networkClients.name=Client Configurations
networkClients.names=Client Configuration

logonboxClient.names=End-user Clients
logonboxClient.name=End-user Client

wireguardClient.name=WireGuard Client
wireguardClient.desc=WireGuard Clients

siteClient.name=Site-to-Site Client
siteClient.names=Site-to-Site Clients

timedClient.name=Timed Client
timedClient.names=Timed Clients

optionsView.name=Options
clientRoutesView.name=Routes
dnsView.name=DNS
scriptsView.name=Scripts
advancedClientView.name=Advanced
expiryView.name=Expiry
wireguardView.name=WireGuard

active.name=Status

expire.name=Expiry Type
expire.desc=Whether the client will expire after a certain amount of time, or at a certain time of the day. When a client device expires, they \
	will be required to re-authorize to access the private network.
expire.DURATION.name=Duration
expire.TIME_OF_DAY.name=Time Of Day

time.name=Time
time.desc=In 24 hour format, the time of day the client will expire.

duration.name=Duration
duration.desc=How long clients will be allowed access  before the device is expired. 

unit.name=Unit
unit.desc=The unit of time used for the duration above 

routeAll.name=Route All (Privacy Mode)
routeAll.desc=If enabled, and supported by the client, route all client traffic over the VPN to this server.

serverSubnet.name=Server LAN Access
serverSubnet.desc=If enabled, client's will be able to access any local subnets that are on interfaces that \
	have been configured for <em>VPN Access</em><i class="ms-1 fa fa-badge-check text-success"></i>. See <a target="_blank" href="/app/ui/lan">LAN</a> for more information, 

vpnSubnet.name=Client Access
vpnSubnet.desc=If enabled, the client will be able to access other clients on the VPN subnet.

additionalRoutes.name=Additional Routes
additionalRoutes.desc=Routes to publish to the client when they connect. These will only be published to a client using this configuration. You can add \
	routes for all clients by adding the routes to the Network resource.  These can be specific addresses, or networks (with prefix) in CIDR notation.

allowedAddresses.name=Allowed IPs
allowedAddresses.desc=Any other addresses the server should allow. These can be specific addresses, or networks (with prefix) in CIDR notation.

enabled.name=Enabled
enabled.desc=Users will not be able to connect using this client assignment until it has been enabled.

invalidateOnPasswordChange.name=Invalidate on Password Change
invalidateOnPasswordChange.desc=Invalidate any configuration issued to a user if their password changes. This will require the user re-authenticate to the server to continue using the Network.

keepAlive.name=Keep-alive
keepAlive.desc=How often in seconds to send the keep-alive packet. This should generally be quite low, a value of 35 \
	is recommended.
	
handshakeTimeout.name=Handshake Time-out
handshakeTimeout.desc=How long since the last handshake before a connection is considered stale and may be removed \
	if it is non-permanent.    

filenamePattern.name=Configuration Filename
filenamePattern.desc=The filename that is used for generated configuration downloads. Use %u to represent the user name converted to lower case, %t for the tenant name converted to lower case, %c for client name converted to lower case. %U, %T and %C may also be used, these will leave the case as is. Use %D for device UUID. Note, the final filename will have all symbols stripped leaving just alphabetic and numeric characters. 

create.name=Create

url.name=URL

name.name=Name
name.desc=The name of this client.

type.name=Type
type.desc=The type of client

network.name=Network
network.desc=The Network that this client assignment is associated with.

scripts.stashed=The Script was stashed. Remember to click Save to commit your changes otherwise the changes made will be lost.

fwMark.name=Packet Marker
fwMark.desc=On supported platforms, all packets on this interface will be marked with this tag, allowing complex firewall and routing rules. A value of zero disables the marker. A value of -1 signals to use the FwMark of the network interface this client configuration is attached to.

