eparmak
/
DebTik


			
				
					
						
						
							1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857285828592860286128622863286428652866286728682869287028712872287328742875287628772878287928802881288228832884288528862887288828892890289128922893289428952896289728982899290029012902290329042905290629072908290929102911291229132914291529162917291829192920292129222923292429252926292729282929293029312932293329342935293629372938293929402941294229432944294529462947294829492950295129522953295429552956295729582959296029612962296329642965296629672968296929702971297229732974297529762977297829792980298129822983298429852986298729882989299029912992299329942995299629972998299930003001300230033004300530063007300830093010301130123013301430153016301730183019302030213022302330243025302630273028302930303031303230333034303530363037303830393040304130423043304430453046304730483049305030513052305330543055305630573058305930603061306230633064306530663067306830693070307130723073307430753076307730783079308030813082308330843085308630873088308930903091309230933094309530963097309830993100310131023103310431053106310731083109311031113112311331143115311631173118311931203121312231233124312531263127312831293130313131323133313431353136313731383139314031413142314331443145314631473148314931503151315231533154315531563157315831593160316131623163316431653166316731683169317031713172317331743175317631773178317931803181318231833184318531863187318831893190319131923193319431953196319731983199320032013202320332043205320632073208320932103211321232133214321532163217321832193220322132223223322432253226322732283229323032313232323332343235323632373238323932403241324232433244324532463247324832493250325132523253325432553256325732583259326032613262326332643265326632673268326932703271327232733274327532763277327832793280328132823283328432853286328732883289329032913292329332943295329632973298329933003301330233033304330533063307330833093310331133123313331433153316331733183319332033213322332333243325332633273328332933303331333233333334333533363337333833393340334133423343334433453346334733483349335033513352335333543355335633573358335933603361336233633364336533663367336833693370337133723373337433753376337733783379338033813382338333843385338633873388338933903391339233933394339533963397339833993400340134023403340434053406340734083409341034113412341334143415341634173418341934203421342234233424342534263427342834293430343134323433343434353436343734383439344034413442344334443445344634473448344934503451345234533454345534563457345834593460346134623463346434653466346734683469347034713472347334743475347634773478347934803481348234833484348534863487348834893490349134923493349434953496349734983499350035013502350335043505350635073508350935103511351235133514351535163517351835193520352135223523352435253526352735283529353035313532353335343535353635373538353935403541354235433544354535463547354835493550355135523553355435553556355735583559356035613562356335643565356635673568356935703571357235733574357535763577357835793580358135823583358435853586358735883589359035913592359335943595359635973598359936003601360236033604360536063607360836093610361136123613361436153616361736183619362036213622362336243625362636273628362936303631363236333634363536363637363836393640364136423643364436453646364736483649365036513652365336543655365636573658365936603661366236633664366536663667366836693670367136723673367436753676367736783679368036813682368336843685368636873688368936903691369236933694369536963697369836993700370137023703370437053706370737083709371037113712371337143715371637173718371937203721372237233724372537263727372837293730373137323733373437353736373737383739374037413742374337443745374637473748374937503751375237533754375537563757375837593760376137623763376437653766376737683769377037713772377337743775377637773778377937803781378237833784378537863787378837893790379137923793379437953796379737983799380038013802380338043805380638073808380938103811381238133814381538163817381838193820382138223823382438253826382738283829383038313832383338343835383638373838383938403841384238433844384538463847384838493850385138523853385438553856385738583859386038613862386338643865386638673868386938703871387238733874387538763877387838793880388138823883388438853886388738883889389038913892389338943895389638973898389939003901390239033904390539063907390839093910391139123913391439153916391739183919392039213922392339243925392639273928392939303931393239333934393539363937393839393940394139423943394439453946394739483949395039513952395339543955395639573958395939603961396239633964396539663967396839693970397139723973397439753976397739783979398039813982398339843985398639873988398939903991399239933994399539963997399839994000400140024003400440054006400740084009401040114012401340144015401640174018401940204021402240234024402540264027402840294030403140324033403440354036403740384039404040414042404340444045404640474048404940504051405240534054405540564057405840594060406140624063406440654066406740684069407040714072407340744075407640774078407940804081408240834084408540864087408840894090409140924093409440954096409740984099410041014102410341044105410641074108410941104111411241134114411541164117411841194120412141224123412441254126412741284129413041314132413341344135413641374138413941404141414241434144414541464147414841494150415141524153415441554156415741584159416041614162416341644165416641674168416941704171417241734174417541764177417841794180418141824183418441854186418741884189419041914192419341944195419641974198419942004201420242034204420542064207420842094210421142124213421442154216421742184219422042214222422342244225422642274228422942304231423242334234423542364237423842394240424142424243424442454246424742484249425042514252425342544255425642574258425942604261426242634264426542664267426842694270427142724273427442754276427742784279428042814282428342844285428642874288428942904291429242934294429542964297429842994300430143024303430443054306430743084309431043114312431343144315431643174318431943204321432243234324432543264327432843294330433143324333433443354336433743384339434043414342434343444345434643474348434943504351435243534354435543564357435843594360436143624363436443654366436743684369437043714372437343744375437643774378437943804381438243834384438543864387438843894390439143924393439443954396439743984399440044014402440344044405440644074408440944104411441244134414441544164417441844194420442144224423442444254426442744284429443044314432443344344435443644374438443944404441444244434444444544464447444844494450445144524453445444554456445744584459446044614462446344644465446644674468446944704471447244734474447544764477447844794480448144824483448444854486448744884489449044914492449344944495449644974498449945004501450245034504450545064507450845094510451145124513451445154516451745184519452045214522452345244525452645274528452945304531453245334534453545364537453845394540454145424543454445454546454745484549455045514552455345544555455645574558455945604561456245634564456545664567456845694570457145724573457445754576457745784579458045814582458345844585458645874588458945904591459245934594459545964597459845994600460146024603460446054606460746084609461046114612461346144615461646174618461946204621462246234624462546264627462846294630463146324633463446354636463746384639464046414642464346444645464646474648464946504651465246534654465546564657465846594660466146624663466446654666466746684669467046714672467346744675467646774678467946804681468246834684468546864687468846894690469146924693469446954696469746984699470047014702470347044705470647074708470947104711471247134714471547164717471847194720472147224723472447254726472747284729473047314732473347344735473647374738473947404741474247434744474547464747474847494750475147524753475447554756475747584759476047614762476347644765476647674768476947704771477247734774477547764777477847794780478147824783478447854786478747884789479047914792479347944795479647974798479948004801480248034804480548064807480848094810481148124813481448154816481748184819482048214822482348244825482648274828482948304831483248334834483548364837483848394840484148424843484448454846484748484849485048514852485348544855485648574858485948604861486248634864486548664867486848694870487148724873487448754876487748784879488048814882488348844885488648874888488948904891489248934894489548964897489848994900490149024903490449054906490749084909491049114912491349144915491649174918491949204921492249234924492549264927492849294930493149324933493449354936493749384939494049414942494349444945494649474948494949504951495249534954495549564957495849594960496149624963496449654966496749684969497049714972497349744975497649774978497949804981498249834984498549864987498849894990499149924993499449954996499749984999500050015002500350045005500650075008500950105011501250135014501550165017501850195020502150225023502450255026502750285029503050315032503350345035503650375038503950405041504250435044504550465047504850495050505150525053505450555056505750585059506050615062506350645065506650675068506950705071507250735074507550765077507850795080508150825083508450855086508750885089509050915092509350945095509650975098509951005101510251035104510551065107510851095110511151125113511451155116511751185119512051215122512351245125512651275128512951305131513251335134513551365137513851395140514151425143514451455146514751485149515051515152515351545155515651575158515951605161516251635164516551665167516851695170517151725173517451755176517751785179518051815182518351845185518651875188518951905191519251935194519551965197519851995200520152025203520452055206520752085209521052115212521352145215521652175218521952205221522252235224522552265227522852295230523152325233523452355236523752385239524052415242524352445245524652475248524952505251525252535254525552565257525852595260526152625263526452655266526752685269527052715272527352745275527652775278527952805281528252835284528552865287528852895290529152925293529452955296529752985299530053015302530353045305530653075308530953105311531253135314531553165317531853195320532153225323532453255326532753285329533053315332533353345335533653375338533953405341534253435344534553465347534853495350535153525353535453555356535753585359536053615362536353645365536653675368536953705371537253735374537553765377537853795380538153825383538453855386538753885389539053915392539353945395539653975398539954005401540254035404540554065407540854095410541154125413541454155416541754185419542054215422542354245425542654275428542954305431543254335434543554365437543854395440544154425443544454455446544754485449545054515452545354545455545654575458545954605461546254635464546554665467546854695470547154725473547454755476547754785479548054815482548354845485548654875488548954905491549254935494549554965497549854995500550155025503550455055506550755085509551055115512551355145515551655175518551955205521552255235524552555265527552855295530553155325533553455355536553755385539554055415542554355445545554655475548554955505551555255535554555555565557555855595560556155625563556455655566556755685569557055715572557355745575557655775578557955805581558255835584558555865587558855895590559155925593559455955596559755985599560056015602560356045605560656075608560956105611561256135614561556165617561856195620562156225623562456255626562756285629563056315632563356345635563656375638563956405641564256435644564556465647564856495650565156525653565456555656565756585659566056615662566356645665566656675668566956705671567256735674567556765677567856795680568156825683568456855686568756885689569056915692569356945695569656975698569957005701570257035704570557065707570857095710571157125713571457155716571757185719572057215722572357245725572657275728572957305731573257335734573557365737573857395740574157425743574457455746574757485749575057515752575357545755575657575758575957605761576257635764576557665767576857695770577157725773577457755776577757785779578057815782578357845785578657875788578957905791579257935794579557965797579857995800580158025803580458055806580758085809581058115812581358145815581658175818581958205821582258235824582558265827582858295830583158325833583458355836583758385839584058415842584358445845584658475848584958505851585258535854585558565857585858595860586158625863586458655866586758685869587058715872587358745875587658775878587958805881588258835884588558865887588858895890589158925893589458955896589758985899590059015902590359045905590659075908590959105911591259135914591559165917591859195920592159225923592459255926592759285929593059315932593359345935593659375938593959405941594259435944594559465947594859495950595159525953595459555956595759585959596059615962596359645965596659675968596959705971597259735974597559765977597859795980598159825983598459855986598759885989599059915992599359945995599659975998599960006001600260036004600560066007600860096010601160126013601460156016601760186019602060216022602360246025602660276028602960306031603260336034603560366037603860396040604160426043604460456046604760486049605060516052605360546055605660576058605960606061606260636064606560666067606860696070607160726073607460756076607760786079608060816082608360846085608660876088608960906091609260936094609560966097609860996100610161026103610461056106610761086109611061116112611361146115611661176118611961206121612261236124612561266127612861296130613161326133613461356136613761386139614061416142614361446145614661476148614961506151615261536154615561566157615861596160616161626163616461656166616761686169617061716172617361746175617661776178617961806181618261836184618561866187618861896190619161926193619461956196619761986199620062016202620362046205620662076208620962106211621262136214621562166217621862196220622162226223622462256226622762286229623062316232623362346235623662376238623962406241624262436244624562466247624862496250625162526253625462556256625762586259626062616262626362646265626662676268626962706271627262736274627562766277627862796280628162826283628462856286628762886289629062916292629362946295629662976298629963006301630263036304630563066307630863096310631163126313631463156316631763186319632063216322632363246325632663276328632963306331633263336334633563366337633863396340634163426343634463456346634763486349635063516352635363546355635663576358635963606361636263636364636563666367636863696370637163726373637463756376637763786379638063816382638363846385638663876388638963906391639263936394639563966397639863996400640164026403640464056406640764086409641064116412641364146415641664176418641964206421642264236424642564266427642864296430643164326433643464356436643764386439644064416442644364446445644664476448644964506451645264536454645564566457645864596460646164626463646464656466646764686469647064716472647364746475647664776478647964806481648264836484648564866487648864896490649164926493649464956496649764986499650065016502650365046505650665076508650965106511651265136514651565166517651865196520652165226523652465256526652765286529653065316532653365346535653665376538653965406541654265436544654565466547654865496550655165526553655465556556655765586559656065616562656365646565656665676568656965706571657265736574657565766577657865796580658165826583658465856586658765886589659065916592659365946595659665976598659966006601660266036604660566066607660866096610661166126613661466156616661766186619662066216622662366246625662666276628662966306631663266336634663566366637663866396640664166426643664466456646664766486649665066516652665366546655665666576658665966606661666266636664666566666667666866696670667166726673667466756676667766786679668066816682668366846685668666876688668966906691669266936694669566966697669866996700670167026703670467056706670767086709671067116712671367146715671667176718671967206721672267236724672567266727672867296730673167326733673467356736673767386739674067416742674367446745674667476748674967506751675267536754675567566757675867596760676167626763676467656766676767686769677067716772677367746775677667776778677967806781678267836784678567866787678867896790679167926793679467956796679767986799680068016802680368046805680668076808680968106811681268136814681568166817681868196820682168226823682468256826682768286829683068316832683368346835683668376838683968406841684268436844684568466847684868496850685168526853685468556856685768586859686068616862686368646865686668676868686968706871687268736874687568766877687868796880688168826883688468856886688768886889689068916892689368946895689668976898689969006901690269036904690569066907690869096910691169126913691469156916691769186919692069216922692369246925692669276928692969306931693269336934693569366937693869396940694169426943694469456946694769486949695069516952695369546955695669576958695969606961696269636964696569666967696869696970697169726973697469756976697769786979698069816982698369846985698669876988698969906991699269936994699569966997699869997000700170027003700470057006700770087009701070117012701370147015701670177018701970207021702270237024702570267027702870297030703170327033703470357036703770387039704070417042704370447045704670477048704970507051705270537054705570567057705870597060706170627063706470657066706770687069707070717072707370747075707670777078707970807081708270837084708570867087708870897090709170927093709470957096709770987099710071017102710371047105710671077108710971107111711271137114711571167117711871197120712171227123712471257126712771287129713071317132713371347135713671377138713971407141714271437144714571467147714871497150715171527153715471557156715771587159716071617162716371647165716671677168716971707171717271737174717571767177717871797180718171827183718471857186718771887189719071917192719371947195719671977198719972007201720272037204720572067207720872097210721172127213721472157216721772187219722072217222722372247225722672277228722972307231723272337234723572367237723872397240724172427243724472457246724772487249725072517252725372547255725672577258725972607261726272637264726572667267726872697270727172727273727472757276727772787279728072817282728372847285728672877288728972907291729272937294729572967297729872997300730173027303730473057306730773087309731073117312731373147315731673177318731973207321732273237324732573267327732873297330733173327333733473357336733773387339734073417342734373447345734673477348734973507351735273537354735573567357735873597360736173627363736473657366736773687369737073717372737373747375737673777378737973807381738273837384738573867387738873897390739173927393739473957396739773987399740074017402740374047405740674077408740974107411741274137414741574167417741874197420742174227423742474257426742774287429743074317432743374347435743674377438743974407441744274437444744574467447744874497450745174527453745474557456745774587459746074617462746374647465746674677468746974707471747274737474747574767477747874797480748174827483748474857486748774887489749074917492749374947495749674977498749975007501750275037504750575067507750875097510751175127513751475157516751775187519752075217522752375247525752675277528752975307531753275337534753575367537753875397540754175427543754475457546754775487549755075517552755375547555755675577558755975607561756275637564756575667567756875697570757175727573757475757576757775787579758075817582758375847585758675877588758975907591759275937594759575967597759875997600760176027603760476057606760776087609761076117612761376147615761676177618761976207621762276237624762576267627762876297630763176327633763476357636763776387639764076417642764376447645764676477648764976507651765276537654765576567657765876597660766176627663766476657666766776687669767076717672767376747675767676777678767976807681768276837684768576867687768876897690769176927693769476957696769776987699770077017702770377047705770677077708770977107711771277137714771577167717771877197720772177227723772477257726772777287729773077317732
							<!DOCTYPE html>
<html lang="el" class="dark">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>Proxmox RouterOS | Network Appliance</title>
  <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='%2310b981'><path d='M12 2L2 7l10 5 10-5-10-5zM2 17l10 5 10-5M2 12l10 5 10-5'/></svg>">
  <script src="https://cdn.tailwindcss.com"></script>
  <script>
    tailwind.config = {
      darkMode: 'class',
      theme: {
        extend: {
          colors: {
            brand: {
              50: '#ecfdf5',
              100: '#d1fae5',
              400: '#34d399',
              500: '#10b981',
              600: '#059669',
              700: '#047857',
              800: '#065f46',
              900: '#064e3b',
            }
          }
        }
      }
    }
  </script>
  <link rel="stylesheet" href="style.css">
</head>
<body class="bg-[#0b101e] text-slate-100 min-h-screen flex flex-col font-sans antialiased selection:bg-brand-500 selection:text-white">

  <!-- Toast Notification Container -->
  <div id="toast-container" class="fixed top-5 right-5 z-50 flex flex-col space-y-2 pointer-events-none"></div>

  <!-- Main Layout -->
  <div class="flex flex-1 overflow-hidden h-screen">

    <!-- Sidebar -->
    <aside id="sidebar" class="w-64 bg-[#0f172a]/95 border-r border-slate-800 flex flex-col flex-shrink-0 transition-all duration-300 z-30">
      <!-- Brand Header -->
      <div class="h-16 flex items-center px-5 border-b border-slate-800 justify-between">
        <div class="flex items-center space-x-3">
          <div class="w-9 h-9 rounded-xl bg-gradient-to-tr from-brand-600 to-cyan-500 flex items-center justify-center shadow-lg shadow-brand-500/20 text-white font-bold">
            <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 10V3L4 14h7v7l9-11h-7z" />
            </svg>
          </div>
          <div>
            <div class="font-bold text-sm tracking-wide text-white flex items-center gap-1.5">
              <span>RouterOS</span>
              <span class="text-[10px] bg-brand-500/20 text-brand-400 font-mono px-1.5 py-0.5 rounded border border-brand-500/30">LXC</span>
            </div>
            <div class="text-[11px] text-slate-400">Proxmox Gateway</div>
          </div>
        </div>
      </div>

      <!-- Live Health Pill -->
      <div class="px-4 py-3 border-b border-slate-800/60 bg-slate-900/40">
        <div class="flex items-center justify-between text-xs mb-1.5">
          <span class="text-slate-400 font-medium">Gateway Status</span>
          <span class="flex items-center text-emerald-400 font-medium text-[11px]">
            <span class="relative flex h-2 w-2 mr-1.5">
              <span class="animate-ping absolute inline-flex h-full w-full rounded-full bg-emerald-400 opacity-75"></span>
              <span class="relative inline-flex rounded-full h-2 w-2 bg-emerald-500"></span>
            </span>
            Online
          </span>
        </div>
        <div class="text-[11px] text-slate-400 font-mono truncate" id="side-gateway-ip">GW: Scanning...</div>
      </div>

      <!-- Navigation Menu -->
      <nav class="flex-1 px-3 py-3 space-y-1 overflow-y-auto">

        <!-- CATEGORY: OVERVIEW -->
        <div class="px-3 pt-2 pb-1 text-[10px] font-bold text-slate-500 uppercase tracking-wider">Overview</div>

        <a href="#dashboard" onclick="navigate('dashboard')" id="nav-dashboard"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group bg-brand-500/10 text-brand-400 border border-brand-500/20">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6a2 2 0 012-2h2a2 2 0 012 2v2a2 2 0 01-2 2H6a2 2 0 01-2-2V6zM14 6a2 2 0 012-2h2a2 2 0 012 2v2a2 2 0 01-2 2h-2a2 2 0 01-2-2V6zM4 16a2 2 0 012-2h2a2 2 0 012 2v2a2 2 0 01-2 2H6a2 2 0 01-2-2v-2zM14 16a2 2 0 012-2h2a2 2 0 012 2v2a2 2 0 01-2 2h-2a2 2 0 01-2-2v-2z" />
            </svg>
            <span>Dashboard</span>
          </div>
        </a>

        <!-- CATEGORY: NETWORKING -->
        <div class="px-3 pt-3 pb-1 text-[10px] font-bold text-slate-500 uppercase tracking-wider">Networking</div>

        <a href="#interfaces" onclick="navigate('interfaces')" id="nav-interfaces"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 9l3 3-3 3m5 0h3M5 20h14a2 2 0 002-2V6a2 2 0 00-2-2H5a2 2 0 00-2 2v12a2 2 0 002 2z" />
            </svg>
            <span>Interfaces</span>
          </div>
          <span id="badge-ifaces-count" class="text-[10px] bg-slate-800 text-slate-300 px-1.5 py-0.2 rounded-full font-mono">0</span>
        </a>

        <a href="#dhcp-client" onclick="navigate('dhcp-client')" id="nav-dhcp-client"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-amber-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 10V3L4 14h7v7l9-11h-7z" />
            </svg>
            <span>DHCP Client</span>
          </div>
          <span id="badge-dhcp-client-count" class="text-[10px] bg-slate-800 text-slate-300 px-1.5 py-0.2 rounded-full font-mono">0</span>
        </a>

        <a href="#bridge" onclick="navigate('bridge')" id="nav-bridge"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-sky-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 10h18M3 14h18M5 14v4a2 2 0 002 2h2a2 2 0 002-2v-4m6 0v4a2 2 0 002 2h2a2 2 0 002-2v-4M4 10V6a2 2 0 012-2h12a2 2 0 012 2v4" />
            </svg>
            <span>Bridge</span>
          </div>
          <span id="badge-bridge-count" class="text-[10px] bg-sky-950 text-sky-300 border border-sky-800/40 px-1.5 py-0.2 rounded-full font-mono">0</span>
        </a>

        <a href="#firewall" onclick="navigate('firewall')" id="nav-firewall"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-emerald-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z" />
            </svg>
            <span>Firewall</span>
          </div>
          <span id="badge-firewall-count" class="text-[10px] bg-emerald-950 text-emerald-400 border border-emerald-800/50 px-1.5 py-0.2 rounded-full font-mono">0</span>
        </a>

        <!-- CATEGORY: ROUTING -->
        <div class="px-3 pt-3 pb-1 text-[10px] font-bold text-slate-500 uppercase tracking-wider">Routing</div>

        <a href="#routes" onclick="navigate('routes')" id="nav-routes"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-cyan-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 20l-5.447-2.724A1 1 0 013 16.382V5.618a1 1 0 011.447-.894L9 7m0 13l6-3m-6 3V7m6 10l4.553 2.276A1 1 0 0021 18.382V7.618a1 1 0 00-.553-.894L15 4m0 13V4m0 0L9 7" />
            </svg>
            <span>Routes & Policy</span>
          </div>
          <span id="badge-routes-count" class="text-[10px] bg-slate-800 text-slate-300 px-1.5 py-0.2 rounded-full font-mono">0</span>
        </a>

        <a href="#bgp" onclick="navigate('bgp')" id="nav-bgp"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-purple-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 7h8m0 0v8m0-8l-8 8-4-4-6 6" />
            </svg>
            <span>BGP (/routing bgp)</span>
          </div>
          <div class="flex items-center gap-1.5">
            <span id="badge-bgp-dot" class="w-2 h-2 rounded-full bg-slate-600" title="BGP Status"></span>
            <span id="badge-bgp-count" class="text-[10px] bg-purple-950 text-purple-300 border border-purple-800/40 px-1.5 py-0.2 rounded-full font-mono">0</span>
          </div>
        </a>

