tunnels.

(Unless something in Racoon's code has changed of course, that was always one of the bigger drawbacks to Racoon. In addition to the wonderfully vague error/debug messages as I've come to find :).)

re 1:
Why don't you just have the end user to to Status > Services > restart Racoon?

re 2:
Is there really a need to show disabled tunnels in the Dashboard widget or elsewhere?
After all it is disabled. It will just clutter the tidy interface/display!

corradolab · Mar 14, 2014, 10:13 AM

Hi Silvertip,

if I understand you mean that when I disable a tunnel, save changes, re-enable and save changes again I'm actually bouncing all tunnels twince.

If so I agree it is faster to restart Racoon once.