launch.name=Launch
launch.desc=Launch the LogonBox VPN client

detectPage.title=Preparing
detectPage.text=Preparing
detectPage.info=Checking your computer for requirements
detectPage.desc=We are looking to see if the LogonBox VPN client is installed. 
detectPage.small=Please wait a moment ....

downloadPage.info=Secure, Convenient, Easy To Use

launchPage.title=Launch
launchPage.text=Launch
launchPage.info=Accessing your virtual private network
launchPage.desc=This feature requires the LogonBox VPN Client is installed. It should start \
	automatically in a few seconds if everything is configured correctly.
launchPage.download=Download 
launchPage.small=If the VPN client is not launched after a few seconds, try the button below.  
launchPage.launch=Launch 
launchPage.home=Return to Home

networkClients.help.text=<em>Clients</em> group configuration and behaviour of a \
	set of <a href="networkDevices">Devices</a> within a <a href="networks">Network</a>. 
networkClients.help.text.2=Whenever a device connects and authenticates, it will request use of \
	particular client given it's name. The server will then deliver a configuration appropriate for that client.
networkClients.help.text.3=Each Client may be assigned to particular users via <a href="roles">Roles</a>. 

networkClients.help.types=Types
networkClients.help.types.text=There are 4 different types of client supported. Choose \
	the one that best fits your needs.
	
networkClients.help.types.logonboxClient=End-user Clients
networkClients.help.types.logonboxClient.text=The default type, this client configuration \
	is for general use. 
networkClients.help.types.logonboxClient.text.2=The <em>LogonBox VPN Client</em> must be used in order to support \
	MFA, and devices will be valid until they are disconnected or time-out. Once invalidated, \
	clients must then re-authorized.     
	
networkClients.help.types.siteClient=Site-to-Site
networkClients.help.types.siteClient.text=This configuration type is appropriate for \
	for devices that will be routing an entire remote network over the VPN. 
networkClients.help.types.siteClient.text.2=Such clients are only expected to \
	authorize once. Once authorized, they will remain valid until manually \
	removed. MFA is not supported by this type.  
	
networkClients.help.types.timedClient=Timed Client
networkClients.help.types.timedClient.text=Any clients that connect using this configuration \
	will only be valid for a certain amount of time, or until a certain time of the day.
	
networkClients.help.types.wireguardClient=WireGuard Client
networkClients.help.types.wireguardClient.text=This configuration type allows the official \
	WireGuard client to be used, or any other client that supports the official configuration \ 
	file format.
networkClients.help.types.wireguardClient.text.2=The user will obtain the configuration file \
	by visiting a URL, which they must then provide their chosen client with.

networkClients.help.types.wireguardClient.text.3=A user may only have one of these \
	configurations active at any time.
	 
networkClients.help.types.wireguardClient.text.4=Such clients are only expected to \
	authorize once. Once authorized, they will remain valid until manually \
	removed. MFA is not supported by this type.  
	
statusPage.noAddress=Address not yet obtained
networkClient.notEnabled=Not currently enabled, edit to re-enable

assignedEveryone.text={0} has been created and assigned to <strong>Everyone</strong>

mtu.name=MTU
mtu.desc=The MTU to use on the client. When left at the default value of zero, the MTU is \
	automatically determined from the endpoint addresses or the system default route, which is \
	usually a sane choice. However, to manually specify an MTU to override this automatic discovery, \
	this value may be specified explicitly.

sharedRoutes.name=Site Routes
sharedRoutes.desc=Additional routes that exist on the <b>Client LAN</b> of devices \
	that use this configuration. The will be added to all other devices of all types \
	that use any configuration that has <i>Client Access</i> enabled.
	
site.name=Site

reserveAddress.name=Reserved Address
reserveAddress.desc=Reserve a particular address for this client from the pool on the \
	network interface. The address must be in the range of the pool, and must be \
	currently unreserved, by any of site or end user client.
	
error.reserveAddressOutOfPoolRange=The reserve address {0} is not within the networks pool range of {1}.
error.reserveAddressAlreadyReserved=The reserve address {0} is already taken.