        <a href="#ospf" onclick="navigate('ospf')" id="nav-ospf"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-indigo-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z" />
            </svg>
            <span>OSPF (/routing ospf)</span>
          </div>
          <div class="flex items-center gap-1.5">
            <span id="badge-ospf-dot" class="w-2 h-2 rounded-full bg-slate-600" title="OSPF Status"></span>
            <span id="badge-ospf-count" class="text-[10px] bg-indigo-950 text-indigo-300 border border-indigo-800/40 px-1.5 py-0.2 rounded-full font-mono">0</span>
          </div>
        </a>

        <a href="#routing-filters" onclick="navigate('routing-filters')" id="nav-routing-filters"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-emerald-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 4a1 1 0 011-1h16a1 1 0 011 1v2.586a1 1 0 01-.293.707l-6.414 6.414a1 1 0 00-.293.707V17l-4 4v-6.586a1 1 0 00-.293-.707L3.293 7.293A1 1 0 013 6.586V4z" />
            </svg>
            <span>Routing Filters</span>
          </div>
          <span id="badge-filters-count" class="text-[10px] bg-slate-800 text-slate-300 px-1.5 py-0.2 rounded-full font-mono">0</span>
        </a>

        <!-- CATEGORY: WAN & ACCESS -->
        <div class="px-3 pt-3 pb-1 text-[10px] font-bold text-slate-500 uppercase tracking-wider">WAN & Access</div>

        <a href="#pppoe" onclick="navigate('pppoe')" id="nav-pppoe"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 10V3L4 14h7v7l9-11h-7z" />
            </svg>
            <span>PPPoE Client</span>
          </div>
          <span id="badge-pppoe-status" class="w-2 h-2 rounded-full bg-slate-600"></span>
        </a>

        <!-- CATEGORY: VPN & TUNNELS -->
        <div class="px-3 pt-3 pb-1 text-[10px] font-bold text-slate-500 uppercase tracking-wider">VPN & Tunnels</div>

        <a href="#wireguard" onclick="navigate('wireguard')" id="nav-wireguard"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-rose-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z" />
            </svg>
            <span>WireGuard</span>
          </div>
          <span id="badge-wg-status" class="w-2 h-2 rounded-full bg-slate-600"></span>
        </a>

        <a href="#ipsec" onclick="navigate('ipsec')" id="nav-ipsec"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-amber-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
            </svg>
            <span>IPSec (IKEv2)</span>
          </div>
          <span id="badge-ipsec-status" class="w-2 h-2 rounded-full bg-slate-600"></span>
        </a>

        <a href="#l2tp" onclick="navigate('l2tp')" id="nav-l2tp"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-cyan-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M21 12a9 9 0 01-9 9m9-9a9 9 0 00-9-9m9 9H3m9 9a9 9 0 01-9-9m9 9c1.657 0 3-4.03 3-9s-1.343-9-3-9m0 18c-1.657 0-3-4.03-3-9s1.343-9 3-9m-9 9a9 9 0 019-9" />
            </svg>
            <span>L2TP Client</span>
          </div>
          <span id="badge-l2tp-status" class="w-2 h-2 rounded-full bg-slate-600"></span>
        </a>

        <a href="#pptp" onclick="navigate('pptp')" id="nav-pptp"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-purple-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 7a2 2 0 012 2m4 0a6 6 0 01-7.743 5.743L11 17H9v2H7v2H4a1 1 0 01-1-1v-2.586a1 1 0 01.293-.707l5.964-5.964A6 6 0 1121 9z" />
            </svg>
            <span>PPTP Client</span>
          </div>
          <span id="badge-pptp-status" class="w-2 h-2 rounded-full bg-slate-600"></span>
        </a>

        <a href="#ppp" onclick="navigate('ppp')" id="nav-ppp"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-violet-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 11H5m14 0a2 2 0 012 2v6a2 2 0 01-2 2H5a2 2 0 01-2-2v-6a2 2 0 012-2m14 0V9a2 2 0 00-2-2M5 11V9a2 2 0 012-2m0 0V5a2 2 0 012-2h6a2 2 0 012 2v2M7 7h10" />
            </svg>
            <span>PPP (Servers & Users)</span>
          </div>
          <span id="badge-ppp-sessions" class="text-[10px] bg-violet-950 text-violet-300 border border-violet-800/40 px-1.5 py-0.2 rounded-full font-mono">0</span>
        </a>

        <a href="#eoip" onclick="navigate('eoip')" id="nav-eoip"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-emerald-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13.828 10.172a4 4 0 00-5.656 0l-4 4a4 4 0 105.656 5.656l1.102-1.101m-.758-4.899a4 4 0 005.656 0l4-4a4 4 0 00-5.656-5.656l-1.1 1.1" />
            </svg>
            <span>EoIP Tunnels</span>
          </div>
          <span id="badge-eoip-count" class="text-[10px] bg-slate-800 text-slate-300 px-1.5 py-0.2 rounded-full font-mono">0</span>
        </a>

        <!-- CATEGORY: DIAGNOSTICS & TOOLS -->
        <div class="px-3 pt-3 pb-1 text-[10px] font-bold text-slate-500 uppercase tracking-wider">Diagnostics</div>

        <a href="#tools" onclick="navigate('tools')" id="nav-tools"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4 text-amber-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10.325 4.317c.426-1.756 2.924-1.756 3.35 0a1.724 1.724 0 002.573 1.066c1.543-.94 3.31.826 2.37 2.37a1.724 1.724 0 001.065 2.572c1.756.426 1.756 2.924 0 3.35a1.724 1.724 0 00-1.066 2.573c.94 1.543-.826 3.31-2.37 2.37a1.724 1.724 0 00-2.572 1.065c-.426 1.756-2.924 1.756-3.35 0a1.724 1.724 0 00-2.573-1.066c-1.543.94-3.31-.826-2.37-2.37a1.724 1.724 0 00-1.065-2.572c-1.756-.426-1.756-2.924 0-3.35a1.724 1.724 0 001.066-2.573c-.94-1.543.826-3.31 2.37-2.37.996.608 2.296.07 2.572-1.065z" />
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z" />
            </svg>
            <span>Troubleshoot (/tool)</span>
          </div>
          <span class="text-[10px] bg-amber-950 text-amber-300 border border-amber-800/40 px-1.5 py-0.2 rounded-full font-mono">Tools</span>
        </a>

        <!-- CATEGORY: SYSTEM -->
        <div class="px-3 pt-3 pb-1 text-[10px] font-bold text-slate-500 uppercase tracking-wider">System</div>

        <a href="#persistence" onclick="navigate('persistence')" id="nav-persistence"
           class="nav-link flex items-center justify-between px-3 py-2 rounded-lg text-xs font-medium transition-all group text-slate-300 hover:bg-slate-800/80 hover:text-white">
          <div class="flex items-center space-x-2.5">
            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 7H5a2 2 0 00-2 2v9a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-3m-1 4l-3 3m0 0l-3-3m3 3V4" />
            </svg>
            <span>Debian Config</span>
          </div>
          <span class="text-[10px] bg-slate-800 text-slate-400 px-1.5 py-0.2 rounded">.cfg</span>
        </a>

      </nav>

      <!-- Sidebar Footer: Host System Metrics -->
      <div class="p-4 border-t border-slate-800/80 bg-slate-900/60">
        <div class="flex items-center justify-between text-xs text-slate-400 mb-2">
          <span class="truncate font-mono" id="side-hostname">debian-lxc</span>
          <span class="text-[11px] text-slate-500" id="side-uptime">0h 0m</span>
        </div>

        <div class="mb-2">
          <div class="flex justify-between text-[11px] text-slate-400 mb-1">
            <span>CPU Usage</span>
            <span id="side-cpu-val" class="font-mono text-slate-300">0.0%</span>
          </div>
          <div class="w-full bg-slate-800 h-1.5 rounded-full overflow-hidden">
            <div id="side-cpu-bar" class="bg-brand-500 h-full rounded-full transition-all duration-500" style="width: 5%"></div>
          </div>
        </div>

        <div>
          <div class="flex justify-between text-[11px] text-slate-400 mb-1">
            <span>RAM Usage</span>
            <span id="side-ram-val" class="font-mono text-slate-300">0%</span>
          </div>
          <div class="w-full bg-slate-800 h-1.5 rounded-full overflow-hidden">
            <div id="side-ram-bar" class="bg-cyan-500 h-full rounded-full transition-all duration-500" style="width: 25%"></div>
          </div>
        </div>
      </div>
    </aside>

    <!-- Main Content Area -->
    <div class="flex-1 flex flex-col min-w-0 overflow-hidden">

      <!-- Top Navbar -->
      <header class="h-16 bg-[#0f172a]/80 backdrop-blur border-b border-slate-800 flex items-center justify-between px-6 z-20">
        <div class="flex items-center space-x-4">
          <button onclick="toggleSidebar()" class="lg:hidden p-2 rounded-lg text-slate-400 hover:text-white hover:bg-slate-800">
            <svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24">
              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6h16M4 12h16M4 18h16" />
            </svg>
          </button>
          <div>
            <h1 id="page-title" class="text-lg font-bold text-white tracking-tight">Dashboard Overview</h1>
            <p id="page-subtitle" class="text-xs text-slate-400">Live router performance and interface management</p>
          </div>
        </div>
      </header>

      <!-- Scrollable Main Viewport -->
      <main class="flex-1 overflow-y-auto p-6 space-y-6">

        <!-- ================= SECTION: DASHBOARD ================= -->
        <section id="section-dashboard" class="space-y-6">
          <div class="grid grid-cols-1 md:grid-cols-3 gap-5">

            <!-- CPU Usage -->
            <div class="bg-slate-900/80 border border-slate-800 rounded-xl p-5 relative overflow-hidden group hover:border-slate-700 transition">
              <div class="flex items-center justify-between mb-3">
                <span class="text-xs font-semibold text-slate-400 uppercase tracking-wider">CPU Usage</span>
                <div class="p-2 bg-emerald-500/10 text-emerald-400 rounded-lg">
                  <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 3v2m6-2v2M9 19v2m6-2v2M3 9h2m-2 6h2m14-6h2m-2 6h2M7 19h10a2 2 0 002-2V7a2 2 0 00-2-2H7a2 2 0 00-2 2v10a2 2 0 002 2zM9 9h6v6H9V9z" />
                  </svg>
                </div>
              </div>
              <div class="flex items-baseline justify-between">
                <div class="flex items-baseline space-x-2">
                  <span id="dash-cpu-val" class="text-2xl font-bold text-white">0.0%</span>
                  <span id="dash-cpu-cores" class="text-xs text-slate-400 font-mono">0 Cores</span>
                </div>
                <span id="dash-cpu-status" class="text-[11px] font-semibold text-emerald-400 uppercase px-2 py-0.5 rounded bg-emerald-500/10">Normal</span>
              </div>
              <div class="w-full bg-slate-800 h-1.5 rounded-full overflow-hidden my-2.5">
                <div id="dash-cpu-bar" class="h-full rounded-full bg-emerald-500 transition-all duration-500" style="width: 0%"></div>
              </div>
              <div class="text-xs text-slate-400 flex items-center justify-between">
                <span>Load: <span id="dash-cpu-load" class="font-mono text-slate-300">0.00, 0.00, 0.00</span></span>
                <span class="text-[11px] text-slate-500 font-mono">Container vCPU</span>
              </div>
            </div>

            <!-- RAM Usage -->
            <div class="bg-slate-900/80 border border-slate-800 rounded-xl p-5 relative overflow-hidden group hover:border-slate-700 transition">
              <div class="flex items-center justify-between mb-3">
                <span class="text-xs font-semibold text-slate-400 uppercase tracking-wider">RAM Usage</span>
                <div class="p-2 bg-indigo-500/10 text-indigo-400 rounded-lg">
                  <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 11H5m14 0a2 2 0 012 2v6a2 2 0 01-2 2H5a2 2 0 01-2-2v-6a2 2 0 012-2m14 0V9a2 2 0 00-2-2M5 11V9a2 2 0 012-2m0 0V5a2 2 0 012-2h6a2 2 0 012 2v2M7 7h10" />
                  </svg>
                </div>
              </div>
              <div class="flex items-baseline justify-between">
                <div class="flex items-baseline space-x-2">
                  <span id="dash-ram-val" class="text-2xl font-bold text-white">0%</span>
                  <span id="dash-ram-used-total" class="text-xs text-slate-400 font-mono">0 / 0 MB</span>
                </div>
                <span id="dash-ram-status" class="text-[11px] font-semibold text-indigo-400 uppercase px-2 py-0.5 rounded bg-indigo-500/10">Active</span>
              </div>
              <div class="w-full bg-slate-800 h-1.5 rounded-full overflow-hidden my-2.5">
                <div id="dash-ram-bar" class="h-full rounded-full bg-indigo-500 transition-all duration-500" style="width: 0%"></div>
              </div>
              <div class="text-xs text-slate-400 flex items-center justify-between">
                <span>Free: <span id="dash-ram-free" class="font-mono text-slate-300">0 MB</span></span>
                <span class="text-[11px] text-slate-500 font-mono">Dynamic Alloc</span>
              </div>
            </div>

            <!-- Live Traffic -->
            <div class="bg-slate-900/80 border border-slate-800 rounded-xl p-5 relative overflow-hidden group hover:border-slate-700 transition">
              <div class="flex items-center justify-between mb-3">
                <span class="text-xs font-semibold text-slate-400 uppercase tracking-wider">Live Traffic</span>
                <div class="p-2 bg-amber-500/10 text-amber-400 rounded-lg">
                  <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 7h8m0 0v8m0-8l-8 8-4-4-6 6" />
                  </svg>
                </div>
              </div>
              <div class="space-y-1">
                <div class="flex items-center justify-between text-xs">
                  <span class="text-slate-400 flex items-center gap-1.5"><span class="text-emerald-400 font-bold">↓</span> RX:</span>
                  <span id="stat-traffic-rx" class="font-mono font-semibold text-emerald-400 text-sm">0 B/s</span>
                </div>
                <div class="flex items-center justify-between text-xs">
                  <span class="text-slate-400 flex items-center gap-1.5"><span class="text-cyan-400 font-bold">↑</span> TX:</span>
                  <span id="stat-traffic-tx" class="font-mono font-semibold text-cyan-400 text-sm">0 B/s</span>
                </div>
              </div>
              <div class="mt-2.5 pt-2 border-t border-slate-800/80 text-[11px] text-slate-500 flex items-center justify-between font-mono">
                <span>Throughput</span>
                <span class="text-emerald-400 font-semibold flex items-center gap-1"><span class="w-1.5 h-1.5 rounded-full bg-emerald-400 animate-pulse"></span> Streaming</span>
              </div>
            </div>

          </div>

          <!-- Port Matrix -->
          <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-5">
            <div class="flex items-center justify-between mb-4">
              <div>
                <h3 class="text-sm font-bold text-white uppercase tracking-wider flex items-center gap-2">
                  <span>Hardware & Virtual Port Matrix</span>
                  <span class="text-[10px] bg-slate-800 text-slate-400 font-normal px-2 py-0.5 rounded-full">Live Hardware State</span>
                </h3>
              </div>
            </div>
            <div id="port-matrix" class="grid grid-cols-2 sm:grid-cols-3 md:grid-cols-4 lg:grid-cols-6 gap-3"></div>
          </div>

          <!-- Quick Overview: Interfaces -->
          <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-5">
            <div class="flex items-center justify-between mb-4">
              <h3 class="text-sm font-bold text-white flex items-center gap-2">
                <span>Interfaces Overview</span>
                <span class="text-[10px] bg-slate-800 text-slate-400 font-normal px-2 py-0.5 rounded-full">Active Ports & Addresses</span>
              </h3>
              <button onclick="navigate('interfaces')" class="text-xs text-brand-400 hover:text-brand-300 font-medium">View All Interfaces →</button>
            </div>
            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs">
                <thead class="text-slate-400 border-b border-slate-800 text-[11px] uppercase tracking-wider">
                  <tr>
                    <th class="pb-2.5">Interface</th>
                    <th class="pb-2.5">Role / Type</th>
                    <th class="pb-2.5">MAC Address</th>
                    <th class="pb-2.5">IP Address</th>
                    <th class="pb-2.5">Live Traffic</th>
                    <th class="pb-2.5 text-right">Status</th>
                  </tr>
                </thead>
                <tbody id="quick-interfaces-table" class="divide-y divide-slate-800/60 font-mono"></tbody>
              </table>
            </div>
          </div>
        </section>

        <!-- ================= SECTION: INTERFACES (HIERARCHICAL TREE) ================= -->
        <section id="section-interfaces" class="hidden space-y-6">
          <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-4 flex flex-wrap items-center justify-between gap-4">
            <div class="relative flex-1 min-w-[280px]">
              <div class="absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none text-slate-400">
                <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z" />
                </svg>
              </div>
              <input type="text" id="iface-search" oninput="renderInterfacesList()"
                     placeholder="Search interfaces by Name or IP (e.g. eth0, 192.168.1.1)..."
                     class="w-full bg-slate-800/90 border border-slate-700 rounded-lg pl-10 pr-4 py-2 text-xs text-white placeholder-slate-500 focus:outline-none focus:border-brand-500 transition">
            </div>

            <div class="flex items-center space-x-2">
              <button onclick="expandAllIfaces(true)" class="text-xs text-cyan-400 hover:text-cyan-300 font-medium px-3 py-2 rounded-lg bg-cyan-950/50 hover:bg-cyan-950 border border-cyan-800/60 transition flex items-center gap-1.5">
                <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 9l-7 7-7-7"/></svg>
                <span>Expand All</span>
              </button>
              <button onclick="expandAllIfaces(false)" class="text-xs text-slate-400 hover:text-slate-300 font-medium px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 border border-slate-700 transition flex items-center gap-1.5">
                <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 15l7-7 7 7"/></svg>
                <span>Collapse All</span>
              </button>
            </div>
          </div>

          <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden shadow-2xl">
            <div class="p-4 border-b border-slate-800 bg-slate-950/40 flex items-center justify-between">
              <div>
                <h3 class="text-sm font-bold text-white">Interface Table View</h3>
              </div>
              <div class="text-xs text-slate-400">
                <span id="ifaces-list-summary" class="font-mono">Loading interfaces...</span>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs">
                <thead class="text-slate-400 bg-slate-950/80 border-b border-slate-800 uppercase tracking-wider text-[11px]">
                  <tr>
                    <th class="py-3 px-3 font-semibold w-8 text-center"></th>
                    <th class="py-3 px-4 font-semibold">Interface / Type</th>
                    <th class="py-3 px-4 font-semibold">Role & Alias</th>
                    <th class="py-3 px-4 font-semibold">IP Address (CIDR)</th>
                    <th class="py-3 px-4 font-semibold">MAC & MTU</th>
                    <th class="py-3 px-4 font-semibold">Throughput (RX/TX)</th>
                    <th class="py-3 px-4 font-semibold">Link State</th>
                    <th class="py-3 px-4 font-semibold text-right">Actions</th>
                  </tr>
                </thead>
                <tbody id="interfaces-tree-tbody" class="divide-y divide-slate-800 font-mono"></tbody>
              </table>
            </div>

            <div id="interfaces-empty-state" class="hidden p-12 text-center text-slate-500">
              No interfaces found matching your search.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: DHCP CLIENT (/ip dhcp-client) ================= -->
        <section id="section-dhcp-client" class="hidden space-y-6">
          <div class="flex items-center justify-between">
            <button onclick="openDHCPClientModal()" class="px-4 py-2 rounded-lg font-semibold text-xs bg-amber-500 hover:bg-amber-400 text-slate-950 shadow-lg shadow-amber-500/20 transition flex items-center gap-1.5">
              <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 4v16m8-8H4"/></svg>
              <span>+ Add</span>
            </button>
          </div>

          <!-- KPI Summary Cards -->
          <div class="grid grid-cols-2 md:grid-cols-4 gap-4">
            <div class="bg-slate-900 border border-slate-800 rounded-xl p-4">
              <div class="text-xs text-slate-400">Total Configured</div>
              <div id="dhcp-stat-total" class="text-xl font-bold text-white font-mono mt-1">0</div>
            </div>
            <div class="bg-slate-900 border border-slate-800 rounded-xl p-4">
              <div class="text-xs text-slate-400">Bound Leases</div>
              <div id="dhcp-stat-bound" class="text-xl font-bold text-emerald-400 font-mono mt-1">0</div>
            </div>
            <div class="bg-slate-900 border border-slate-800 rounded-xl p-4">
              <div class="text-xs text-slate-400">Searching / Requesting</div>
              <div id="dhcp-stat-searching" class="text-xl font-bold text-amber-400 font-mono mt-1">0</div>
            </div>
            <div class="bg-slate-900 border border-slate-800 rounded-xl p-4">
              <div class="text-xs text-slate-400">Disabled</div>
              <div id="dhcp-stat-disabled" class="text-xl font-bold text-slate-500 font-mono mt-1">0</div>
            </div>
          </div>

          <!-- DHCP Clients Table -->
          <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <div>
                <h3 class="text-xs font-bold text-white">DHCP Client Interfaces</h3>
                <p class="text-[11px] text-slate-400 mt-0.5">Active leases, assigned IP addresses, default gateways and lease duration</p>
              </div>
            </div>
            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px]">
                  <tr>
                    <th class="py-3 px-4">Interface</th>
                    <th class="py-3 px-4">Status</th>
                    <th class="py-3 px-4">IP Address / Netmask</th>
                    <th class="py-3 px-4">Gateway</th>
                    <th class="py-3 px-4">DHCP Server</th>
                    <th class="py-3 px-4">DNS Servers</th>
                    <th class="py-3 px-4">Expires In</th>
                    <th class="py-3 px-4">Options</th>
                    <th class="py-3 px-4 text-right">Actions</th>
                  </tr>
                </thead>
                <tbody id="dhcp-clients-tbody" class="divide-y divide-slate-800 font-mono"></tbody>
              </table>
            </div>
            <div id="dhcp-clients-empty" class="hidden p-12 text-center text-slate-500">
              <div class="text-3xl mb-2">⚡</div>
              <div class="font-semibold text-slate-400 text-sm">No DHCP Clients Configured</div>
              <div class="text-xs mt-1 text-slate-500">Click &ldquo;Add DHCP Client&rdquo; to automatically obtain an IP on any interface.</div>
            </div>
          </div>
        </section>

        <!-- ================= SECTION: BRIDGE (/interface bridge) ================= -->
        <section id="section-bridge" class="hidden space-y-6">
          <!-- Bridge Navigation Header -->
          <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-4 flex flex-wrap items-center justify-between gap-4">
            <div class="flex items-center space-x-3">
              <div class="p-2.5 rounded-lg bg-sky-500/10 border border-sky-500/20 text-sky-400">
                <svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 10h18M3 14h18M5 14v4a2 2 0 002 2h2a2 2 0 002-2v-4m6 0v4a2 2 0 002 2h2a2 2 0 002-2v-4M4 10V6a2 2 0 012-2h12a2 2 0 012 2v4" />
                </svg>
              </div>
              <div>
                <div class="flex items-center gap-2">
                  <h2 class="text-base font-bold text-white">Bridge Interfaces</h2>
                  <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-sky-500/20 text-sky-300 border border-sky-500/30 font-semibold">IEEE 802.1D / 802.1Q</span>
                </div>
                <p class="text-xs text-slate-400">Layer 2 software bridge with Rapid Spanning Tree Protocol (RSTP), 802.1Q VLAN filtering, horizon port isolation, and dynamic forwarding database (FDB).</p>
              </div>
            </div>

            <div class="flex items-center space-x-3">
              <button id="bridge-top-action-btn" onclick="openCurrentBridgeModal()" class="flex items-center space-x-2 bg-gradient-to-r from-sky-600 to-cyan-600 hover:from-sky-500 hover:to-cyan-500 text-white font-semibold text-xs px-4 py-2.5 rounded-lg shadow-lg shadow-sky-500/20 transition">
                <span>+ Add Bridge</span>
              </button>
            </div>
          </div>

          <!-- Bridge Subtabs Nav -->
          <div class="bg-slate-900/60 border border-slate-800/80 rounded-xl overflow-hidden p-1 flex flex-wrap items-center justify-between gap-2">
            <div class="flex items-center space-x-1">
              <button id="bridge-subtab-btn-bridges" onclick="switchBridgeSubTab('bridges')" class="px-4 py-2 text-xs font-bold rounded-lg bg-slate-800 text-white shadow-sm transition flex items-center gap-2">
                <span>Bridges</span>
                <span id="bridge-badge-bridges" class="px-1.5 py-0.2 rounded text-[10px] bg-sky-950 text-sky-300 border border-sky-800/40">0</span>
              </button>
              <button id="bridge-subtab-btn-ports" onclick="switchBridgeSubTab('ports')" class="px-4 py-2 text-xs font-bold rounded-lg text-slate-400 hover:text-slate-200 transition flex items-center gap-2">
                <span>Ports</span>
                <span id="bridge-badge-ports" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
              </button>
              <button id="bridge-subtab-btn-vlans" onclick="switchBridgeSubTab('vlans')" class="px-4 py-2 text-xs font-bold rounded-lg text-slate-400 hover:text-slate-200 transition flex items-center gap-2">
                <span>VLANs</span>
                <span id="bridge-badge-vlans" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
              </button>
              <button id="bridge-subtab-btn-hosts" onclick="switchBridgeSubTab('hosts')" class="px-4 py-2 text-xs font-bold rounded-lg text-slate-400 hover:text-slate-200 transition flex items-center gap-2">
                <span>Hosts (MAC Table)</span>
                <span id="bridge-badge-hosts" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
              </button>
            </div>

            <!-- Stats Bar -->
            <div class="flex items-center space-x-4 px-3 text-xs font-mono text-slate-400">
              <div>Bridges: <span id="bridge-stat-bridges" class="font-bold text-white">0</span></div>
              <div>Ports: <span id="bridge-stat-ports" class="font-bold text-sky-400">0</span></div>
              <div>Learned MACs: <span id="bridge-stat-hosts" class="font-bold text-emerald-400">0</span></div>
            </div>
          </div>

          <!-- ================= SUBTAB 1: BRIDGES ================= -->
          <div id="bridge-subtab-bridges" class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Configured Bridges</h3>
              <span id="bridge-count-badge" class="text-xs font-mono text-slate-400">0 Bridges</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-10 text-center">#</th>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: R=Running, X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Name</th>
                    <th class="py-2.5 px-3">MTU</th>
                    <th class="py-2.5 px-3">MAC Address</th>
                    <th class="py-2.5 px-3">STP</th>
                    <th class="py-2.5 px-3">VLAN Filtering</th>
                    <th class="py-2.5 px-3">PVID</th>
                    <th class="py-2.5 px-3">Ports</th>
                    <th class="py-2.5 px-3">IP Addresses</th>
                    <th class="py-2.5 px-3">Traffic</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="bridge-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="bridge-empty-bridges" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No bridge interfaces configured. Click "+ Add Bridge" to create one.
            </div>
          </div>

          <!-- ================= SUBTAB 2: PORTS ================= -->
          <div id="bridge-subtab-ports" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Bridge Ports</h3>
                <span id="bridge-ports-count-badge" class="text-xs font-mono text-slate-400">0 Ports</span>
              </div>
              <div class="flex items-center space-x-2">
                <label class="text-xs text-slate-400">Filter Bridge:</label>
                <select id="bridge-ports-filter-bridge" onchange="renderBridgePorts()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white">
                  <option value="">All Bridges</option>
                </select>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-10 text-center">#</th>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Interface</th>
                    <th class="py-2.5 px-3">Bridge</th>
                    <th class="py-2.5 px-3">PVID</th>
                    <th class="py-2.5 px-3">Frame Types</th>
                    <th class="py-2.5 px-3">Ingress Filter</th>
                    <th class="py-2.5 px-3">Horizon</th>
                    <th class="py-2.5 px-3">Role / Status</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="bridge-ports-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="bridge-empty-ports" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No bridge ports configured. Click "+ Add Port" to attach a physical NIC, VLAN or EoIP tunnel.
            </div>
          </div>

          <!-- ================= SUBTAB 3: VLANS ================= -->
          <div id="bridge-subtab-vlans" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Bridge VLAN Filtering Table</h3>
                <span id="bridge-vlans-count-badge" class="text-xs font-mono text-slate-400">0 Entries</span>
              </div>
              <div class="flex items-center space-x-2">
                <label class="text-xs text-slate-400">Filter Bridge:</label>
                <select id="bridge-vlans-filter-bridge" onchange="renderBridgeVLANs()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white">
                  <option value="">All Bridges</option>
                </select>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-10 text-center">#</th>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Bridge</th>
                    <th class="py-2.5 px-3">VLAN IDs</th>
                    <th class="py-2.5 px-3">Tagged Member Ports</th>
                    <th class="py-2.5 px-3">Untagged Member Ports</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="bridge-vlans-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="bridge-empty-vlans" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No bridge VLAN filtering entries configured. Click "+ Add VLAN Entry" to configure 802.1Q tagged ports.
            </div>
          </div>

          <!-- ================= SUBTAB 4: HOSTS (MAC TABLE) ================= -->
          <div id="bridge-subtab-hosts" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Forwarding Database (MAC Table)</h3>
                <span id="bridge-hosts-count-badge" class="text-xs font-mono text-slate-400">0 Entries</span>
              </div>
              <div class="flex items-center space-x-2">
                <input type="text" id="bridge-hosts-search" oninput="renderBridgeHosts()" placeholder="Search MAC or Interface..." class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white">
                <select id="bridge-hosts-filter-bridge" onchange="loadBridgeHosts()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white">
                  <option value="">All Bridges</option>
                </select>
                <button onclick="loadBridgeHosts()" class="px-2.5 py-1 rounded-lg bg-slate-800 hover:bg-slate-700 text-xs font-semibold text-slate-200 border border-slate-700">🔄 Refresh</button>
                <button onclick="flushBridgeHosts()" class="px-2.5 py-1 rounded-lg bg-rose-950/60 hover:bg-rose-900/80 text-rose-300 border border-rose-800/40 text-xs font-semibold">🗑️ Flush Dynamic</button>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3">MAC Address</th>
                    <th class="py-2.5 px-3">Interface / Port</th>
                    <th class="py-2.5 px-3">Bridge</th>
                    <th class="py-2.5 px-3">VLAN</th>
                    <th class="py-2.5 px-3">Age (s)</th>
                    <th class="py-2.5 px-3">Flags (L=Local, S=Static, D=Dynamic)</th>
                  </tr>
                </thead>
                <tbody id="bridge-hosts-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="bridge-empty-hosts" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No MAC addresses learned in the forwarding database.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: PPPoE CLIENTS ================= -->
        <section id="section-pppoe" class="hidden space-y-6">
          <div class="bg-gradient-to-r from-blue-950/40 via-slate-900 to-slate-900 border border-blue-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-blue-500/20 text-blue-300 border border-blue-500/30 font-semibold">/interface pppoe-client</span>
                <h2 class="text-base font-bold text-white">PPPoE Client Sessions</h2>
              </div>
              <p class="text-xs text-slate-400">Point-to-Point Protocol over Ethernet (PPPoE) client management with automated reconnection, default gateway negotiation, and peer DNS acquisition.</p>
            </div>
            <div class="flex items-center gap-2">
              <button onclick="navigate('ppp'); switchPPPSubTab('pppoe')" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-blue-300 border border-blue-900/40 transition flex items-center gap-1.5" title="Configure Router as PPPoE Access Concentrator Server">
                <span>⚙ Server Settings</span>
              </button>
              <button onclick="openAddPPPoEModal()" class="text-xs font-semibold px-4 py-2 rounded-lg bg-blue-600 hover:bg-blue-500 text-white shadow-lg shadow-blue-500/20 transition flex items-center gap-1.5">
                <span>+ Add PPPoE Client</span>
              </button>
            </div>
          </div>

          <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Configured PPPoE Interfaces</h3>
              <span id="pppoe-count-badge" class="text-xs font-mono bg-slate-800 text-slate-300 px-2.5 py-0.5 rounded-full">0 Interfaces</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: R=Running, X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Name</th>
                    <th class="py-2.5 px-3">Interface</th>
                    <th class="py-2.5 px-3">User</th>
                    <th class="py-2.5 px-3">Assigned IP</th>
                    <th class="py-2.5 px-3">Device</th>
                    <th class="py-2.5 px-3 text-center">Def. Route</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="pppoe-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="pppoe-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No PPPoE clients configured. Click "+ Add PPPoE Client" to add a connection.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: WIREGUARD ================= -->
        <section id="section-wireguard" class="hidden space-y-6">
          <div class="bg-gradient-to-r from-rose-950/40 via-slate-900 to-slate-900 border border-rose-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-rose-500/20 text-rose-300 border border-rose-500/30 font-semibold">/interface wireguard</span>
                <h2 class="text-base font-bold text-white">WireGuard VPN Suite</h2>
              </div>
              <p class="text-xs text-slate-400">High-performance multi-interface WireGuard VPN with kernel-accelerated cryptography, peer roaming, and endpoint keepalives.</p>
            </div>

            <div class="flex items-center space-x-2.5">
              <button onclick="openAddWGInterfaceModal()" class="text-xs font-semibold px-3.5 py-2 rounded-lg bg-rose-600 hover:bg-rose-500 text-white shadow-lg shadow-rose-500/20 transition">
                + Add Interface
              </button>
              <button onclick="openAddWGPeerModal()" class="text-xs font-semibold px-3.5 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-white border border-slate-700 transition">
                + Add Peer
              </button>
            </div>
          </div>

          <!-- Sub Tabs: Interfaces / Peers -->
          <div class="flex border-b border-slate-800 space-x-2">
            <button id="wg-subtab-btn-ifaces" onclick="switchWGSubTab('ifaces')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-rose-500 text-white transition flex items-center gap-2">
              <span>Interfaces</span>
              <span id="wg-subtab-badge-ifaces" class="px-1.5 py-0.5 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="wg-subtab-btn-peers" onclick="switchWGSubTab('peers')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2">
              <span>Peers</span>
              <span id="wg-subtab-badge-peers" class="px-1.5 py-0.5 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
          </div>

          <!-- Sub-Tab 1: Interfaces -->
          <div id="wg-subtab-ifaces" class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">WireGuard Interfaces</h3>
              <span id="wg-ifaces-count" class="text-xs font-mono text-slate-400">0 Interfaces</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: R=Running, X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Name</th>
                    <th class="py-2.5 px-3">Listen Port</th>
                    <th class="py-2.5 px-3">Tunnel Address</th>
                    <th class="py-2.5 px-3">Public Key</th>
                    <th class="py-2.5 px-3">MTU</th>
                    <th class="py-2.5 px-3 text-center">Peers</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="wg-ifaces-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="wg-ifaces-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No WireGuard interfaces configured. Click "+ Add Interface" to create wg0.
            </div>
          </div>

          <!-- Sub-Tab 2: Peers -->
          <div id="wg-subtab-peers" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">WireGuard Peers</h3>
                <span id="wg-peers-count" class="text-xs font-mono text-slate-400">0 Peers</span>
              </div>
              <div class="flex items-center gap-2">
                <label class="text-xs text-slate-400 font-sans">Filter Interface:</label>
                <select id="wg-peers-filter-iface" onchange="renderWGPeers()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white font-mono">
                  <option value="">All Interfaces</option>
                </select>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: R=Active, X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Interface</th>
                    <th class="py-2.5 px-3">Peer Name</th>
                    <th class="py-2.5 px-3">Public Key</th>
                    <th class="py-2.5 px-3">Allowed IPs</th>
                    <th class="py-2.5 px-3">Endpoint</th>
                    <th class="py-2.5 px-3">Latest Handshake</th>
                    <th class="py-2.5 px-3">Traffic (RX/TX)</th>
                    <th class="py-2.5 px-3 text-right font-sans">Action</th>
                  </tr>
                </thead>
                <tbody id="wg-peers-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="wg-peers-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No peers found for the selected interface. Click "+ Add Peer" to add a client or branch.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: IPSEC ================= -->
        <section id="section-ipsec" class="hidden space-y-6">
          <div class="bg-gradient-to-r from-amber-950/40 via-slate-900 to-slate-900 border border-amber-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-amber-500/20 text-amber-300 border border-amber-500/30 font-semibold">/ip ipsec</span>
                <h2 class="text-base font-bold text-white">IPSec (IKEv2) Tunnels</h2>
              </div>
              <p class="text-xs text-slate-400">Enterprise IKEv2 / IPsec cryptographic tunnels with policy routing, automated SA rekeying, and Roadwarrior mobile client support.</p>
            </div>
            <div class="flex items-center gap-2">
              <button onclick="openIPSecServerModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-amber-300 border border-amber-900/40 transition flex items-center gap-1.5" title="Configure Router as IPSec IKEv2 Roadwarrior Mobile Client Server">
                <span>⚙ Roadwarrior Server</span>
              </button>
              <button onclick="openAddIPSecModal()" class="text-xs font-semibold px-4 py-2 rounded-lg bg-amber-600 hover:bg-amber-500 text-white shadow-lg shadow-amber-500/20 transition">
                + Add IPSec Tunnel
              </button>
            </div>
          </div>

          <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Configured IPSec Tunnels</h3>
              <span id="ipsec-sas-badge" class="text-xs font-mono bg-slate-800 text-slate-300 px-2.5 py-0.5 rounded-full">0 Active SAs</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: R=Established, X=Disabled">Flag</th>
                    <th class="py-2.5 px-4">Connection Name</th>
                    <th class="py-2.5 px-4">Local Subnet</th>
                    <th class="py-2.5 px-4">Remote Gateway</th>
                    <th class="py-2.5 px-4">Remote Subnet</th>
                    <th class="py-2.5 px-4">Status</th>
                    <th class="py-2.5 px-4 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="ipsec-table-body" class="divide-y divide-slate-800"></tbody>
              </table>
            </div>

            <div id="ipsec-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No IPSec tunnels configured. Click "+ Add IPSec Tunnel" to set up site-to-site networking.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: L2TP CLIENT ================= -->
        <section id="section-l2tp" class="hidden space-y-6">
          <div class="bg-gradient-to-r from-cyan-950/40 via-slate-900 to-slate-900 border border-cyan-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-cyan-500/20 text-cyan-300 border border-cyan-500/30 font-semibold">/interface l2tp-client</span>
                <h2 class="text-base font-bold text-white">L2TP Client Sessions</h2>
              </div>
              <p class="text-xs text-slate-400">Layer 2 Tunneling Protocol (L2TP) multi-instance client manager with optional IPsec pre-shared key encapsulation.</p>
            </div>
            <div class="flex items-center gap-2">
              <button onclick="navigate('ppp'); switchPPPSubTab('l2tp')" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-cyan-300 border border-cyan-900/40 transition flex items-center gap-1.5" title="Configure Router as L2TP Server">
                <span>⚙ Server Settings</span>
              </button>
              <button onclick="openAddL2TPModal()" class="text-xs font-semibold px-4 py-2 rounded-lg bg-cyan-600 hover:bg-cyan-500 text-white shadow-lg shadow-cyan-500/20 transition">
                + Add L2TP Client
              </button>
            </div>
          </div>

          <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Configured L2TP Clients</h3>
              <span id="l2tp-count-badge" class="text-xs font-mono bg-slate-800 text-slate-300 px-2.5 py-0.5 rounded-full">0 Clients</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: R=Running, X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Name</th>
                    <th class="py-2.5 px-3">Server Address</th>
                    <th class="py-2.5 px-3">User</th>
                    <th class="py-2.5 px-3">Assigned IP</th>
                    <th class="py-2.5 px-3">Device</th>
                    <th class="py-2.5 px-3 text-center">Def. Route</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="l2tp-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="l2tp-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No L2TP clients configured. Click "+ Add L2TP Client" to add a tunnel.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: PPTP CLIENT ================= -->
        <section id="section-pptp" class="hidden space-y-6">
          <div class="bg-gradient-to-r from-purple-950/40 via-slate-900 to-slate-900 border border-purple-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-purple-500/20 text-purple-300 border border-purple-500/30 font-semibold">/interface pptp-client</span>
                <h2 class="text-base font-bold text-white">PPTP Client Sessions</h2>
              </div>
              <p class="text-xs text-slate-400">Point-to-Point Tunneling Protocol (PPTP) client management with MPPE-128 stateful encryption and automated routing.</p>
            </div>
            <div class="flex items-center gap-2">
              <button onclick="navigate('ppp'); switchPPPSubTab('pptp')" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-purple-300 border border-purple-900/40 transition flex items-center gap-1.5" title="Configure Router as PPTP Server">
                <span>⚙ Server Settings</span>
              </button>
              <button onclick="openAddPPTPModal()" class="text-xs font-semibold px-4 py-2 rounded-lg bg-purple-600 hover:bg-purple-500 text-white shadow-lg shadow-purple-500/20 transition">
                + Add PPTP Client
              </button>
            </div>
          </div>

          <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Configured PPTP Clients</h3>
              <span id="pptp-count-badge" class="text-xs font-mono bg-slate-800 text-slate-300 px-2.5 py-0.5 rounded-full">0 Clients</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: R=Running, X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Name</th>
                    <th class="py-2.5 px-3">Server Address</th>
                    <th class="py-2.5 px-3">User</th>
                    <th class="py-2.5 px-3">Assigned IP</th>
                    <th class="py-2.5 px-3">Device</th>
                    <th class="py-2.5 px-3 text-center">MPPE</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="pptp-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="pptp-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No PPTP clients configured. Click "+ Add PPTP Client" to add a tunnel.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: PPP SERVERS & SECRETS (/ppp) ================= -->
        <section id="section-ppp" class="hidden space-y-6">
          <div class="bg-gradient-to-r from-violet-950/40 via-slate-900 to-slate-900 border border-violet-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-violet-500/20 text-violet-300 border border-violet-500/30 font-semibold">/ppp</span>
                <h2 class="text-base font-bold text-white">PPP Servers, Secrets & Profiles</h2>
              </div>
              <p class="text-xs text-slate-400">Centralized subscriber credentials, dynamic address assignment pools, and multi-protocol VPN access concentrators.</p>
            </div>

            <div class="flex items-center space-x-2.5">
              <button id="ppp-primary-add-btn" onclick="openCurrentPPPModal()" class="text-xs font-semibold px-4 py-2 rounded-lg bg-violet-600 hover:bg-violet-500 text-white shadow-lg shadow-violet-500/20 transition flex items-center gap-1.5">
                <span>+ Add User (Secret)</span>
              </button>
            </div>
          </div>

          <!-- Sub Tabs: Secrets / Profiles / PPPoE Server / PPTP Server / L2TP Server / Active Sessions -->
          <div class="flex border-b border-slate-800 space-x-1 overflow-x-auto">
            <button id="ppp-subtab-btn-secrets" onclick="switchPPPSubTab('secrets')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-violet-500 text-white transition flex items-center gap-2 whitespace-nowrap">
              <span>Secrets (Users)</span>
              <span id="ppp-badge-secrets" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="ppp-subtab-btn-profiles" onclick="switchPPPSubTab('profiles')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Profiles (Pools)</span>
              <span id="ppp-badge-profiles" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="ppp-subtab-btn-pppoe" onclick="switchPPPSubTab('pppoe')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>PPPoE Server</span>
              <span id="ppp-badge-pppoe-state" class="w-2 h-2 rounded-full bg-slate-600"></span>
            </button>
            <button id="ppp-subtab-btn-pptp" onclick="switchPPPSubTab('pptp')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>PPTP Server</span>
              <span id="ppp-badge-pptp-state" class="w-2 h-2 rounded-full bg-slate-600"></span>
            </button>
            <button id="ppp-subtab-btn-l2tp" onclick="switchPPPSubTab('l2tp')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>L2TP Server</span>
              <span id="ppp-badge-l2tp-state" class="w-2 h-2 rounded-full bg-slate-600"></span>
            </button>
            <button id="ppp-subtab-btn-active" onclick="switchPPPSubTab('active')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Active Sessions</span>
              <span id="ppp-badge-active" class="px-1.5 py-0.2 rounded text-[10px] bg-emerald-950 text-emerald-400 border border-emerald-800/40">0</span>
            </button>
          </div>

          <!-- TAB 1: SECRETS (USERS) -->
          <div id="ppp-subtab-secrets" class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">PPP Secrets (/ppp secret)</h3>
              <span id="secrets-count-badge" class="text-xs font-mono text-slate-400">0 Users</span>
            </div>
            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-12 text-center">Flag</th>
                    <th class="py-2.5 px-3">Name (Username)</th>
                    <th class="py-2.5 px-3">Service</th>
                    <th class="py-2.5 px-3">Profile</th>
                    <th class="py-2.5 px-3">Local Address</th>
                    <th class="py-2.5 px-3">Remote Address</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="secrets-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="secrets-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No PPP secrets configured. Click "+ Add User" to define an account.
            </div>
          </div>

          <!-- TAB 2: PROFILES (POOLS) -->
          <div id="ppp-subtab-profiles" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">PPP Profiles (/ppp profile)</h3>
              <span id="profiles-count-badge" class="text-xs font-mono text-slate-400">0 Profiles</span>
            </div>
            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3">Profile Name</th>
                    <th class="py-2.5 px-3">Local Address</th>
                    <th class="py-2.5 px-3">Remote Address (Pool)</th>
                    <th class="py-2.5 px-3">DNS Servers</th>
                    <th class="py-2.5 px-3">Encryption</th>
                    <th class="py-2.5 px-3 text-center">Only One</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="profiles-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
          </div>

          <!-- TAB 3: PPPoE SERVER -->
          <div id="ppp-subtab-pppoe" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl p-6">
            <form onsubmit="savePPPoEServerConfig(event)" class="max-w-2xl space-y-5">
              <div class="flex items-center justify-between border-b border-slate-800 pb-4">
                <div>
                  <h3 class="text-sm font-bold text-white">PPPoE Access Concentrator Server</h3>
                  <p class="text-xs text-slate-400">Listens on physical interface or VLAN for PPPoE Discovery (PADI) packets</p>
                </div>
                <div class="flex items-center gap-3">
                  <span id="pppoe-server-status-pill" class="px-2 py-0.5 rounded text-[10px] font-mono font-semibold bg-slate-800 text-slate-400">STOPPED</span>
                  <label class="relative inline-flex items-center cursor-pointer">
                    <input type="checkbox" id="pppoe-server-enabled" class="sr-only peer">
                    <div class="w-11 h-6 bg-slate-700 peer-focus:outline-none rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-slate-300 after:border after:rounded-full after:h-5 after:w-5 after:transition-all peer-checked:bg-blue-600"></div>
                  </label>
                </div>
              </div>
              <div class="grid grid-cols-1 md:grid-cols-2 gap-4 text-xs font-sans">
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Service Name</label>
                  <input type="text" id="pppoe-server-name" placeholder="proxmox-pppoe" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
                </div>
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Listen Interface</label>
                  <select id="pppoe-server-iface" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
                </div>
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Default Profile</label>
                  <select id="pppoe-server-profile" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
                </div>
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Max MTU / MRU</label>
                  <input type="number" id="pppoe-server-mtu" value="1480" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
                </div>
              </div>
              <div class="flex items-center space-x-2 pt-2">
                <input type="checkbox" id="pppoe-server-onesession" class="rounded bg-slate-800 border-slate-700 text-blue-600">
                <label for="pppoe-server-onesession" class="text-xs text-slate-300">One Session Per Host (limit 1 PPPoE session per client MAC)</label>
              </div>
              <div class="pt-4 border-t border-slate-800 flex justify-end">
                <button type="submit" class="px-5 py-2 rounded-lg text-xs font-semibold bg-blue-600 hover:bg-blue-500 text-white shadow-lg shadow-blue-500/20 transition">
                  Apply PPPoE Server Settings
                </button>
              </div>
            </form>
          </div>

          <!-- TAB 4: PPTP SERVER -->
          <div id="ppp-subtab-pptp" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl p-6">
            <form onsubmit="savePPTPServerConfig(event)" class="max-w-2xl space-y-5">
              <div class="flex items-center justify-between border-b border-slate-800 pb-4">
                <div>
                  <h3 class="text-sm font-bold text-white">PPTP Server (/interface pptp-server server)</h3>
                  <p class="text-xs text-slate-400">Point-to-Point Tunneling Server listening on TCP port 1723 with MPPE-128 encryption</p>
                </div>
                <div class="flex items-center gap-3">
                  <span id="pptp-server-status-pill" class="px-2 py-0.5 rounded text-[10px] font-mono font-semibold bg-slate-800 text-slate-400">STOPPED</span>
                  <label class="relative inline-flex items-center cursor-pointer">
                    <input type="checkbox" id="pptp-server-enabled" class="sr-only peer">
                    <div class="w-11 h-6 bg-slate-700 peer-focus:outline-none rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-slate-300 after:border after:rounded-full after:h-5 after:w-5 after:transition-all peer-checked:bg-purple-600"></div>
                  </label>
                </div>
              </div>
              <div class="grid grid-cols-1 md:grid-cols-2 gap-4 text-xs font-sans">
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Port</label>
                  <input type="number" id="pptp-server-port" value="1723" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
                </div>
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Default Profile</label>
                  <select id="pptp-server-profile" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
                </div>
              </div>
              <div class="flex items-center space-x-2 pt-2">
                <input type="checkbox" id="pptp-server-mppe" checked class="rounded bg-slate-800 border-slate-700 text-purple-600">
                <label for="pptp-server-mppe" class="text-xs text-slate-300">Require 128-bit MPPE Encryption (MS-CHAPv2)</label>
              </div>
              <div class="pt-4 border-t border-slate-800 flex justify-end">
                <button type="submit" class="px-5 py-2 rounded-lg text-xs font-semibold bg-purple-600 hover:bg-purple-500 text-white shadow-lg shadow-purple-500/20 transition">
                  Apply PPTP Server Settings
                </button>
              </div>
            </form>
          </div>

          <!-- TAB 5: L2TP SERVER -->
          <div id="ppp-subtab-l2tp" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl p-6">
            <form onsubmit="saveL2TPServerConfig(event)" class="max-w-2xl space-y-5">
              <div class="flex items-center justify-between border-b border-slate-800 pb-4">
                <div>
                  <h3 class="text-sm font-bold text-white">L2TP Server (/interface l2tp-server server)</h3>
                  <p class="text-xs text-slate-400">Layer 2 Tunneling Protocol Server listening on UDP port 1701 with optional IPSec</p>
                </div>
                <div class="flex items-center gap-3">
                  <span id="l2tp-server-status-pill" class="px-2 py-0.5 rounded text-[10px] font-mono font-semibold bg-slate-800 text-slate-400">STOPPED</span>
                  <label class="relative inline-flex items-center cursor-pointer">
                    <input type="checkbox" id="l2tp-server-enabled" class="sr-only peer">
                    <div class="w-11 h-6 bg-slate-700 peer-focus:outline-none rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-slate-300 after:border after:rounded-full after:h-5 after:w-5 after:transition-all peer-checked:bg-cyan-600"></div>
                  </label>
                </div>
              </div>
              <div class="grid grid-cols-1 md:grid-cols-2 gap-4 text-xs font-sans">
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Port</label>
                  <input type="number" id="l2tp-server-port" value="1701" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
                </div>
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Default Profile</label>
                  <select id="l2tp-server-profile" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
                </div>
                <div>
                  <label class="block text-slate-300 font-medium mb-1">Use IPSec</label>
                  <select id="l2tp-server-useipsec" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
                    <option value="no">no</option>
                    <option value="yes">yes</option>
                    <option value="required">required</option>
                  </select>
                </div>
                <div>
                  <label class="block text-slate-300 font-medium mb-1">IPSec Secret (PSK)</label>
                  <input type="password" id="l2tp-server-ipsecsecret" placeholder="Optional Pre-Shared Key" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
                </div>
              </div>
              <div class="pt-4 border-t border-slate-800 flex justify-end">
                <button type="submit" class="px-5 py-2 rounded-lg text-xs font-semibold bg-cyan-600 hover:bg-cyan-500 text-white shadow-lg shadow-cyan-500/20 transition">
                  Apply L2TP Server Settings
                </button>
              </div>
            </form>
          </div>

          <!-- TAB 6: ACTIVE SESSIONS -->
          <div id="ppp-subtab-active" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Active PPP Connections (/ppp active)</h3>
              <button onclick="loadPPPSessions()" class="text-xs text-slate-400 hover:text-white px-2 py-1 rounded bg-slate-800">Refresh</button>
            </div>
            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3">Interface</th>
                    <th class="py-2.5 px-3">Username</th>
                    <th class="py-2.5 px-3">Service</th>
                    <th class="py-2.5 px-3">Client IP Address</th>
                    <th class="py-2.5 px-3">Uptime</th>
                    <th class="py-2.5 px-3">RX / TX Traffic</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="active-ppp-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="active-ppp-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No active PPP sessions currently connected.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: EoIP TUNNELS (/interface eoip) ================= -->
        <section id="section-eoip" class="hidden space-y-6">
          <div class="bg-gradient-to-r from-emerald-950/40 via-slate-900 to-slate-900 border border-emerald-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-emerald-500/20 text-emerald-300 border border-emerald-500/30 font-semibold">/interface eoip</span>
                <h2 class="text-base font-bold text-white">EoIP Tunnels (Ethernet over IP)</h2>
              </div>
              <p class="text-xs text-slate-400">Ethernet over IP (EoIP / GRETAP) encapsulation protocol to transparently bridge Layer 2 broadcast domains across IP networks.</p>
            </div>
            <button onclick="openAddEoIPModal()" class="text-xs font-semibold px-4 py-2 rounded-lg bg-emerald-600 hover:bg-emerald-500 text-white shadow-lg shadow-emerald-500/20 transition flex items-center gap-1.5">
              <span>+ Add EoIP Tunnel</span>
            </button>
          </div>

          <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Configured EoIP Interfaces</h3>
              <span id="eoip-count-badge" class="text-xs font-mono bg-slate-800 text-slate-300 px-2.5 py-0.5 rounded-full">0 Tunnels</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: R=Running, X=Disabled">Flag</th>
                    <th class="py-2.5 px-3">Name</th>
                    <th class="py-2.5 px-3">Tunnel ID</th>
                    <th class="py-2.5 px-3">Tunnel IP</th>
                    <th class="py-2.5 px-3">Remote Address</th>
                    <th class="py-2.5 px-3">Local Address</th>
                    <th class="py-2.5 px-3">MAC Address</th>
                    <th class="py-2.5 px-3">MTU</th>
                    <th class="py-2.5 px-3">RX / TX Traffic</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="eoip-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="eoip-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No EoIP tunnels configured. Click "+ Add EoIP Tunnel" to create one.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: FIREWALL (/ip firewall) ================= -->
        <section id="section-firewall" class="hidden space-y-6">
          <div class="bg-gradient-to-r from-emerald-950/40 via-slate-900 to-slate-900 border border-emerald-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-emerald-500/20 text-emerald-300 border border-emerald-500/30 font-semibold">/ip firewall</span>
                <h2 class="text-base font-bold text-white">Firewall & Traffic Controller</h2>
              </div>
              <p class="text-xs text-slate-400">Enterprise stateful inspection firewall, network address translation (NAT), packet marking (Mangle), IP address lists, and active connection tracking (conntrack).</p>
            </div>

            <div class="flex items-center space-x-2.5">
              <button id="fw-primary-add-btn" onclick="openCurrentFWModal()" class="text-xs font-semibold px-4 py-2 rounded-lg bg-emerald-600 hover:bg-emerald-500 text-white shadow-lg shadow-emerald-500/20 transition flex items-center gap-1.5">
                <span>+ Add Rule</span>
              </button>
              <button onclick="resetFirewallCounters()" class="text-xs font-medium px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-slate-300 border border-slate-700 transition" title="Reset all packet & byte counters to zero">
                Reset Counters
              </button>
            </div>
          </div>

          <!-- Sub Tabs: Filter / NAT / Mangle / Address Lists / Connections -->
          <div class="flex border-b border-slate-800 space-x-1 overflow-x-auto">
            <button id="fw-subtab-btn-filter" onclick="switchFWSubTab('filter')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-emerald-500 text-white transition flex items-center gap-2 whitespace-nowrap">
              <span>Filter Rules</span>
              <span id="fw-badge-filter" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="fw-subtab-btn-nat" onclick="switchFWSubTab('nat')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>NAT</span>
              <span id="fw-badge-nat" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="fw-subtab-btn-mangle" onclick="switchFWSubTab('mangle')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Mangle</span>
              <span id="fw-badge-mangle" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="fw-subtab-btn-addrlist" onclick="switchFWSubTab('addrlist')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Address Lists</span>
              <span id="fw-badge-addrlist" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="fw-subtab-btn-geo" onclick="switchFWSubTab('geo')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Geo-Location</span>
              <span id="fw-badge-geo" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="fw-subtab-btn-connections" onclick="switchFWSubTab('connections')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Connections</span>
              <span id="fw-badge-connections" class="px-1.5 py-0.2 rounded text-[10px] bg-emerald-950 text-emerald-400 border border-emerald-800/40">0</span>
            </button>
          </div>

          <!-- ================= TAB 1: FILTER RULES ================= -->
          <div id="fw-subtab-filter" class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Firewall Filter Rules</h3>
                <span id="filter-count-badge" class="text-xs font-mono text-slate-400">0 Rules</span>
              </div>
              <div class="flex items-center gap-2">
                <label class="text-xs text-slate-400 font-sans">Chain:</label>
                <select id="filter-filter-chain" onchange="renderFilterRules()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white font-mono">
                  <option value="">All Chains</option>
                  <option value="input">input</option>
                  <option value="forward">forward</option>
                  <option value="output">output</option>
                </select>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-10 text-center">#</th>
                    <th class="py-2.5 px-3 w-12 text-center" title="Flags: X=Disabled, C=Comment">Flag</th>
                    <th class="py-2.5 px-3">Chain</th>
                    <th class="py-2.5 px-3">Src. Address</th>
                    <th class="py-2.5 px-3">Dst. Address</th>
                    <th class="py-2.5 px-3">Protocol</th>
                    <th class="py-2.5 px-3">Ports</th>
                    <th class="py-2.5 px-3">In / Out</th>
                    <th class="py-2.5 px-3">Action</th>
                    <th class="py-2.5 px-3">Packets / Bytes</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Order & Actions</th>
                  </tr>
                </thead>
                <tbody id="filter-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="filter-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No filter rules found in this chain. Click "+ Add Rule" to create one.
            </div>
          </div>

          <!-- ================= TAB 2: NAT RULES ================= -->
          <div id="fw-subtab-nat" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">NAT Rules</h3>
                <span id="nat-count-badge" class="text-xs font-mono text-slate-400">0 Rules</span>
              </div>
              <div class="flex items-center gap-2">
                <label class="text-xs text-slate-400 font-sans">Chain:</label>
                <select id="nat-filter-chain" onchange="renderNATRules()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white font-mono">
                  <option value="">All Chains</option>
                  <option value="srcnat">srcnat (SNAT / Masquerade)</option>
                  <option value="dstnat">dstnat (Port Forwarding)</option>
                </select>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-10 text-center">#</th>
                    <th class="py-2.5 px-3 w-12 text-center">Flag</th>
                    <th class="py-2.5 px-3">Chain</th>
                    <th class="py-2.5 px-3">Src. Address</th>
                    <th class="py-2.5 px-3">Dst. Address</th>
                    <th class="py-2.5 px-3">Proto/Port</th>
                    <th class="py-2.5 px-3">Out / In</th>
                    <th class="py-2.5 px-3">Action</th>
                    <th class="py-2.5 px-3">To Address:Port</th>
                    <th class="py-2.5 px-3">Packets / Bytes</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Order & Actions</th>
                  </tr>
                </thead>
                <tbody id="nat-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="nat-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No NAT rules configured. Click "+ Add Rule" to add masquerade or port forwarding.
            </div>
          </div>

          <!-- ================= TAB 3: MANGLE RULES ================= -->
          <div id="fw-subtab-mangle" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Mangle Packet & Connection Marking</h3>
                <span id="mangle-count-badge" class="text-xs font-mono text-slate-400">0 Rules</span>
              </div>
              <div class="flex items-center gap-2">
                <label class="text-xs text-slate-400 font-sans">Chain:</label>
                <select id="mangle-filter-chain" onchange="renderMangleRules()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white font-mono">
                  <option value="">All Chains</option>
                  <option value="prerouting">prerouting</option>
                  <option value="forward">forward</option>
                  <option value="postrouting">postrouting</option>
                  <option value="input">input</option>
                  <option value="output">output</option>
                </select>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-10 text-center">#</th>
                    <th class="py-2.5 px-3 w-12 text-center">Flag</th>
                    <th class="py-2.5 px-3">Chain</th>
                    <th class="py-2.5 px-3">Src. Address</th>
                    <th class="py-2.5 px-3">Dst. Address</th>
                    <th class="py-2.5 px-3">Action</th>
                    <th class="py-2.5 px-3">New Mark / Value</th>
                    <th class="py-2.5 px-3 text-center">Pass</th>
                    <th class="py-2.5 px-3">Packets / Bytes</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Order & Actions</th>
                  </tr>
                </thead>
                <tbody id="mangle-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="mangle-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No mangle rules configured. Click "+ Add Rule" to mark connections or routing for Multi-WAN.
            </div>
          </div>

          <!-- ================= TAB 4: ADDRESS LISTS ================= -->
          <div id="fw-subtab-addrlist" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Address Lists (ipset)</h3>
                <span id="addrlist-count-badge" class="text-xs font-mono text-slate-400">0 Entries</span>
              </div>
              <div class="flex items-center gap-2">
                <label class="text-xs text-slate-400 font-sans">List:</label>
                <select id="addrlist-filter-name" onchange="renderAddressLists()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white font-mono">
                  <option value="">All Lists</option>
                </select>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-10 text-center">#</th>
                    <th class="py-2.5 px-3 w-12 text-center">Flag</th>
                    <th class="py-2.5 px-3">List Name</th>
                    <th class="py-2.5 px-3">IP Address / CIDR</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="addrlist-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="addrlist-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No address list entries configured. Click "+ Add Item" to define a group of IPs/subnets.
            </div>
          </div>

          <!-- ================= TAB 5: ACTIVE CONNECTIONS ================= -->
          <div id="fw-subtab-connections" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Active Conntrack Connections</h3>
                <span id="conns-count-badge" class="text-xs font-mono bg-emerald-500/10 text-emerald-400 border border-emerald-500/30 px-2 py-0.5 rounded-full">0 Flows</span>
              </div>
              <div class="flex items-center gap-2 flex-wrap">
                <input type="text" id="conns-search-input" oninput="renderConnections()" placeholder="Filter IP, port..." class="bg-slate-800 border border-slate-700 rounded-lg px-3 py-1 text-xs text-white font-mono focus:outline-none focus:border-emerald-500">
                <select id="conns-filter-proto" onchange="renderConnections()" class="bg-slate-800 border border-slate-700 rounded-lg px-2 py-1 text-xs text-white font-mono">
                  <option value="">All Proto</option>
                  <option value="TCP">TCP</option>
                  <option value="UDP">UDP</option>
                  <option value="ICMP">ICMP</option>
                </select>
                <button onclick="loadConnections()" class="text-xs text-emerald-400 hover:text-emerald-300 font-semibold px-2 py-1 bg-slate-800 rounded border border-slate-700">Refresh</button>
              </div>
            </div>

            <div class="overflow-x-auto max-h-[550px] overflow-y-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/80 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans sticky top-0 z-10 backdrop-blur-sm">
                  <tr>
                    <th class="py-2.5 px-3">Proto</th>
                    <th class="py-2.5 px-3">Source Address</th>
                    <th class="py-2.5 px-3">Destination Address</th>
                    <th class="py-2.5 px-3">Reply Source</th>
                    <th class="py-2.5 px-3">Reply Dest</th>
                    <th class="py-2.5 px-3">TCP State</th>
                    <th class="py-2.5 px-3">Mark</th>
                    <th class="py-2.5 px-3">Timeout</th>
                    <th class="py-2.5 px-3 text-right font-sans">Action</th>
                  </tr>
                </thead>
                <tbody id="conns-table-body" class="divide-y divide-slate-800/60"></tbody>
              </table>
            </div>

            <div id="conns-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No active connections found matching your search.
            </div>
          </div>

          <!-- ================= TAB 5: GEO-LOCATION ================= -->
          <div id="fw-subtab-geo" class="hidden space-y-4">
            <!-- Geo Header & Scheduler Status -->
            <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-4 flex flex-wrap items-center justify-between gap-4">
              <div class="flex items-center space-x-3">
                <div class="p-2.5 rounded-lg bg-emerald-500/10 border border-emerald-500/20 text-emerald-400">
                  <span class="text-xl">🌍</span>
                </div>
                <div>
                  <div class="flex items-center gap-2">
                    <h3 class="text-sm font-bold text-white">Geo-Location IP Filtering</h3>
                    <span id="geo-status-badge" class="px-2 py-0.5 rounded text-[10px] font-mono font-bold bg-emerald-500/20 text-emerald-300 border border-emerald-500/30">Auto-Update ON</span>
                  </div>
                  <p class="text-xs text-slate-400">Aggregated country CIDR databases loaded into Linux kernel <code class="text-emerald-300">ipset</code>. Usable anywhere in Filter, NAT, and Mangle rules.</p>
                </div>
              </div>

              <!-- Controls -->
              <div class="flex items-center flex-wrap gap-2">
                <div class="flex items-center space-x-1.5 bg-slate-950/60 border border-slate-800 px-3 py-1.5 rounded-lg text-xs font-mono">
                  <span class="text-slate-400">Schedule:</span>
                  <span id="geo-interval-label" class="font-bold text-white">Every 24h</span>
                </div>
                <button onclick="openGeoIntervalModal()" class="text-xs font-semibold px-3 py-1.5 rounded-lg bg-slate-800 hover:bg-slate-700 text-slate-200 border border-slate-700 transition">
                  ⚙️ Settings
                </button>
                <button id="geo-btn-update-now" onclick="triggerGeoUpdateNow()" class="text-xs font-semibold px-3.5 py-1.5 rounded-lg bg-emerald-600 hover:bg-emerald-500 text-white shadow-lg shadow-emerald-500/20 transition flex items-center gap-1.5">
                  <span id="geo-update-spinner" class="hidden animate-spin text-xs">⏳</span>
                  <span>🔄 Update Now</span>
                </button>
              </div>
            </div>

            <!-- Stats Bar -->
            <div class="grid grid-cols-2 sm:grid-cols-4 gap-3">
              <div class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3">
                <span class="text-[10px] uppercase font-bold text-slate-500 block">Countries in Rules</span>
                <span id="geo-stat-active-countries" class="text-base font-bold font-mono text-emerald-400">0</span>
              </div>
              <div class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3">
                <span class="text-[10px] uppercase font-bold text-slate-500 block">Total Subnets in Kernel</span>
                <span id="geo-stat-total-subnets" class="text-base font-bold font-mono text-cyan-400">0</span>
              </div>
              <div class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3">
                <span class="text-[10px] uppercase font-bold text-slate-500 block">Last Synced</span>
                <span id="geo-stat-last-sync" class="text-xs font-mono text-slate-300">-</span>
              </div>
              <div class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3">
                <span class="text-[10px] uppercase font-bold text-slate-500 block">Next Scheduled Run</span>
                <span id="geo-stat-next-sync" class="text-xs font-mono text-slate-300">-</span>
              </div>
            </div>

            <!-- Filters & Country Table -->
            <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
              <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
                <div class="flex items-center flex-wrap gap-2">
                  <input type="text" id="geo-search-input" oninput="renderGeoCountries()" placeholder="Search country name or code (e.g. Greece, GR, Germany)..." class="bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-xs text-white placeholder-slate-500 focus:outline-none focus:border-emerald-500 w-64">

                  <select id="geo-continent-filter" onchange="renderGeoCountries()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1.5 text-xs text-white font-mono">
                    <option value="">All Continents</option>
                    <option value="Europe">Europe</option>
                    <option value="Asia">Asia</option>
                    <option value="Americas">Americas</option>
                    <option value="Africa">Africa</option>
                    <option value="Oceania">Oceania</option>
                  </select>

                  <label class="flex items-center space-x-1.5 text-xs text-slate-300 cursor-pointer ml-2">
                    <input type="checkbox" id="geo-filter-inuse-only" onchange="renderGeoCountries()" class="rounded bg-slate-800 border-slate-700 text-emerald-500">
                    <span>In Use by Rules only</span>
                  </label>

                  <label class="flex items-center space-x-1.5 text-xs text-slate-300 cursor-pointer ml-2">
                    <input type="checkbox" id="geo-filter-cached-only" onchange="renderGeoCountries()" class="rounded bg-slate-800 border-slate-700 text-cyan-500">
                    <span>Cached Only</span>
                  </label>
                </div>

                <div class="flex items-center space-x-2">
                  <span class="text-xs text-slate-400 font-sans">Quick Filter:</span>
                  <button onclick="quickFilterGeo('GR')" class="px-2.5 py-1 text-xs rounded bg-slate-800 hover:bg-slate-700 text-slate-200 border border-slate-700 font-mono">🇬🇷 GR</button>
                  <button onclick="quickFilterGeo('Europe')" class="px-2.5 py-1 text-xs rounded bg-slate-800 hover:bg-slate-700 text-slate-200 border border-slate-700 font-mono">🇪🇺 Europe</button>
                  <button onclick="quickFilterGeo('HIGHRISK')" class="px-2.5 py-1 text-xs rounded bg-rose-950/40 hover:bg-rose-900/50 text-rose-300 border border-rose-800/50 font-mono">🚫 High-Risk</button>
                  <button onclick="quickFilterGeo('')" class="px-2.5 py-1 text-xs rounded bg-slate-800 hover:bg-slate-700 text-slate-400 border border-slate-700 font-mono">Reset</button>
                </div>
              </div>

              <div class="overflow-x-auto max-h-[600px] overflow-y-auto">
                <table class="w-full text-left text-xs font-mono">
                  <thead class="text-slate-400 bg-slate-950/80 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans sticky top-0 z-10 backdrop-blur-sm">
                    <tr>
                      <th class="py-2.5 px-3 w-16 text-center">Code</th>
                      <th class="py-2.5 px-3">Country Name</th>
                      <th class="py-2.5 px-3">Continent</th>
                      <th class="py-2.5 px-3">Subnets</th>
                      <th class="py-2.5 px-3">Kernel IPSet</th>
                      <th class="py-2.5 px-3">Rule Usage</th>
                      <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                    </tr>
                  </thead>
                  <tbody id="geo-table-body" class="divide-y divide-slate-800/60"></tbody>
                </table>
              </div>

              <div id="geo-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
                No countries found matching your search.
              </div>
            </div>
          </div>
        </section>

        <!-- ================= SECTION: ROUTES & POLICY (/ip route & rules) ================= -->
        <section id="section-routes" class="hidden space-y-6">
          <!-- Top Routing Switcher Bar -->
          <div class="flex items-center gap-1.5 p-1 bg-slate-900/90 border border-slate-800 rounded-xl w-fit">
            <button onclick="navigate('routes')" class="px-3.5 py-1.5 text-xs font-bold rounded-lg transition bg-cyan-600/20 text-cyan-300 border border-cyan-500/40 shadow-sm flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-cyan-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 20l-5.447-2.724A1 1 0 013 16.382V5.618a1 1 0 011.447-.894L9 7m0 13l6-3m-6 3V7m6 10l4.553 2.276A1 1 0 0021 18.382V7.618a1 1 0 00-.553-.894L15 4m0 13V4m0 0L9 7" />
              </svg>
              <span>Routes & Policy (/ip route)</span>
            </button>
            <button onclick="navigate('bgp')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-purple-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 7h8m0 0v8m0-8l-8 8-4-4-6 6" />
              </svg>
              <span>BGP (/routing bgp)</span>
            </button>
            <button onclick="navigate('ospf')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-indigo-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z" />
              </svg>
              <span>OSPF (/routing ospf)</span>
            </button>
            <button onclick="navigate('routing-filters')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-emerald-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 4a1 1 0 011-1h16a1 1 0 011 1v2.586a1 1 0 01-.293.707l-6.414 6.414a1 1 0 00-.293.707V17l-4 4v-6.586a1 1 0 00-.293-.707L3.293 7.293A1 1 0 013 6.586V4z" />
              </svg>
              <span>Filters (/routing filter)</span>
            </button>
          </div>

          <div class="bg-gradient-to-r from-cyan-950/40 via-slate-900 to-slate-900 border border-cyan-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-cyan-500/20 text-cyan-300 border border-cyan-500/30 font-semibold">/ip route</span>
                <h2 class="text-base font-bold text-white">IP Routes & Policy Rules</h2>
              </div>
              <p class="text-xs text-slate-400">Kernel FIB/RIB routing tables, static gateways, multipath uplinks, and policy routing (ip rule / fwmark lookup).</p>
            </div>

            <div class="flex items-center space-x-2.5">
              <button onclick="openAddRouteModal()" class="text-xs font-semibold px-4 py-2 rounded-lg bg-cyan-600 hover:bg-cyan-500 text-white shadow-lg shadow-cyan-500/20 transition">
                + Add Route
              </button>
              <button onclick="openAddPolicyRuleModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-white border border-slate-700 transition">
                + Add Rule
              </button>
              <button onclick="openAddTableModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-slate-300 border border-slate-700 transition">
                + New Table
              </button>
            </div>
          </div>

          <!-- Sub Tabs: Routes / Policy Rules / Tables -->
          <div class="flex border-b border-slate-800 space-x-1">
            <button id="routes-subtab-btn-routes" onclick="switchRoutesSubTab('routes')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-cyan-500 text-white transition flex items-center gap-2">
              <span>Routes</span>
              <span id="routes-badge-routes" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="routes-subtab-btn-rules" onclick="switchRoutesSubTab('rules')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2">
              <span>Policy Rules (/ip route rule)</span>
              <span id="routes-badge-rules" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="routes-subtab-btn-tables" onclick="switchRoutesSubTab('tables')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2">
              <span>Routing Tables</span>
              <span id="routes-badge-tables" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
          </div>

          <!-- Sub-Tab 1: Routes Table -->
          <div id="routes-subtab-routes" class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Active Routing Table (RIB)</h3>
                <span id="routes-count-badge" class="text-xs font-mono text-slate-400">0 Routes</span>
              </div>
              <div class="flex items-center gap-2">
                <label class="text-xs text-slate-400 font-sans">Table Filter:</label>
                <select id="routes-filter-table" onchange="renderRoutesList()" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-xs text-white font-mono">
                  <option value="">All Tables</option>
                  <option value="main">main</option>
                </select>
                <button onclick="loadRoutes()" class="text-xs text-cyan-400 hover:text-cyan-300 font-semibold px-2 py-1 bg-slate-800 rounded border border-slate-700">Refresh</button>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-16 text-center" title="Flags: D=Dynamic, A=Active, C=Connect, S=Static, X=Disabled">Flags</th>
                    <th class="py-2.5 px-3">Dst. Address</th>
                    <th class="py-2.5 px-3">Gateway</th>
                    <th class="py-2.5 px-3">Distance</th>
                    <th class="py-2.5 px-3">Table / Mark</th>
                    <th class="py-2.5 px-3">Interface</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="routes-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="routes-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No routes found.
            </div>
          </div>

          <!-- Sub-Tab 2: Policy Rules (/ip route rule) -->
          <div id="routes-subtab-rules" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Policy Routing Rules (ip rule)</h3>
              <span id="rules-count-badge" class="text-xs font-mono text-slate-400">0 Rules</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-16">Pref</th>
                    <th class="py-2.5 px-3">Src. Address</th>
                    <th class="py-2.5 px-3">Dst. Address</th>
                    <th class="py-2.5 px-3">Routing Mark (fwmark)</th>
                    <th class="py-2.5 px-3">Lookup Table</th>
                    <th class="py-2.5 px-3">Action</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="rules-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>

            <div id="rules-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No policy rules configured. Click "+ Add Rule" to route traffic based on routing-mark or source IP.
            </div>
          </div>

          <!-- Sub-Tab 3: Routing Tables -->
          <div id="routes-subtab-tables" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Defined Routing Tables (/etc/iproute2/rt_tables)</h3>
              <span id="tables-count-badge" class="text-xs font-mono text-slate-400">0 Tables</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-20">FIB ID</th>
                    <th class="py-2.5 px-3">Table Name</th>
                    <th class="py-2.5 px-3">Comment / Purpose</th>
                  </tr>
                </thead>
                <tbody id="tables-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
          </div>
        </section>

        <!-- ================= SECTION: BGP ROUTING (/routing bgp) ================= -->
        <section id="section-bgp" class="hidden space-y-6">
          <!-- Top Routing Switcher Bar -->
          <div class="flex items-center gap-1.5 p-1 bg-slate-900/90 border border-slate-800 rounded-xl w-fit">
            <button onclick="navigate('routes')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-cyan-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 20l-5.447-2.724A1 1 0 013 16.382V5.618a1 1 0 011.447-.894L9 7m0 13l6-3m-6 3V7m6 10l4.553 2.276A1 1 0 0021 18.382V7.618a1 1 0 00-.553-.894L15 4m0 13V4m0 0L9 7" />
              </svg>
              <span>Routes & Policy (/ip route)</span>
            </button>
            <button onclick="navigate('bgp')" class="px-3.5 py-1.5 text-xs font-bold rounded-lg transition bg-purple-600/20 text-purple-300 border border-purple-500/40 shadow-sm flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-purple-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 7h8m0 0v8m0-8l-8 8-4-4-6 6" />
              </svg>
              <span>BGP (/routing bgp)</span>
            </button>
            <button onclick="navigate('ospf')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-indigo-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z" />
              </svg>
              <span>OSPF (/routing ospf)</span>
            </button>
            <button onclick="navigate('routing-filters')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-emerald-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 4a1 1 0 011-1h16a1 1 0 011 1v2.586a1 1 0 01-.293.707l-6.414 6.414a1 1 0 00-.293.707V17l-4 4v-6.586a1 1 0 00-.293-.707L3.293 7.293A1 1 0 013 6.586V4z" />
              </svg>
              <span>Filters (/routing filter)</span>
            </button>
          </div>

          <div class="bg-gradient-to-r from-purple-950/40 via-slate-900 to-slate-900 border border-purple-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-purple-500/20 text-purple-300 border border-purple-500/30 font-semibold">/routing bgp</span>
                <h2 class="text-base font-bold text-white">BGP Dynamic Routing</h2>
                <span id="bgp-live-status-pill" class="text-[10px] px-2 py-0.5 rounded font-mono bg-slate-800 text-slate-400 border border-slate-700">Checking...</span>
              </div>
              <p class="text-xs text-slate-400">Enterprise FRRouting BGP stack: Autonomous System peering sessions, prefix announcements, and BGP routing table (RIB).</p>
            </div>

            <div class="flex items-center space-x-2 flex-wrap gap-y-2">
              <button onclick="openBgpInstanceModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-purple-300 border border-purple-900/50 transition flex items-center gap-1.5">
                <span>⚙ BGP Settings</span>
              </button>
              <button onclick="openAddBgpPeerModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-purple-600 hover:bg-purple-500 text-white shadow-lg shadow-purple-500/20 transition">
                + Add BGP Peer
              </button>
              <button onclick="openAddBgpNetworkModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-slate-300 border border-slate-700 transition">
                + Add Network
              </button>
              <button onclick="loadDynamicRouting()" class="text-xs text-slate-400 hover:text-white px-2.5 py-2 bg-slate-800 rounded-lg border border-slate-700 transition">
                Refresh
              </button>
            </div>
          </div>

          <!-- BGP Sub-Tabs -->
          <div class="flex border-b border-slate-800 space-x-1 overflow-x-auto">
            <button id="bgp-subtab-btn-bgp-peers" onclick="switchBgpSubTab('bgp-peers')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-purple-500 text-white transition flex items-center gap-2 whitespace-nowrap">
              <span>BGP Peers (/routing bgp connection)</span>
              <span id="dyn-badge-bgp-peers" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="bgp-subtab-btn-bgp-nets" onclick="switchBgpSubTab('bgp-nets')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Advertised Networks (/routing bgp network)</span>
              <span id="dyn-badge-bgp-nets" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="bgp-subtab-btn-bgp-routes" onclick="switchBgpSubTab('bgp-routes')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>BGP Routes (RIB)</span>
              <span id="dyn-badge-bgp-routes" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
          </div>

          <!-- Sub-Tab 1: BGP Peers -->
          <div id="dyn-subtab-bgp-peers" class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Configured BGP Peers</h3>
                <span id="bgp-peers-count-badge" class="text-xs font-mono text-slate-400">0 Peers</span>
                <span id="bgp-live-status-pill" class="text-[10px] px-2 py-0.5 rounded font-mono bg-slate-800 text-slate-400 border border-slate-700">Checking...</span>
              </div>
              <div class="flex items-center gap-2">
                <button onclick="loadDynamicRouting()" class="text-xs text-purple-400 hover:text-purple-300 font-semibold px-2.5 py-1 bg-slate-800 rounded border border-slate-700">Refresh</button>
              </div>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-16 text-center">Flags</th>
                    <th class="py-2.5 px-3">Name</th>
                    <th class="py-2.5 px-3">Remote Address</th>
                    <th class="py-2.5 px-3">Remote AS</th>
                    <th class="py-2.5 px-3">State</th>
                    <th class="py-2.5 px-3">Uptime</th>
                    <th class="py-2.5 px-3">Prefixes (RX/TX)</th>
                    <th class="py-2.5 px-3">Routing Filters</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="bgp-peers-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="bgp-peers-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No BGP peers configured. Click "+ Add BGP Peer" to establish an eBGP or iBGP peering session.
            </div>
          </div>

          <!-- Sub-Tab 2: BGP Networks -->
          <div id="dyn-subtab-bgp-nets" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">Advertised BGP Networks (/routing bgp network)</h3>
                <span id="bgp-nets-count-badge" class="text-xs font-mono text-slate-400">0 Networks</span>
              </div>
              <button onclick="openAddBgpNetworkModal()" class="text-xs font-semibold px-3 py-1.5 rounded-lg bg-purple-600 hover:bg-purple-500 text-white transition">
                + Add Network
              </button>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3">Network (CIDR)</th>
                    <th class="py-2.5 px-3">Status</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="bgp-nets-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="bgp-nets-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No networks advertised. Click "+ Add Network" to announce your IP prefixes to BGP peers.
            </div>
          </div>

          <!-- Sub-Tab 3: BGP Routes -->
          <div id="dyn-subtab-bgp-routes" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">BGP Routing Information Base (show ip bgp)</h3>
              <span id="bgp-routes-count-badge" class="text-xs font-mono text-slate-400">0 Routes</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3">Prefix</th>
                    <th class="py-2.5 px-3">Next Hop</th>
                    <th class="py-2.5 px-3">Metric</th>
                    <th class="py-2.5 px-3">Weight</th>
                    <th class="py-2.5 px-3">AS Path</th>
                    <th class="py-2.5 px-3">Origin</th>
                  </tr>
                </thead>
                <tbody id="bgp-routes-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="bgp-routes-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No active routes in BGP table. Check peer connections and ensure BGP is enabled.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: OSPF ROUTING (/routing ospf) ================= -->
        <section id="section-ospf" class="hidden space-y-6">
          <!-- Top Routing Switcher Bar -->
          <div class="flex items-center gap-1.5 p-1 bg-slate-900/90 border border-slate-800 rounded-xl w-fit">
            <button onclick="navigate('routes')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-cyan-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 20l-5.447-2.724A1 1 0 013 16.382V5.618a1 1 0 011.447-.894L9 7m0 13l6-3m-6 3V7m6 10l4.553 2.276A1 1 0 0021 18.382V7.618a1 1 0 00-.553-.894L15 4m0 13V4m0 0L9 7" />
              </svg>
              <span>Routes & Policy (/ip route)</span>
            </button>
            <button onclick="navigate('bgp')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-purple-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 7h8m0 0v8m0-8l-8 8-4-4-6 6" />
              </svg>
              <span>BGP (/routing bgp)</span>
            </button>
            <button onclick="navigate('ospf')" class="px-3.5 py-1.5 text-xs font-bold rounded-lg transition bg-indigo-600/20 text-indigo-300 border border-indigo-500/40 shadow-sm flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-indigo-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z" />
              </svg>
              <span>OSPF (/routing ospf)</span>
            </button>
            <button onclick="navigate('routing-filters')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-emerald-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 4a1 1 0 011-1h16a1 1 0 011 1v2.586a1 1 0 01-.293.707l-6.414 6.414a1 1 0 00-.293.707V17l-4 4v-6.586a1 1 0 00-.293-.707L3.293 7.293A1 1 0 013 6.586V4z" />
              </svg>
              <span>Filters (/routing filter)</span>
            </button>
          </div>

          <div class="bg-gradient-to-r from-indigo-950/40 via-slate-900 to-slate-900 border border-indigo-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-indigo-500/20 text-indigo-300 border border-indigo-500/30 font-semibold">/routing ospf</span>
                <h2 class="text-base font-bold text-white">OSPF Dynamic Routing</h2>
                <span id="ospf-live-status-pill" class="text-[10px] px-2 py-0.5 rounded font-mono bg-slate-800 text-slate-400 border border-slate-700">Checking...</span>
              </div>
              <p class="text-xs text-slate-400">Enterprise FRRouting OSPFv2 stack: Link-state interior gateway routing, multi-area topologies, and neighbor adjacencies.</p>
            </div>

            <div class="flex items-center space-x-2 flex-wrap gap-y-2">
              <button onclick="openOspfInstanceModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-indigo-300 border border-indigo-900/50 transition flex items-center gap-1.5">
                <span>⚙ OSPF Settings</span>
              </button>
              <button onclick="openAddOspfInterfaceModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-indigo-600 hover:bg-indigo-500 text-white shadow-lg shadow-indigo-500/20 transition">
                + Add OSPF Interface
              </button>
              <button onclick="openAddOspfAreaModal()" class="text-xs font-semibold px-3 py-2 rounded-lg bg-slate-800 hover:bg-slate-700 text-slate-300 border border-slate-700 transition">
                + Add Area
              </button>
              <button onclick="loadDynamicRouting()" class="text-xs text-slate-400 hover:text-white px-2.5 py-2 bg-slate-800 rounded-lg border border-slate-700 transition">
                Refresh
              </button>
            </div>
          </div>

          <!-- OSPF Sub-Tabs -->
          <div class="flex border-b border-slate-800 space-x-1 overflow-x-auto">
            <button id="ospf-subtab-btn-ospf-ifaces" onclick="switchOspfSubTab('ospf-ifaces')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-indigo-500 text-white transition flex items-center gap-2 whitespace-nowrap">
              <span>OSPF Interfaces</span>
              <span id="dyn-badge-ospf-ifaces" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="ospf-subtab-btn-ospf-areas" onclick="switchOspfSubTab('ospf-areas')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>OSPF Areas</span>
              <span id="dyn-badge-ospf-areas" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="ospf-subtab-btn-ospf-nbrs" onclick="switchOspfSubTab('ospf-nbrs')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>OSPF Neighbors</span>
              <span id="dyn-badge-ospf-nbrs" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
            <button id="ospf-subtab-btn-ospf-routes" onclick="switchOspfSubTab('ospf-routes')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>OSPF Routes</span>
              <span id="dyn-badge-ospf-routes" class="px-1.5 py-0.2 rounded text-[10px] bg-slate-800 text-slate-300">0</span>
            </button>
          </div>

          <!-- Sub-Tab 4: OSPF Interfaces -->
          <div id="dyn-subtab-ospf-ifaces" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between flex-wrap gap-3">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">OSPF Interface Templates (/routing ospf interface-template)</h3>
                <span id="ospf-ifaces-count-badge" class="text-xs font-mono text-slate-400">0 Interfaces</span>
                <span id="ospf-live-status-pill" class="text-[10px] px-2 py-0.5 rounded font-mono bg-slate-800 text-slate-400 border border-slate-700">Checking...</span>
              </div>
              <button onclick="openAddOspfInterfaceModal()" class="text-xs font-semibold px-3 py-1.5 rounded-lg bg-indigo-600 hover:bg-indigo-500 text-white transition">
                + Add Interface
              </button>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 w-16 text-center">Flags</th>
                    <th class="py-2.5 px-3">Network (CIDR)</th>
                    <th class="py-2.5 px-3">Area</th>
                    <th class="py-2.5 px-3">Interface</th>
                    <th class="py-2.5 px-3">Cost</th>
                    <th class="py-2.5 px-3">Priority</th>
                    <th class="py-2.5 px-3">Timers (H/D)</th>
                    <th class="py-2.5 px-3">Auth</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="ospf-ifaces-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="ospf-ifaces-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No OSPF interfaces configured. Click "+ Add OSPF Interface" to enable OSPF on local subnets.
            </div>
          </div>

          <!-- Sub-Tab 5: OSPF Areas -->
          <div id="dyn-subtab-ospf-areas" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <div class="flex items-center gap-3">
                <h3 class="text-sm font-bold text-white">OSPF Areas (/routing ospf area)</h3>
                <span id="ospf-areas-count-badge" class="text-xs font-mono text-slate-400">0 Areas</span>
              </div>
              <button onclick="openAddOspfAreaModal()" class="text-xs font-semibold px-3 py-1.5 rounded-lg bg-indigo-600 hover:bg-indigo-500 text-white transition">
                + Add Area
              </button>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3">Name</th>
                    <th class="py-2.5 px-3">Area ID</th>
                    <th class="py-2.5 px-3">Type</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="ospf-areas-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
          </div>

          <!-- Sub-Tab 6: OSPF Neighbors -->
          <div id="dyn-subtab-ospf-nbrs" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">Live OSPF Neighbors (show ip ospf neighbor)</h3>
              <span id="ospf-nbrs-count-badge" class="text-xs font-mono text-slate-400">0 Neighbors</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3">Neighbor ID</th>
                    <th class="py-2.5 px-3">IP Address</th>
                    <th class="py-2.5 px-3">Interface</th>
                    <th class="py-2.5 px-3">Area</th>
                    <th class="py-2.5 px-3">State</th>
                    <th class="py-2.5 px-3">Dead Timer</th>
                  </tr>
                </thead>
                <tbody id="ospf-nbrs-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="ospf-nbrs-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No active OSPF neighbors discovered. Ensure neighbors are in the same subnet and hello/dead timers match.
            </div>
          </div>

          <!-- Sub-Tab 7: OSPF Routes -->
          <div id="dyn-subtab-ospf-routes" class="hidden bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <h3 class="text-sm font-bold text-white">OSPF Routing Table (show ip ospf route)</h3>
              <span id="ospf-routes-count-badge" class="text-xs font-mono text-slate-400">0 Routes</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3">Prefix</th>
                    <th class="py-2.5 px-3">Type</th>
                    <th class="py-2.5 px-3">Cost</th>
                    <th class="py-2.5 px-3">Area</th>
                    <th class="py-2.5 px-3">Next Hop / Dev</th>
                  </tr>
                </thead>
                <tbody id="ospf-routes-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="ospf-routes-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No OSPF routes calculated.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: ROUTING FILTERS (/routing filter) ================= -->
        <section id="section-routing-filters" class="hidden space-y-6">
          <!-- Top Routing Switcher Bar -->
          <div class="flex items-center gap-1.5 p-1 bg-slate-900/90 border border-slate-800 rounded-xl w-fit">
            <button onclick="navigate('routes')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-cyan-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 20l-5.447-2.724A1 1 0 013 16.382V5.618a1 1 0 011.447-.894L9 7m0 13l6-3m-6 3V7m6 10l4.553 2.276A1 1 0 0021 18.382V7.618a1 1 0 00-.553-.894L15 4m0 13V4m0 0L9 7" />
              </svg>
              <span>Routes & Policy (/ip route)</span>
            </button>
            <button onclick="navigate('bgp')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-purple-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 7h8m0 0v8m0-8l-8 8-4-4-6 6" />
              </svg>
              <span>BGP (/routing bgp)</span>
            </button>
            <button onclick="navigate('ospf')" class="px-3.5 py-1.5 text-xs font-medium rounded-lg text-slate-400 hover:text-white hover:bg-slate-800/60 transition flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-indigo-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z" />
              </svg>
              <span>OSPF (/routing ospf)</span>
            </button>
            <button onclick="navigate('routing-filters')" class="px-3.5 py-1.5 text-xs font-bold rounded-lg transition bg-emerald-600/20 text-emerald-300 border border-emerald-500/40 shadow-sm flex items-center gap-2">
              <svg class="w-3.5 h-3.5 text-emerald-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 4a1 1 0 011-1h16a1 1 0 011 1v2.586a1 1 0 01-.293.707l-6.414 6.414a1 1 0 00-.293.707V17l-4 4v-6.586a1 1 0 00-.293-.707L3.293 7.293A1 1 0 013 6.586V4z" />
              </svg>
              <span>Filters (/routing filter)</span>
            </button>
          </div>

          <!-- Top Banner -->
          <div class="bg-gradient-to-r from-emerald-950/40 via-slate-900 to-slate-900 border border-emerald-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-emerald-500/20 text-emerald-300 border border-emerald-500/30 font-semibold">/routing filter</span>
                <h2 class="text-base font-bold text-white">Routing Filters & Policy Maps</h2>
              </div>
              <p class="text-xs text-slate-400">Policy routing filter chains (in-filter / out-filter), prefix-list evaluation, BGP community matching, and route metric manipulation.</p>
            </div>

            <div class="flex items-center gap-2.5">
              <div class="flex items-center gap-2">
                <label class="text-[11px] text-slate-400 font-medium">Chain:</label>
                <select id="routing-filter-chain-select" onchange="filterRoutingFiltersByChain(this.value)" class="bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1.5 text-xs text-white font-mono">
                  <option value="all">All Chains</option>
                </select>
              </div>
              <button onclick="openAddRoutingFilterModal()" class="px-3.5 py-1.5 rounded-lg text-xs font-semibold bg-emerald-600 hover:bg-emerald-500 text-white shadow-lg shadow-emerald-500/20 transition flex items-center gap-1.5">
                <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 4v16m8-8H4" />
                </svg>
                <span>+ Add Filter Rule</span>
              </button>
              <button onclick="loadDynamicRouting(true)" class="px-3 py-1.5 rounded-lg text-xs font-medium bg-slate-800 hover:bg-slate-700 text-slate-300 border border-slate-700 transition" title="Refresh routing telemetry">
                ↻
              </button>
            </div>
          </div>

          <!-- Filter Rules Table -->
          <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
            <div class="p-4 border-b border-slate-800 flex items-center justify-between">
              <div class="flex items-center gap-2">
                <h3 class="text-sm font-bold text-white">Filter Rules</h3>
                <span id="routing-filters-count-badge" class="px-2 py-0.5 rounded text-[10px] font-mono bg-emerald-500/10 text-emerald-400 border border-emerald-500/20 font-semibold">0 Rules</span>
              </div>
              <span class="text-xs text-slate-500 font-sans">Evaluated sequentially by order</span>
            </div>

            <div class="overflow-x-auto">
              <table class="w-full text-left text-xs font-mono">
                <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                  <tr>
                    <th class="py-2.5 px-3 text-center w-12">Flags</th>
                    <th class="py-2.5 px-3 w-16">#</th>
                    <th class="py-2.5 px-3">Chain</th>
                    <th class="py-2.5 px-3">Action</th>
                    <th class="py-2.5 px-3">Match Prefix / Length</th>
                    <th class="py-2.5 px-3">Match AS-Path / Community</th>
                    <th class="py-2.5 px-3">Set Modifications</th>
                    <th class="py-2.5 px-3">Comment</th>
                    <th class="py-2.5 px-3 text-right font-sans">Actions</th>
                  </tr>
                </thead>
                <tbody id="routing-filters-table-body" class="divide-y divide-slate-800/80"></tbody>
              </table>
            </div>
            <div id="routing-filters-empty" class="hidden p-10 text-center text-slate-500 text-xs font-sans">
              No routing filter rules configured. Click "+ Add Filter Rule" to create a filter chain.
            </div>
          </div>
        </section>

        <!-- ================= SECTION: DEBIAN CONFIG PERSISTENCE ================= -->
        <section id="section-persistence" class="hidden space-y-6">
          <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-5">
            <div class="flex flex-wrap items-center justify-between gap-4 mb-4">
              <div>
                <h3 class="text-sm font-bold text-white flex items-center gap-2">
                  <span>Debian /etc/network/interfaces.d/ Persistence</span>
                  <span class="text-[10px] bg-brand-500/20 text-brand-400 px-2 py-0.5 rounded border border-brand-500/30">Debian Native</span>
                </h3>
                <p class="text-xs text-slate-400 mt-1">Changes saved to <code class="text-brand-400">/etc/network/interfaces.d/vlans.cfg</code> survive container reboots.</p>
              </div>
              <div class="flex items-center space-x-3">
                <button onclick="loadDebianConfig()" class="text-xs bg-slate-800 hover:bg-slate-700 text-slate-300 px-3 py-2 rounded-lg border border-slate-700 transition">Re-generate Preview</button>
                <button onclick="saveDebianConfig()" class="flex items-center space-x-2 bg-brand-600 hover:bg-brand-500 text-white font-medium text-xs px-4 py-2 rounded-lg shadow-lg shadow-brand-500/20 transition">
                  <span>Save to Debian Config</span>
                </button>
              </div>
            </div>
            <div class="relative">
              <pre id="debian-config-view" class="bg-slate-950 p-4 rounded-lg font-mono text-xs text-slate-300 overflow-x-auto border border-slate-800 max-h-96 leading-relaxed">Loading config preview...</pre>
            </div>
          </div>
        </section>

        <!-- ================= SECTION: TROUBLESHOOT TOOLS (/tool) ================= -->
        <section id="section-tools" class="hidden space-y-6">
          <!-- Top Banner -->
          <div class="bg-gradient-to-r from-amber-950/40 via-slate-900 to-slate-900 border border-amber-900/30 rounded-xl p-5 flex flex-wrap items-center justify-between gap-4">
            <div>
              <div class="flex items-center gap-2 mb-1">
                <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-amber-500/20 text-amber-300 border border-amber-500/30 font-semibold">/tool</span>
                <h2 class="text-base font-bold text-white">Troubleshoot & Diagnostic Tools</h2>
              </div>
              <p class="text-xs text-slate-400">Comprehensive network diagnostic suite: ICMP echo latency, path route tracing, continuous MTR telemetry, DNS resolution, and TCP port probing.</p>
            </div>
          </div>

          <!-- Tools Subtabs Navigation -->
          <div class="flex items-center gap-1 border-b border-slate-800 pb-0 overflow-x-auto">
            <button id="tools-subtab-btn-ping" onclick="switchToolsSubTab('ping')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-amber-400 text-amber-300 transition flex items-center gap-2 whitespace-nowrap">
              <span>Ping (/tool ping)</span>
            </button>
            <button id="tools-subtab-btn-traceroute" onclick="switchToolsSubTab('traceroute')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Traceroute (/tool traceroute)</span>
            </button>
            <button id="tools-subtab-btn-mtr" onclick="switchToolsSubTab('mtr')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>MTR Telemetry</span>
            </button>
            <button id="tools-subtab-btn-dns" onclick="switchToolsSubTab('dns')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>DNS Lookup (/tool resolve)</span>
            </button>
            <button id="tools-subtab-btn-port" onclick="switchToolsSubTab('port')" class="px-4 py-2.5 text-xs font-bold border-b-2 border-transparent text-slate-400 hover:text-slate-200 transition flex items-center gap-2 whitespace-nowrap">
              <span>Port Probe (TCP Check)</span>
            </button>
          </div>

          <!-- ================= SUBTAB: PING ================= -->
          <div id="tools-view-ping" class="space-y-5">
            <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-5">
              <form id="tools-ping-form" onsubmit="executePing(event)" class="space-y-4">
                <div class="grid grid-cols-1 md:grid-cols-4 gap-4">
                  <div class="md:col-span-2">
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Target Host or IP *</label>
                    <input type="text" id="tools-ping-target" required placeholder="e.g. 8.8.8.8, 1.1.1.1, google.com" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Count</label>
                    <select id="tools-ping-count" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                      <option value="0">Continuous (Until Stopped)</option>
                      <option value="4" selected>4 packets</option>
                      <option value="5">5 packets</option>
                      <option value="10">10 packets</option>
                      <option value="20">20 packets</option>
                      <option value="50">50 packets</option>
                      <option value="100">100 packets</option>
                    </select>
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Source Interface</label>
                    <select id="tools-ping-iface" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                      <option value="">Auto (Default Route)</option>
                    </select>
                  </div>
                </div>

                <div class="flex flex-wrap items-center justify-between gap-4 pt-2">
                  <div class="flex items-center space-x-6 text-xs">
                    <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
                      <input type="checkbox" id="tools-ping-df" class="rounded text-amber-500 bg-slate-800 border-slate-700">
                      <span>Don't Fragment (DF bit)</span>
                    </label>
                    <div class="flex items-center space-x-2">
                      <span class="text-slate-400">Size (bytes):</span>
                      <input type="number" id="tools-ping-size" value="56" min="1" max="65500" class="w-20 bg-slate-800 border border-slate-700 rounded px-2 py-1 text-xs text-white font-mono">
                    </div>
                  </div>

                  <button type="submit" id="tools-ping-btn" class="px-5 py-2 rounded-lg font-semibold text-xs bg-amber-500 hover:bg-amber-400 text-slate-950 shadow-lg shadow-amber-500/20 transition flex items-center gap-2">
                    <span id="tools-ping-spinner" class="hidden animate-spin">↻</span>
                    <span id="tools-ping-btn-text">Start Ping</span>
                  </button>
                </div>
              </form>
            </div>

            <!-- Ping Results Container -->
            <div id="tools-ping-results" class="hidden space-y-4">
              <!-- KPI Summary Cards -->
              <div class="grid grid-cols-2 md:grid-cols-5 gap-3">
                <div class="bg-slate-900 border border-slate-800 rounded-xl p-3 text-center">
                  <div class="text-[10px] text-slate-400 uppercase">Packets Sent</div>
                  <div id="tools-ping-stat-sent" class="text-base font-bold text-white font-mono mt-1">0</div>
                </div>
                <div class="bg-slate-900 border border-slate-800 rounded-xl p-3 text-center">
                  <div class="text-[10px] text-slate-400 uppercase">Received</div>
                  <div id="tools-ping-stat-recv" class="text-base font-bold text-emerald-400 font-mono mt-1">0</div>
                </div>
                <div class="bg-slate-900 border border-slate-800 rounded-xl p-3 text-center">
                  <div class="text-[10px] text-slate-400 uppercase">Packet Loss</div>
                  <div id="tools-ping-stat-loss" class="text-base font-bold font-mono mt-1">0%</div>
                </div>
                <div class="bg-slate-900 border border-slate-800 rounded-xl p-3 text-center">
                  <div class="text-[10px] text-slate-400 uppercase">Avg RTT</div>
                  <div id="tools-ping-stat-avg" class="text-base font-bold text-cyan-400 font-mono mt-1">0 ms</div>
                </div>
                <div class="bg-slate-900 border border-slate-800 rounded-xl p-3 text-center">
                  <div class="text-[10px] text-slate-400 uppercase">Min / Max</div>
                  <div id="tools-ping-stat-minmax" class="text-xs font-bold text-purple-300 font-mono mt-1.5">-</div>
                </div>
              </div>

              <!-- Replies Table -->
              <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
                <div class="p-3 border-b border-slate-800 flex items-center justify-between">
                  <div class="flex items-center gap-2.5">
                    <span class="text-xs font-bold text-white">ICMP Echo Replies</span>
                    <span id="tools-ping-status-badge" class="px-2 py-0.5 rounded text-[10px] font-mono font-semibold"></span>
                  </div>
                  <button type="button" onclick="clearPingTable()" class="text-[11px] text-slate-400 hover:text-white px-2 py-0.5 rounded bg-slate-800/60 hover:bg-slate-800 border border-slate-700/60 transition">Clear</button>
                </div>
                <div class="overflow-x-auto">
                  <table class="w-full text-left text-xs font-mono">
                    <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                      <tr>
                        <th class="py-2 px-3"># Seq</th>
                        <th class="py-2 px-3">Responder</th>
                        <th class="py-2 px-3">Bytes</th>
                        <th class="py-2 px-3">TTL</th>
                        <th class="py-2 px-3">Latency (RTT)</th>
                        <th class="py-2 px-3 text-right">Status</th>
                      </tr>
                    </thead>
                    <tbody id="tools-ping-tbody" class="divide-y divide-slate-800/80"></tbody>
                  </table>
                </div>
              </div>

              <!-- Raw CLI Drawer -->
              <details class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3 text-xs">
                <summary class="cursor-pointer text-slate-400 font-medium hover:text-white">Raw CLI Console Output</summary>
                <pre id="tools-ping-raw" class="mt-2 bg-slate-950 p-3 rounded font-mono text-[11px] text-slate-300 overflow-x-auto border border-slate-800 leading-relaxed"></pre>
              </details>
            </div>
          </div>

          <!-- ================= SUBTAB: TRACEROUTE ================= -->
          <div id="tools-view-traceroute" class="hidden space-y-5">
            <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-5">
              <form id="tools-traceroute-form" onsubmit="executeTraceroute(event)" class="space-y-4">
                <div class="grid grid-cols-1 md:grid-cols-5 gap-4">
                  <div class="md:col-span-2">
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Target Host or IP *</label>
                    <input type="text" id="tools-tr-target" required placeholder="e.g. 1.1.1.1 or google.com" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Max Hops</label>
                    <input type="number" id="tools-tr-maxhops" value="15" min="1" max="30" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Protocol</label>
                    <select id="tools-tr-proto" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                      <option value="icmp" selected>ICMP Echo (-I)</option>
                      <option value="udp">UDP Probe</option>
                    </select>
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Source Interface</label>
                    <select id="tools-tr-iface" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                      <option value="">Auto (Default Route)</option>
                    </select>
                  </div>
                </div>

                <div class="flex items-center justify-between pt-2">
                  <label class="flex items-center space-x-2 text-xs text-slate-300 cursor-pointer">
                    <input type="checkbox" id="tools-tr-resolve" class="rounded text-amber-500 bg-slate-800 border-slate-700">
                    <span>Resolve Hostnames (Reverse DNS)</span>
                  </label>

                  <button type="submit" id="tools-tr-btn" class="px-5 py-2 rounded-lg font-semibold text-xs bg-amber-500 hover:bg-amber-400 text-slate-950 shadow-lg shadow-amber-500/20 transition flex items-center gap-2">
                    <span id="tools-tr-spinner" class="hidden animate-spin">↻</span>
                    <span id="tools-tr-btn-text">Start Traceroute</span>
                  </button>
                </div>
              </form>
            </div>

            <div id="tools-tr-results" class="hidden space-y-4">
              <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
                <div class="p-3 border-b border-slate-800 flex items-center justify-between">
                  <div class="flex items-center gap-2.5">
                    <span class="text-xs font-bold text-white">Route Hops</span>
                    <span id="tools-tr-hops-count" class="text-xs font-mono text-slate-400">0 Hops</span>
                  </div>
                  <button type="button" onclick="clearTracerouteTable()" class="text-[11px] text-slate-400 hover:text-white px-2 py-0.5 rounded bg-slate-800/60 hover:bg-slate-800 border border-slate-700/60 transition">Clear</button>
                </div>
                <div class="overflow-x-auto">
                  <table class="w-full text-left text-xs font-mono">
                    <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                      <tr>
                        <th class="py-2.5 px-3 w-16">Hop #</th>
                        <th class="py-2.5 px-3">Gateway Host / IP</th>
                        <th class="py-2.5 px-3">RTT 1</th>
                        <th class="py-2.5 px-3">RTT 2</th>
                        <th class="py-2.5 px-3 text-right">Status</th>
                      </tr>
                    </thead>
                    <tbody id="tools-tr-tbody" class="divide-y divide-slate-800/80"></tbody>
                  </table>
                </div>
              </div>

              <details class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3 text-xs">
                <summary class="cursor-pointer text-slate-400 font-medium hover:text-white">Raw CLI Console Output</summary>
                <pre id="tools-tr-raw" class="mt-2 bg-slate-950 p-3 rounded font-mono text-[11px] text-slate-300 overflow-x-auto border border-slate-800 leading-relaxed"></pre>
              </details>
            </div>
          </div>

          <!-- ================= SUBTAB: MTR ================= -->
          <div id="tools-view-mtr" class="hidden space-y-5">
            <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-5">
              <form id="tools-mtr-form" onsubmit="executeMTR(event)" class="space-y-4">
                <div class="grid grid-cols-1 md:grid-cols-3 gap-4">
                  <div class="md:col-span-2">
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Target Host or IP *</label>
                    <input type="text" id="tools-mtr-target" required placeholder="e.g. 1.1.1.1 or 8.8.8.8" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Cycle Count</label>
                    <select id="tools-mtr-count" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                      <option value="2">2 cycles (Fast)</option>
                      <option value="3" selected>3 cycles</option>
                      <option value="5">5 cycles</option>
                      <option value="10">10 cycles (Deep)</option>
                    </select>
                  </div>
                </div>

                <div class="flex justify-end pt-2">
                  <button type="submit" id="tools-mtr-btn" class="px-5 py-2 rounded-lg font-semibold text-xs bg-amber-500 hover:bg-amber-400 text-slate-950 shadow-lg shadow-amber-500/20 transition flex items-center gap-2">
                    <span id="tools-mtr-spinner" class="hidden">↻</span>
                    <span>Start MTR Report</span>
                  </button>
                </div>
              </form>
            </div>

            <div id="tools-mtr-results" class="hidden space-y-4">
              <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
                <div class="p-3 border-b border-slate-800 flex items-center justify-between">
                  <span class="text-xs font-bold text-white">MTR Route Telemetry</span>
                  <span id="tools-mtr-hops-count" class="text-xs font-mono text-slate-400">0 Hops</span>
                </div>
                <div class="overflow-x-auto">
                  <table class="w-full text-left text-xs font-mono">
                    <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                      <tr>
                        <th class="py-2.5 px-3 w-16">Hop #</th>
                        <th class="py-2.5 px-3">Host / Router</th>
                        <th class="py-2.5 px-3">Loss %</th>
                        <th class="py-2.5 px-3">Sent</th>
                        <th class="py-2.5 px-3">Last (ms)</th>
                        <th class="py-2.5 px-3">Avg (ms)</th>
                        <th class="py-2.5 px-3">Best (ms)</th>
                        <th class="py-2.5 px-3">Worst (ms)</th>
                        <th class="py-2.5 px-3">StDev</th>
                      </tr>
                    </thead>
                    <tbody id="tools-mtr-tbody" class="divide-y divide-slate-800/80"></tbody>
                  </table>
                </div>
              </div>

              <details class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3 text-xs">
                <summary class="cursor-pointer text-slate-400 font-medium hover:text-white">Raw CLI Console Output</summary>
                <pre id="tools-mtr-raw" class="mt-2 bg-slate-950 p-3 rounded font-mono text-[11px] text-slate-300 overflow-x-auto border border-slate-800 leading-relaxed"></pre>
              </details>
            </div>
          </div>

          <!-- ================= SUBTAB: DNS LOOKUP ================= -->
          <div id="tools-view-dns" class="hidden space-y-5">
            <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-5">
              <form id="tools-dns-form" onsubmit="executeDNS(event)" class="space-y-4">
                <div class="grid grid-cols-1 md:grid-cols-4 gap-4">
                  <div class="md:col-span-2">
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Domain Name *</label>
                    <input type="text" id="tools-dns-domain" required placeholder="e.g. cloudflare.com, google.com" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Record Type</label>
                    <select id="tools-dns-type" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                      <option value="A" selected>A (IPv4)</option>
                      <option value="AAAA">AAAA (IPv6)</option>
                      <option value="CNAME">CNAME</option>
                      <option value="MX">MX (Mail)</option>
                      <option value="TXT">TXT</option>
                      <option value="NS">NS (Nameserver)</option>
                      <option value="SOA">SOA</option>
                      <option value="ANY">ANY</option>
                    </select>
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Custom DNS Server (Optional)</label>
                    <input type="text" id="tools-dns-server" placeholder="e.g. 1.1.1.1, 8.8.8.8" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                </div>

                <div class="flex justify-end pt-2">
                  <button type="submit" id="tools-dns-btn" class="px-5 py-2 rounded-lg font-semibold text-xs bg-amber-500 hover:bg-amber-400 text-slate-950 shadow-lg shadow-amber-500/20 transition flex items-center gap-2">
                    <span id="tools-dns-spinner" class="hidden">↻</span>
                    <span>Resolve Domain</span>
                  </button>
                </div>
              </form>
            </div>

            <div id="tools-dns-results" class="hidden space-y-4">
              <div class="bg-slate-900/90 border border-slate-800 rounded-xl overflow-hidden">
                <div class="p-3 border-b border-slate-800 flex items-center justify-between">
                  <div class="flex items-center gap-2">
                    <span class="text-xs font-bold text-white">DNS Answer Records</span>
                    <span id="tools-dns-meta" class="text-[11px] font-mono text-cyan-300"></span>
                  </div>
                </div>
                <div class="overflow-x-auto">
                  <table class="w-full text-left text-xs font-mono">
                    <thead class="text-slate-400 bg-slate-950/60 border-b border-slate-800 uppercase tracking-wider text-[10px] font-sans">
                      <tr>
                        <th class="py-2.5 px-3">Name</th>
                        <th class="py-2.5 px-3">TTL (s)</th>
                        <th class="py-2.5 px-3">Class</th>
                        <th class="py-2.5 px-3">Type</th>
                        <th class="py-2.5 px-3">Value / Target</th>
                      </tr>
                    </thead>
                    <tbody id="tools-dns-tbody" class="divide-y divide-slate-800/80"></tbody>
                  </table>
                </div>
              </div>

              <details class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3 text-xs">
                <summary class="cursor-pointer text-slate-400 font-medium hover:text-white">Raw CLI Console Output</summary>
                <pre id="tools-dns-raw" class="mt-2 bg-slate-950 p-3 rounded font-mono text-[11px] text-slate-300 overflow-x-auto border border-slate-800 leading-relaxed"></pre>
              </details>
            </div>
          </div>

          <!-- ================= SUBTAB: PORT PROBE ================= -->
          <div id="tools-view-port" class="hidden space-y-5">
            <div class="bg-slate-900/90 border border-slate-800 rounded-xl p-5">
              <form id="tools-port-form" onsubmit="executePortProbe(event)" class="space-y-4">
                <div class="grid grid-cols-1 md:grid-cols-4 gap-4">
                  <div class="md:col-span-2">
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Target Host or IP *</label>
                    <input type="text" id="tools-port-target" required placeholder="e.g. 1.1.1.1, 192.168.131.1" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Port (TCP) *</label>
                    <input type="number" id="tools-port-num" required min="1" max="65535" value="80" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                  <div>
                    <label class="block text-xs font-semibold text-slate-300 mb-1.5">Timeout (s)</label>
                    <input type="number" id="tools-port-timeout" value="3" min="1" max="10" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
                  </div>
                </div>

                <!-- Quick Presets -->
                <div class="flex flex-wrap items-center gap-2 pt-1">
                  <span class="text-[11px] text-slate-400">Quick Ports:</span>
                  <button type="button" onclick="setPortPreset(80)" class="px-2 py-0.5 rounded bg-slate-800 hover:bg-slate-700 text-[11px] font-mono text-cyan-300 border border-slate-700">HTTP: 80</button>
                  <button type="button" onclick="setPortPreset(443)" class="px-2 py-0.5 rounded bg-slate-800 hover:bg-slate-700 text-[11px] font-mono text-emerald-300 border border-slate-700">HTTPS: 443</button>
                  <button type="button" onclick="setPortPreset(22)" class="px-2 py-0.5 rounded bg-slate-800 hover:bg-slate-700 text-[11px] font-mono text-purple-300 border border-slate-700">SSH: 22</button>
                  <button type="button" onclick="setPortPreset(53)" class="px-2 py-0.5 rounded bg-slate-800 hover:bg-slate-700 text-[11px] font-mono text-indigo-300 border border-slate-700">DNS: 53</button>
                  <button type="button" onclick="setPortPreset(179)" class="px-2 py-0.5 rounded bg-slate-800 hover:bg-slate-700 text-[11px] font-mono text-amber-300 border border-slate-700">BGP: 179</button>
                  <button type="button" onclick="setPortPreset(8291)" class="px-2 py-0.5 rounded bg-slate-800 hover:bg-slate-700 text-[11px] font-mono text-pink-300 border border-slate-700">Winbox: 8291</button>
                  <button type="button" onclick="setPortPreset(8006)" class="px-2 py-0.5 rounded bg-slate-800 hover:bg-slate-700 text-[11px] font-mono text-orange-300 border border-slate-700">PVE: 8006</button>
                </div>

                <div class="flex justify-end pt-2">
                  <button type="submit" id="tools-port-btn" class="px-5 py-2 rounded-lg font-semibold text-xs bg-amber-500 hover:bg-amber-400 text-slate-950 shadow-lg shadow-amber-500/20 transition flex items-center gap-2">
                    <span id="tools-port-spinner" class="hidden">↻</span>
                    <span>Probe Port</span>
                  </button>
                </div>
              </form>
            </div>

            <div id="tools-port-results" class="hidden space-y-4">
              <div id="tools-port-banner" class="rounded-xl p-5 border flex items-center justify-between">
                <div class="flex items-center gap-3">
                  <span id="tools-port-icon" class="w-8 h-8 rounded-full flex items-center justify-center font-bold text-sm"></span>
                  <div>
                    <h3 id="tools-port-title" class="text-sm font-bold"></h3>
                    <p id="tools-port-sub" class="text-xs mt-0.5 font-mono"></p>
                  </div>
                </div>
                <div class="text-right">
                  <div class="text-[10px] uppercase text-slate-400">Handshake Latency</div>
                  <div id="tools-port-latency" class="text-base font-bold font-mono text-white"></div>
                </div>
              </div>

              <details class="bg-slate-900/60 border border-slate-800/80 rounded-xl p-3 text-xs">
                <summary class="cursor-pointer text-slate-400 font-medium hover:text-white">Handshake Details</summary>
                <pre id="tools-port-raw" class="mt-2 bg-slate-950 p-3 rounded font-mono text-[11px] text-slate-300 overflow-x-auto border border-slate-800 leading-relaxed"></pre>
              </details>
            </div>
          </div>
        </section>

      </main>
    </div>
  </div>

  <!-- ================= MODAL: CREATE VLAN ================= -->
  <div id="vlan-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 class="text-sm font-bold text-white">Create New VLAN Interface</h3>
        <button onclick="closeVlanModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form id="vlan-form" onsubmit="submitCreateVlan(event)" class="p-6 space-y-4">
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Parent Interface *</label>
          <select id="vlan-parent" onchange="autoSuggestVlanName()" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white focus:outline-none focus:border-cyan-500 font-mono"></select>
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">VLAN ID (1-4094) *</label>
            <input type="number" id="vlan-id" min="1" max="4094" placeholder="10" required oninput="autoSuggestVlanName()" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Interface Name</label>
            <input type="text" id="vlan-name" placeholder="eth0.10" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
          </div>
        </div>
        <div>
          <div class="flex items-center justify-between mb-1.5">
            <label class="text-xs font-semibold text-slate-300">Router IP Address & CIDR</label>
            <div class="flex space-x-1">
              <button type="button" onclick="setSubnetPreset('/24')" class="text-[10px] bg-slate-800 text-slate-400 px-1.5 py-0.5 rounded">/24</button>
              <button type="button" onclick="setSubnetPreset('/23')" class="text-[10px] bg-slate-800 text-slate-400 px-1.5 py-0.5 rounded">/23</button>
              <button type="button" onclick="setSubnetPreset('/16')" class="text-[10px] bg-slate-800 text-slate-400 px-1.5 py-0.5 rounded">/16</button>
            </div>
          </div>
          <input type="text" id="vlan-ip" placeholder="192.168.10.1/24" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Role Tag</label>
            <select id="vlan-role" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white">
              <option value="LAN">LAN</option>
              <option value="GUEST">Guest Network</option>
              <option value="IOT">IoT / Smart Home</option>
              <option value="DMZ">DMZ / Isolated</option>
              <option value="MGMT">Management</option>
              <option value="WAN">WAN / Uplink</option>
            </select>
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Description / Alias</label>
            <input type="text" id="vlan-desc" placeholder="Guest WiFi Subnet" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white">
          </div>
        </div>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeVlanModal()" class="px-4 py-2 rounded-lg text-xs font-medium text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" id="vlan-submit-btn" class="px-5 py-2 rounded-lg text-xs font-semibold bg-gradient-to-r from-brand-600 to-cyan-600 text-white">Create VLAN</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: EDIT INTERFACE ================= -->
  <div id="iface-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 class="text-sm font-bold text-white flex items-center gap-2">
            <span id="modal-iface-name">eth0</span>
            <span id="modal-iface-badge" class="text-[10px] font-mono px-2 py-0.5 rounded bg-slate-800 text-slate-300">Ethernet</span>
          </h3>
        </div>
        <button onclick="closeIfaceModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <div class="p-6 space-y-5">
        <div class="grid grid-cols-2 gap-4 p-3 bg-slate-950/60 rounded-xl border border-slate-800/80">
          <div>
            <span class="block text-[11px] text-slate-400 mb-1">Administrative Link</span>
            <div class="flex items-center space-x-2">
              <button id="modal-btn-up" onclick="setIfaceState(currentModalIface, 'up')" class="px-3 py-1 rounded text-xs font-semibold bg-emerald-600/30 text-emerald-400 border border-emerald-500/40">UP</button>
              <button id="modal-btn-down" onclick="setIfaceState(currentModalIface, 'down')" class="px-3 py-1 rounded text-xs font-semibold bg-slate-800 text-slate-400 hover:bg-rose-600/30 hover:text-rose-400">DOWN</button>
            </div>
          </div>
          <div>
            <span class="block text-[11px] text-slate-400 mb-1">MTU Size</span>
            <div class="flex items-center space-x-2">
              <input type="number" id="modal-iface-mtu" min="68" max="9000" class="w-24 bg-slate-800 border border-slate-700 rounded px-2 py-1 text-xs text-white font-mono">
              <button onclick="applyMTU()" class="text-xs bg-slate-800 hover:bg-slate-700 text-white px-2.5 py-1 rounded border border-slate-700">Set</button>
            </div>
          </div>
        </div>

        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Assigned IP Addresses</label>
          <div id="modal-ip-list" class="space-y-1.5 mb-3 font-mono text-xs"></div>
          <div class="flex space-x-2">
            <input type="text" id="modal-new-ip" placeholder="192.168.100.1/24" class="flex-1 bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
            <button onclick="addInterfaceIP()" class="bg-brand-600 hover:bg-brand-500 text-white px-4 py-2 rounded-lg text-xs font-semibold">+ Add IP</button>
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Role Tag</label>
            <select id="modal-iface-role" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white">
              <option value="WAN">WAN / Uplink</option>
              <option value="LAN">LAN</option>
              <option value="DMZ">DMZ</option>
              <option value="GUEST">Guest</option>
              <option value="IOT">IoT</option>
              <option value="MGMT">Management</option>
            </select>
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Description</label>
            <input type="text" id="modal-iface-desc" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white">
          </div>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-between items-center">
          <button id="modal-delete-vlan-btn" onclick="confirmDeleteVlan(currentModalIface)" class="hidden text-xs text-rose-400 hover:text-rose-300">Delete VLAN</button>
          <div class="flex space-x-3">
            <button onclick="closeIfaceModal()" class="px-4 py-2 rounded-lg text-xs font-medium text-slate-400 hover:bg-slate-800">Close</button>
            <button onclick="saveInterfaceMetadata()" class="px-5 py-2 rounded-lg text-xs font-semibold bg-brand-600 hover:bg-brand-500 text-white">Save Changes</button>
          </div>
        </div>
      </div>
    </div>
  </div>

  <!-- ================= MODAL: PPPoE CLIENT ================= -->
  <div id="pppoe-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="pppoe-modal-title" class="text-sm font-bold text-white">Add PPPoE Client Interface</h3>
        <button onclick="closePPPoEModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSavePPPoE(event)" class="p-6 space-y-4">
        <input type="hidden" id="pppoe-modal-edit-orig">
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Name *</label>
            <input type="text" id="pppoe-modal-name" placeholder="pppoe-out1" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-blue-500">
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Interface *</label>
            <select id="pppoe-modal-iface" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-blue-500"></select>
          </div>
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Username *</label>
            <input type="text" id="pppoe-modal-user" placeholder="user@isp" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-blue-500">
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Password *</label>
            <input type="password" id="pppoe-modal-pass" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-blue-500">
          </div>
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Service Name (Optional)</label>
            <input type="text" id="pppoe-modal-service" placeholder="ISP Service" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white">
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">MTU</label>
            <input type="number" id="pppoe-modal-mtu" value="1492" min="576" max="1500" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
          </div>
        </div>
        <div class="grid grid-cols-3 gap-2 pt-2 border-t border-slate-800/80">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="pppoe-modal-defroute" checked class="rounded bg-slate-800 border-slate-700 text-blue-500">
            <span class="text-xs text-slate-300 font-medium">Default Route</span>
          </label>
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="pppoe-modal-reconnect" checked class="rounded bg-slate-800 border-slate-700 text-blue-500">
            <span class="text-xs text-slate-300 font-medium">Auto-Reconnect</span>
          </label>
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="pppoe-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="text-xs text-slate-300 font-medium">Disabled (X)</span>
          </label>
        </div>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closePPPoEModal()" class="px-4 py-2 rounded-lg text-xs font-medium text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg text-xs font-semibold bg-blue-600 hover:bg-blue-500 text-white shadow-lg shadow-blue-500/20">Save PPPoE</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: WIREGUARD INTERFACE ================= -->
  <!-- ================= MODAL: ADD / EDIT WIREGUARD INTERFACE ================= -->
  <div id="wg-iface-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div class="flex items-center gap-2">
          <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-rose-500/20 text-rose-300 border border-rose-500/30 font-semibold">/interface wireguard</span>
          <h3 id="wg-iface-modal-title" class="text-sm font-bold text-white">Add WireGuard Interface</h3>
        </div>
        <button onclick="closeAddWGInterfaceModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveWGInterface(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="wg-iface-modal-edit-orig">
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Interface Name *</label>
            <input type="text" id="wg-iface-modal-name" placeholder="wg0" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-rose-500">
            <p class="text-[10px] text-slate-500 mt-1">e.g. wg0, wg-office, wgx-Space</p>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Listen Port *</label>
            <input type="number" id="wg-iface-modal-port" value="51820" min="1" max="65535" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-rose-500">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Tunnel IP (CIDR)</label>
            <input type="text" id="wg-iface-modal-addr" placeholder="10.10.0.1/24" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-rose-500">
            <p class="text-[10px] text-slate-500 mt-1">Assigned IP/mask, or leave blank</p>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">MTU</label>
            <input type="number" id="wg-iface-modal-mtu" value="1420" min="1280" max="1500" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment / Alias</label>
          <input type="text" id="wg-iface-modal-comment" placeholder="e.g. Main Roadwarrior Server, Site-to-Site tunnel" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white focus:outline-none focus:border-rose-500">
        </div>

        <div class="bg-slate-950/60 border border-slate-800/80 rounded-xl p-3.5 space-y-3">
          <div class="flex items-center justify-between">
            <span class="text-[11px] font-bold text-slate-400 uppercase tracking-wider font-mono">Cryptographic Keypair</span>
            <button type="button" onclick="generateWGInterfaceKeys()" class="text-[11px] text-rose-400 hover:text-rose-300 font-semibold flex items-center gap-1">
              <span>⚡ Generate New Keypair</span>
            </button>
          </div>

          <div>
            <div class="flex items-center justify-between mb-1">
              <label class="text-[11px] font-semibold text-slate-300">Public Key</label>
              <button type="button" onclick="copyWGInterfacePubKey()" class="text-[10px] text-cyan-400 hover:text-cyan-300">📋 Copy Public Key</button>
            </div>
            <input type="text" id="wg-iface-modal-pubkey" readonly class="w-full bg-slate-900 border border-slate-800 rounded-lg px-3 py-2 text-slate-300 font-mono text-[11px]">
          </div>

          <div>
            <div class="flex items-center justify-between mb-1">
              <label class="text-[11px] font-semibold text-slate-300">Private Key (Secret) *</label>
              <button type="button" onclick="toggleWGPrivKeyVisibility()" id="btn-toggle-wg-privkey" class="text-[10px] text-slate-400 hover:text-white">👁️ Show</button>
            </div>
            <input type="password" id="wg-iface-modal-privkey" required oninput="onWGInterfacePrivKeyInput()" class="w-full bg-slate-900 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono text-[11px] focus:outline-none focus:border-rose-500">
            <p class="text-[10px] text-slate-500 mt-1">You can paste any existing base64 private key; the public key will update automatically.</p>
          </div>
        </div>

        <div class="pt-1">
          <label class="flex items-center space-x-2.5 cursor-pointer">
            <input type="checkbox" id="wg-iface-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500 focus:ring-rose-500">
            <span class="font-medium text-slate-300">Disabled (X)</span>
          </label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeAddWGInterfaceModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800 transition">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-rose-600 hover:bg-rose-500 text-white shadow-lg shadow-rose-500/20 transition">Save Interface</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD / EDIT WIREGUARD PEER ================= -->
  <div id="wg-peer-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div class="flex items-center gap-2">
          <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-rose-500/20 text-rose-300 border border-rose-500/30 font-semibold">/interface wireguard peers</span>
          <h3 id="wg-peer-modal-title" class="text-sm font-bold text-white">Add WireGuard Peer</h3>
        </div>
        <button onclick="closeAddWGPeerModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>

      <form onsubmit="submitSaveWGPeer(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="wg-peer-modal-edit-orig-iface">
        <input type="hidden" id="wg-peer-modal-edit-orig-pubkey">

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">WireGuard Interface *</label>
            <select id="wg-peer-modal-iface" onchange="checkWGPeerKeyValidity()" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-rose-500"></select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Peer Name / Alias *</label>
            <input type="text" id="wg-peer-modal-name" placeholder="Laptop, iPhone, Branch-Athens" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white focus:outline-none focus:border-rose-500">
          </div>
        </div>

        <div>
          <div class="flex items-center justify-between mb-1.5">
            <label class="font-semibold text-slate-300">Peer Public Key *</label>
            <button type="button" onclick="generatePeerKeypairHelper()" class="text-[11px] text-cyan-400 hover:text-cyan-300 font-semibold flex items-center gap-1">
              <span>⚡ Generate Client Keypair</span>
            </button>
          </div>
          <input type="text" id="wg-peer-modal-pubkey" oninput="checkWGPeerKeyValidity()" placeholder="Base64 44-character public key" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono text-xs focus:outline-none focus:border-rose-500">
          
          <!-- Warning if user tries to paste interface's own public key -->
          <div id="wg-peer-key-warning" class="hidden text-rose-400 text-[11px] font-sans mt-1.5 bg-rose-950/50 p-2.5 rounded-lg border border-rose-800/70">
            ⚠️ <strong>Invalid Key:</strong> The peer public key cannot be the same as the interface's own public key. A WireGuard node cannot connect to itself!
          </div>

          <!-- Box showing generated client secret key if generated here -->
          <div id="wg-peer-gen-key-box" class="hidden mt-2.5 bg-slate-950/80 p-3 rounded-xl border border-cyan-800/60 text-xs font-mono space-y-1.5">
            <div class="flex items-center justify-between text-[11px] text-cyan-300 font-bold font-sans">
              <span>Generated Client Private Key (Secret):</span>
              <button type="button" onclick="copyGeneratedPeerPrivKey()" class="text-white hover:text-cyan-300 font-semibold text-[10px] bg-slate-800 px-2 py-0.5 rounded border border-slate-700">📋 Copy Secret</button>
            </div>
            <input type="text" id="wg-peer-gen-privkey" readonly class="w-full bg-slate-900 border border-slate-800 rounded px-2.5 py-1.5 text-slate-300 text-xs font-mono">
            <p class="text-[10px] text-slate-400 font-sans">Copy and save this private key to configure the client device (e.g. phone or remote router).</p>
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Allowed IPs (CIDR) *</label>
          <input type="text" id="wg-peer-modal-allowedips" placeholder="e.g. 10.10.0.2/32, 192.168.20.0/24 or 0.0.0.0/0" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono text-xs focus:outline-none focus:border-rose-500">
          <p class="text-[10px] text-slate-500 mt-1">IP ranges routed to/from this peer (comma-separated)</p>
        </div>

        <div class="grid grid-cols-3 gap-3">
          <div class="col-span-2">
            <label class="block font-semibold text-slate-300 mb-1.5">Endpoint Host/IP (Optional)</label>
            <input type="text" id="wg-peer-modal-endpoint" placeholder="e.g. 10.2.145.253 or vpn.example.com" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono text-xs focus:outline-none focus:border-rose-500">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Endpoint Port</label>
            <input type="number" id="wg-peer-modal-port" placeholder="51820" min="1" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono text-xs focus:outline-none focus:border-rose-500">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Keepalive (seconds)</label>
            <input type="number" id="wg-peer-modal-keepalive" value="25" min="0" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono text-xs focus:outline-none focus:border-rose-500">
            <p class="text-[10px] text-slate-500 mt-1">25s recommended for NAT traversal</p>
          </div>
          <div>
            <div class="flex items-center justify-between mb-1.5">
              <label class="font-semibold text-slate-300">Preshared Key</label>
              <button type="button" onclick="generatePeerPSK()" class="text-[10px] text-purple-400 hover:text-purple-300 font-semibold">Generate</button>
            </div>
            <input type="password" id="wg-peer-modal-preshared" placeholder="Optional PSK" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono text-xs focus:outline-none focus:border-rose-500">
          </div>
        </div>

        <div class="pt-1">
          <label class="flex items-center space-x-2.5 cursor-pointer">
            <input type="checkbox" id="wg-peer-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500 focus:ring-rose-500">
            <span class="font-medium text-slate-300">Disabled (X)</span>
          </label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeAddWGPeerModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800 transition">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-rose-600 hover:bg-rose-500 text-white shadow-lg shadow-rose-500/20 transition">Save Peer</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: IPSEC TUNNEL ================= -->
  <div id="ipsec-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="ipsec-modal-title" class="text-sm font-bold text-white">Configure IPSec IKEv2 Tunnel</h3>
        <button onclick="closeAddIPSecModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveIPSec(event)" class="p-6 space-y-4">
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Connection Name *</label>
          <input type="text" id="ipsec-modal-name" placeholder="e.g. site-to-site-office" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Local Subnet *</label>
            <input type="text" id="ipsec-modal-localts" placeholder="192.168.10.0/24" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Remote Subnet *</label>
            <input type="text" id="ipsec-modal-remotets" placeholder="192.168.20.0/24" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
          </div>
        </div>
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Remote Gateway IP / FQDN *</label>
          <input type="text" id="ipsec-modal-remotegw" placeholder="203.0.113.50 or vpn.remote.com" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
        </div>
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Pre-Shared Key (PSK) *</label>
          <input type="password" id="ipsec-modal-psk" placeholder="Secret Pre-Shared Key" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">IKE Proposals</label>
            <input type="text" id="ipsec-modal-ikeprop" value="aes256-sha256-modp2048,default" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-[11px] text-white font-mono">
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">ESP Proposals</label>
            <input type="text" id="ipsec-modal-espprop" value="aes256-sha256-modp2048,default" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-[11px] text-white font-mono">
          </div>
        </div>
        <div class="grid grid-cols-2 gap-4 pt-2">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="ipsec-modal-autostart" checked class="rounded bg-slate-800 border-slate-700 text-amber-500">
            <span class="text-xs text-slate-300 font-medium">Auto-start on boot</span>
          </label>
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="ipsec-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="text-xs text-slate-300 font-medium">Disabled (X)</span>
          </label>
        </div>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeAddIPSecModal()" class="px-4 py-2 rounded-lg text-xs font-medium text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg text-xs font-semibold bg-amber-600 hover:bg-amber-500 text-white">Save Tunnel</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: L2TP CLIENT ================= -->
  <div id="l2tp-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="l2tp-modal-title" class="text-sm font-bold text-white">Add L2TP Client Interface</h3>
        <button onclick="closeL2TPModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveL2TP(event)" class="p-6 space-y-4">
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Client Interface Name *</label>
          <input type="text" id="l2tp-modal-name" placeholder="l2tp-out1" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-cyan-500">
        </div>
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Connect To (Server IP / Host) *</label>
          <input type="text" id="l2tp-modal-server" placeholder="vpn.example.com or 203.0.113.1" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-cyan-500">
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Username *</label>
            <input type="text" id="l2tp-modal-user" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-cyan-500">
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Password *</label>
            <input type="password" id="l2tp-modal-pass" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-cyan-500">
          </div>
        </div>
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">IPSec Secret / PSK (Optional for L2TP/IPsec)</label>
          <input type="password" id="l2tp-modal-ipsec" placeholder="Optional Pre-Shared Key" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono">
        </div>
        <div class="grid grid-cols-2 gap-4 pt-2">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="l2tp-modal-defroute" checked class="rounded bg-slate-800 border-slate-700 text-cyan-500">
            <span class="text-xs text-slate-300 font-medium">Default Route</span>
          </label>
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="l2tp-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="text-xs text-slate-300 font-medium">Disabled (X)</span>
          </label>
        </div>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeL2TPModal()" class="px-4 py-2 rounded-lg text-xs font-medium text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg text-xs font-semibold bg-cyan-600 hover:bg-cyan-500 text-white shadow-lg shadow-cyan-500/20">Save L2TP</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: PPTP CLIENT ================= -->
  <div id="pptp-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="pptp-modal-title" class="text-sm font-bold text-white">Add PPTP Client Interface</h3>
        <button onclick="closePPTPModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSavePPTP(event)" class="p-6 space-y-4">
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Client Interface Name *</label>
          <input type="text" id="pptp-modal-name" placeholder="pptp-out1" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-purple-500">
        </div>
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">Connect To (Server IP / Host) *</label>
          <input type="text" id="pptp-modal-server" placeholder="vpn.example.com or 203.0.113.1" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-purple-500">
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Username *</label>
            <input type="text" id="pptp-modal-user" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-purple-500">
          </div>
          <div>
            <label class="block text-xs font-semibold text-slate-300 mb-1.5">Password *</label>
            <input type="password" id="pptp-modal-pass" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-xs text-white font-mono focus:outline-none focus:border-purple-500">
          </div>
        </div>
        <div class="grid grid-cols-3 gap-2 pt-2 border-t border-slate-800/80">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="pptp-modal-mppe" checked class="rounded bg-slate-800 border-slate-700 text-purple-500">
            <span class="text-xs text-slate-300 font-medium">MPPE-128</span>
          </label>
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="pptp-modal-defroute" checked class="rounded bg-slate-800 border-slate-700 text-purple-500">
            <span class="text-xs text-slate-300 font-medium">Default Route</span>
          </label>
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="pptp-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="text-xs text-slate-300 font-medium">Disabled (X)</span>
          </label>
        </div>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closePPTPModal()" class="px-4 py-2 rounded-lg text-xs font-medium text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg text-xs font-semibold bg-purple-600 hover:bg-purple-500 text-white shadow-lg shadow-purple-500/20">Save PPTP</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: FIREWALL FILTER RULE (ROUTEROS WEBFIG / WINBOX V4 REPLICA) ================= -->
  <div id="filter-modal" class="fixed inset-0 bg-black/60 backdrop-blur-[2px] z-50 hidden flex items-center justify-center p-2 sm:p-4">
    <div id="filter-modal-window" class="bg-[#131b26] border border-[#243347] rounded-md shadow-2xl w-full max-w-[720px] max-h-[92vh] flex flex-col overflow-hidden text-xs select-none">
      
      <!-- Window Title Bar -->
      <div class="bg-[#162335] border-b border-[#223145] px-3.5 py-1.5 flex items-center justify-between shrink-0">
        <div class="flex items-center gap-2">
          <!-- WinBox v4 Logo -->
          <div class="flex items-center gap-0.5 text-cyan-400 font-bold font-mono text-[11px] leading-none">
            <svg class="w-3.5 h-3.5 text-cyan-400" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5">
              <path d="M4 5l3.5 10L11 5" stroke-linecap="round" stroke-linejoin="round"/>
              <path d="M15 5v5h4m0-5v10" stroke-linecap="round" stroke-linejoin="round"/>
              <circle cx="12" cy="20" r="1.5" fill="currentColor"/>
            </svg>
            <span class="text-cyan-400 font-bold text-xs tracking-tight">v4</span>
          </div>
          <span class="text-slate-200 font-medium text-xs">Firewall Rule &gt;</span>
          <span id="fw-modal-badge" class="bg-[#0078d4] text-white text-[11px] px-2 py-0.5 rounded font-mono font-medium">New...</span>
        </div>
        <div class="flex items-center gap-2">
          <button type="button" onclick="toggleMaximizeFilterModal()" title="Maximize / Restore" class="text-slate-400 hover:text-white p-0.5 text-xs transition-colors">
            <svg class="w-3.5 h-3.5" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7"/></svg>
          </button>
          <button type="button" onclick="closeFilterModal()" title="Close" class="text-slate-400 hover:text-rose-400 p-0.5 text-xs font-bold leading-none transition-colors">✕</button>
        </div>
      </div>

      <!-- Window Tabs Bar -->
      <div class="bg-[#111923] border-b border-[#1f2d3e] px-2 flex items-center gap-1 shrink-0">
        <button type="button" onclick="switchFwRuleTab('general')" id="fw-tab-btn-general" class="fw-rule-tab-btn bg-[#182638] text-white border-t-2 border-sky-400 px-3.5 py-1.5 text-xs font-medium transition-colors">General</button>
        <button type="button" onclick="switchFwRuleTab('advanced')" id="fw-tab-btn-advanced" class="fw-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Advanced</button>
        <button type="button" onclick="switchFwRuleTab('extra')" id="fw-tab-btn-extra" class="fw-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Extra</button>
        <button type="button" onclick="switchFwRuleTab('action')" id="fw-tab-btn-action" class="fw-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Action</button>
        <button type="button" onclick="switchFwRuleTab('statistics')" id="fw-tab-btn-statistics" class="fw-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Statistics</button>
      </div>

      <!-- Window Body (Split Layout: Left Tab Content + Right Action Sidebar) -->
      <div class="flex-1 flex min-h-0 overflow-hidden">
        
        <!-- Form Content Container (Scrollable) -->
        <form id="fw-rule-form" onsubmit="event.preventDefault(); applyFilterRule(true);" class="flex-1 overflow-y-auto px-4 py-3 min-w-0 space-y-1">
          <input type="hidden" id="filter-modal-id">

          <!-- TAB PANE: GENERAL -->
          <div id="fw-pane-general" class="fw-rule-pane space-y-1">
            <!-- Enabled -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Enabled</label>
              <div class="flex items-center">
                <input type="checkbox" id="filter-modal-enabled" checked class="rounded bg-[#15202e] border-[#26374d] text-sky-500 focus:ring-0 w-4 h-4 cursor-pointer">
              </div>
            </div>

            <!-- Comment -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Comment</label>
              <div class="flex-1">
                <input type="text" id="filter-modal-comment" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Chain -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Chain</label>
              <div class="flex-1">
                <select id="filter-modal-chain" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-sky-400 font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="forward" selected>forward</option>
                  <option value="input">input</option>
                  <option value="output">output</option>
                </select>
              </div>
            </div>

            <!-- Src. Address -->
            <div class="flex items-center text-xs py-1" id="fw-row-src">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('src', true)" id="fw-plus-src" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-src" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-src" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-src" placeholder="192.168.1.0/24" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('src', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Address -->
            <div class="flex items-center text-xs py-1" id="fw-row-dst">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('dst', true)" id="fw-plus-dst" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-dst" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-dst" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-dst" placeholder="0.0.0.0/0" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('dst', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Address List -->
            <div class="flex items-center text-xs py-1" id="fw-row-srclist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Address List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('srclist', true)" id="fw-plus-srclist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-srclist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-srclist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-srclist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleFwField('srclist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Address List -->
            <div class="flex items-center text-xs py-1" id="fw-row-dstlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Address List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('dstlist', true)" id="fw-plus-dstlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-dstlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-dstlist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-dstlist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleFwField('dstlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Geo Location -->
            <div class="flex items-center text-xs py-1" id="fw-row-srcgeo">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Geo Location</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('srcgeo', true)" id="fw-plus-srcgeo" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-srcgeo" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-srcgeo" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-srcgeo" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleFwField('srcgeo', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Geo Location -->
            <div class="flex items-center text-xs py-1" id="fw-row-dstgeo">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Geo Location</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('dstgeo', true)" id="fw-plus-dstgeo" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-dstgeo" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-dstgeo" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-dstgeo" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleFwField('dstgeo', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Protocol -->
            <div class="flex items-center text-xs py-1" id="fw-row-proto">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Protocol</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('proto', true)" id="fw-plus-proto" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-proto" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-proto" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-proto" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="tcp">6 (tcp)</option>
                    <option value="udp">17 (udp)</option>
                    <option value="icmp">1 (icmp)</option>
                    <option value="gre">47 (gre)</option>
                    <option value="esp">50 (esp)</option>
                    <option value="ipip">4 (ipip)</option>
                    <option value="vrrp">112 (vrrp)</option>
                    <option value="all">all</option>
                  </select>
                  <button type="button" onclick="toggleFwField('proto', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Port -->
            <div class="flex items-center text-xs py-1" id="fw-row-sport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('sport', true)" id="fw-plus-sport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-sport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-sport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-sport" placeholder="80 or 1024-65535" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('sport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Port -->
            <div class="flex items-center text-xs py-1" id="fw-row-dport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('dport', true)" id="fw-plus-dport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-dport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-dport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-dport" placeholder="80,443" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('dport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Any. Port -->
            <div class="flex items-center text-xs py-1" id="fw-row-anyport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Any. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('anyport', true)" id="fw-plus-anyport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-anyport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-anyport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-anyport" placeholder="53" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('anyport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- In. Interface -->
            <div class="flex items-center text-xs py-1" id="fw-row-iniface">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Interface</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('iniface', true)" id="fw-plus-iniface" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-iniface" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-iniface" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-iniface" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleFwField('iniface', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Interface -->
            <div class="flex items-center text-xs py-1" id="fw-row-outiface">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Interface</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('outiface', true)" id="fw-plus-outiface" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-outiface" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-outiface" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-outiface" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleFwField('outiface', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- In. Interface List -->
            <div class="flex items-center text-xs py-1" id="fw-row-inifacelist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Interface List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('inifacelist', true)" id="fw-plus-inifacelist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-inifacelist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-inifacelist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-inifacelist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="all">all</option>
                    <option value="none">none</option>
                    <option value="dynamic">dynamic</option>
                    <option value="LAN">LAN</option>
                    <option value="WAN">WAN</option>
                  </select>
                  <button type="button" onclick="toggleFwField('inifacelist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Interface List -->
            <div class="flex items-center text-xs py-1" id="fw-row-outifacelist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Interface List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('outifacelist', true)" id="fw-plus-outifacelist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-outifacelist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-outifacelist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="fw-val-outifacelist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="all">all</option>
                    <option value="none">none</option>
                    <option value="dynamic">dynamic</option>
                    <option value="LAN">LAN</option>
                    <option value="WAN">WAN</option>
                  </select>
                  <button type="button" onclick="toggleFwField('outifacelist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Packet Mark -->
            <div class="flex items-center text-xs py-1" id="fw-row-pktmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('pktmark', true)" id="fw-plus-pktmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-pktmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-pktmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-pktmark" placeholder="e.g. qos_voip" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('pktmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Mark -->
            <div class="flex items-center text-xs py-1" id="fw-row-connmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('connmark', true)" id="fw-plus-connmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-connmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-connmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-connmark" placeholder="e.g. wan1_conn" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('connmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Routing Mark -->
            <div class="flex items-center text-xs py-1" id="fw-row-routingmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Routing Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('routingmark', true)" id="fw-plus-routingmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-routingmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-routingmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-routingmark" placeholder="e.g. to_wan2" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('routingmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Connection Type -->
            <div class="flex items-center text-xs py-1" id="fw-row-conntype">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Type</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('conntype', true)" id="fw-plus-conntype" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-conntype" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="fw-val-conntype" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="ftp">ftp</option>
                    <option value="h323">h323</option>
                    <option value="irc">irc</option>
                    <option value="pptp">pptp</option>
                    <option value="sip">sip</option>
                    <option value="tftp">tftp</option>
                  </select>
                  <button type="button" onclick="toggleFwField('conntype', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Connection State -->
            <div class="flex items-center text-xs py-1" id="fw-row-cs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection State</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('cs', true)" id="fw-plus-cs" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-cs" class="hidden flex-1 flex flex-wrap items-center gap-2 min-w-0 bg-[#15202e] border border-[#26374d] rounded px-2 py-1">
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="filter-modal-cs-established" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">established</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="filter-modal-cs-related" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">related</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="filter-modal-cs-new" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">new</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="filter-modal-cs-invalid" class="rounded bg-[#101721] border-[#2b3e56] text-rose-500"><span class="text-slate-300">invalid</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="filter-modal-cs-untracked" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500"><span class="text-slate-300">untracked</span></label>
                  <button type="button" onclick="toggleFwField('cs', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0 ml-auto" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Connection NAT State -->
            <div class="flex items-center text-xs py-1" id="fw-row-natstate">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection NAT State</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('natstate', true)" id="fw-plus-natstate" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-natstate" class="hidden flex-1 flex items-center gap-3 min-w-0 bg-[#15202e] border border-[#26374d] rounded px-2 py-1">
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="filter-modal-nat-srcnat" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">srcnat</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="filter-modal-nat-dstnat" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">dstnat</span></label>
                  <button type="button" onclick="toggleFwField('natstate', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0 ml-auto" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: ADVANCED (Screenshot 2) -->
          <div id="fw-pane-advanced" class="fw-rule-pane hidden space-y-1">
            <!-- Layer7 Protocol -->
            <div class="flex items-center text-xs py-1" id="fw-row-layer7">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Layer7 Protocol</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('layer7', true)" id="fw-plus-layer7" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-layer7" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-layer7" placeholder="e.g. youtube_regex" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('layer7', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Content -->
            <div class="flex items-center text-xs py-1" id="fw-row-content">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Content</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('content', true)" id="fw-plus-content" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-content" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-content" placeholder="e.g. facebook.com" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('content', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Bytes -->
            <div class="flex items-center text-xs py-1" id="fw-row-connbytes">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Bytes</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('connbytes', true)" id="fw-plus-connbytes" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-connbytes" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-connbytes" placeholder="e.g. 0-500000" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('connbytes', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Rate -->
            <div class="flex items-center text-xs py-1" id="fw-row-connrate">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Rate</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('connrate', true)" id="fw-plus-connrate" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-connrate" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-connrate" placeholder="e.g. 0-100k" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('connrate', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Per Connection Classifier -->
            <div class="flex items-center text-xs py-1" id="fw-row-pcc">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Per Connection Classifier</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('pcc', true)" id="fw-plus-pcc" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-pcc" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-pcc" placeholder="both-addresses:2/0" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('pcc', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Src. MAC Address -->
            <div class="flex items-center text-xs py-1" id="fw-row-srcmac">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. MAC Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('srcmac', true)" id="fw-plus-srcmac" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-srcmac" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="fw-inv-srcmac" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="fw-val-srcmac" placeholder="e.g. 00:11:22:33:44:55" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('srcmac', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Out. Bridge Port -->
            <div class="flex items-center text-xs py-1" id="fw-row-outbridgeport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Bridge Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('outbridgeport', true)" id="fw-plus-outbridgeport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-outbridgeport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-outbridgeport" placeholder="e.g. eth1" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('outbridgeport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- In. Bridge Port -->
            <div class="flex items-center text-xs py-1" id="fw-row-inbridgeport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Bridge Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('inbridgeport', true)" id="fw-plus-inbridgeport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-inbridgeport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-inbridgeport" placeholder="e.g. eth0" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('inbridgeport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- In. Bridge Port List -->
            <div class="flex items-center text-xs py-1" id="fw-row-inbridgeportlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Bridge Port List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('inbridgeportlist', true)" id="fw-plus-inbridgeportlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-inbridgeportlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-inbridgeportlist" placeholder="e.g. LAN" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('inbridgeportlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Bridge Port List -->
            <div class="flex items-center text-xs py-1" id="fw-row-outbridgeportlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Bridge Port List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('outbridgeportlist', true)" id="fw-plus-outbridgeportlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-outbridgeportlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-outbridgeportlist" placeholder="e.g. WAN" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('outbridgeportlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- IPsec Policy -->
            <div class="flex items-center text-xs py-1" id="fw-row-ipsec">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">IPsec Policy</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('ipsec', true)" id="fw-plus-ipsec" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-ipsec" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="fw-val-ipsec" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="in:ipsec">in:ipsec</option>
                    <option value="out:ipsec">out:ipsec</option>
                    <option value="in:none">in:none</option>
                    <option value="out:none">out:none</option>
                  </select>
                  <button type="button" onclick="toggleFwField('ipsec', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TLS Host -->
            <div class="flex items-center text-xs py-1" id="fw-row-tlshost">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TLS Host</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('tlshost', true)" id="fw-plus-tlshost" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-tlshost" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-tlshost" placeholder="e.g. *.netflix.com" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('tlshost', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Ingress Priority -->
            <div class="flex items-center text-xs py-1" id="fw-row-ingresspriority">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Ingress Priority</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('ingresspriority', true)" id="fw-plus-ingresspriority" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-ingresspriority" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-ingresspriority" placeholder="0-7" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('ingresspriority', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Priority -->
            <div class="flex items-center text-xs py-1" id="fw-row-priority">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Priority</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('priority', true)" id="fw-plus-priority" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-priority" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-priority" placeholder="0-7" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('priority', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- DSCP -->
            <div class="flex items-center text-xs py-1" id="fw-row-dscp">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">DSCP</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('dscp', true)" id="fw-plus-dscp" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-dscp" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-dscp" placeholder="0-63 (e.g. 46 for EF)" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('dscp', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TCP MSS -->
            <div class="flex items-center text-xs py-1" id="fw-row-tcpmss">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TCP MSS</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('tcpmss', true)" id="fw-plus-tcpmss" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-tcpmss" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-tcpmss" placeholder="e.g. 1440" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('tcpmss', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TOS -->
            <div class="flex items-center text-xs py-1" id="fw-row-tos">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TOS</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <select id="fw-val-tos" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="">(any)</option>
                  <option value="0">0 (Normal Service)</option>
                  <option value="min-delay">min-delay (16)</option>
                  <option value="max-throughput">max-throughput (8)</option>
                  <option value="max-reliability">max-reliability (4)</option>
                  <option value="min-cost">min-cost (2)</option>
                </select>
              </div>
            </div>

            <!-- Packet Size -->
            <div class="flex items-center text-xs py-1" id="fw-row-pktsize">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Size</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('pktsize', true)" id="fw-plus-pktsize" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-pktsize" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-pktsize" placeholder="e.g. 64-1500" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('pktsize', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Random -->
            <div class="flex items-center text-xs py-1" id="fw-row-random">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Random</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('random', true)" id="fw-plus-random" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-random" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-random" placeholder="1-100 %" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('random', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TCP Flags -->
            <div class="flex items-center text-xs py-1" id="fw-row-tcpflags">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TCP Flags</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('tcpflags', true)" id="fw-plus-tcpflags" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-tcpflags" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-tcpflags" placeholder="syn,ack,fin,rst" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('tcpflags', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- ICMP Options -->
            <div class="flex items-center text-xs py-1" id="fw-row-icmpoptions">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">ICMP Options</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('icmpoptions', true)" id="fw-plus-icmpoptions" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-icmpoptions" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-icmpoptions" placeholder="e.g. 8:0 (echo-request)" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('icmpoptions', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- IPv4 Options -->
            <div class="flex items-center text-xs py-1" id="fw-row-ipv4options">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">IPv4 Options</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('ipv4options', true)" id="fw-plus-ipv4options" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-ipv4options" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-ipv4options" placeholder="any, loose-source-routing" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('ipv4options', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TTL -->
            <div class="flex items-center text-xs py-1" id="fw-row-ttl">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TTL</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('ttl', true)" id="fw-plus-ttl" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-ttl" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-ttl" placeholder="equal:64 or less-than:10" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('ttl', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: EXTRA -->
          <div id="fw-pane-extra" class="fw-rule-pane hidden space-y-1">
            <!-- Time -->
            <div class="flex items-center text-xs py-1" id="fw-row-time">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Time</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('time', true)" id="fw-plus-time" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-time" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-time" placeholder="00:00:00-23:59:59" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('time', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Days -->
            <div class="flex items-center text-xs py-1" id="fw-row-days">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Days</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('days', true)" id="fw-plus-days" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-days" class="hidden flex-1 flex flex-wrap items-center gap-2 min-w-0 bg-[#15202e] border border-[#26374d] rounded px-2 py-1">
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="fw-day-sun" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">sun</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="fw-day-mon" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">mon</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="fw-day-tue" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">tue</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="fw-day-wed" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">wed</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="fw-day-thu" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">thu</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="fw-day-fri" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">fri</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="fw-day-sat" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">sat</span></label>
                  <button type="button" onclick="toggleFwField('days', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0 ml-auto">-</button>
                </div>
              </div>
            </div>

            <!-- Limit -->
            <div class="flex items-center text-xs py-1" id="fw-row-limit">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Limit</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('limit', true)" id="fw-plus-limit" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-limit" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-limit" placeholder="e.g. 100,5:packet" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('limit', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Limit -->
            <div class="flex items-center text-xs py-1" id="fw-row-dstlimit">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Limit</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('dstlimit', true)" id="fw-plus-dstlimit" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-dstlimit" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-dstlimit" placeholder="e.g. 100/5s,5" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('dstlimit', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- PSD -->
            <div class="flex items-center text-xs py-1" id="fw-row-psd">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">PSD</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('psd', true)" id="fw-plus-psd" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-psd" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-psd" placeholder="Weight: 21, 3s, 3, 1" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('psd', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: ACTION (Screenshot 3) -->
          <div id="fw-pane-action" class="fw-rule-pane hidden space-y-2">
            <!-- Action -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Action</label>
              <div class="flex-1">
                <select id="filter-modal-action" onchange="toggleFilterActionFields()" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-sky-400 font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="accept" selected>accept</option>
                  <option value="add-dst-to-address-list">add-dst-to-address-list</option>
                  <option value="add-src-to-address-list">add-src-to-address-list</option>
                  <option value="drop">drop</option>
                  <option value="fasttrack-connection">fasttrack-connection</option>
                  <option value="jump">jump</option>
                  <option value="log">log</option>
                  <option value="passthrough">passthrough</option>
                  <option value="reject">reject</option>
                  <option value="return">return</option>
                  <option value="tarpit">tarpit</option>
                </select>
              </div>
            </div>

            <!-- Reject With (Shown when action === reject) -->
            <div id="filter-action-reject-box" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-rose-300 shrink-0 select-none">Reject With</label>
              <div class="flex-1">
                <select id="filter-modal-rejectwith" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-rose-500 w-full cursor-pointer">
                  <option value="icmp-network-unreachable">icmp-network-unreachable</option>
                  <option value="icmp-host-unreachable">icmp-host-unreachable</option>
                  <option value="icmp-port-unreachable">icmp-port-unreachable</option>
                  <option value="icmp-admin-prohibited">icmp-admin-prohibited</option>
                  <option value="tcp-reset">tcp-reset</option>
                </select>
              </div>
            </div>

            <!-- Jump Target (Shown when action === jump) -->
            <div id="filter-action-jump-box" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-sky-300 shrink-0 select-none">Jump Target</label>
              <div class="flex-1">
                <input type="text" id="filter-modal-jumptarget" placeholder="chain name" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Address List & Timeout (Shown when action starts with add-) -->
            <div id="filter-action-addrlist-box" class="hidden space-y-1">
              <div class="flex items-center text-xs py-1">
                <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Address List</label>
                <div class="flex-1">
                  <input type="text" id="filter-modal-action-addrlist" list="fw-addrlist-datalist" placeholder="list name" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                </div>
              </div>
              <div class="flex items-center text-xs py-1">
                <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Timeout</label>
                <div class="flex-1">
                  <input type="text" id="filter-modal-action-timeout" placeholder="none or 1d 00:00:00" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Log -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Log</label>
              <div class="flex items-center">
                <input type="checkbox" id="filter-modal-log" onchange="toggleFwLogPrefix()" class="rounded bg-[#15202e] border-[#26374d] text-sky-500 focus:ring-0 w-4 h-4 cursor-pointer">
              </div>
            </div>

            <!-- Log Prefix -->
            <div class="flex items-center text-xs py-1" id="fw-row-logprefix">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Log Prefix</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleFwField('logprefix', true)" id="fw-plus-logprefix" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="fw-field-logprefix" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="fw-val-logprefix" placeholder="e.g. FW_DROP: " class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleFwField('logprefix', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: STATISTICS (Screenshot 4) -->
          <div id="fw-pane-statistics" class="fw-rule-pane hidden space-y-2 py-1">
            <!-- Bytes -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Bytes</label>
              <div class="flex-1">
                <input type="text" id="fw-stat-bytes" readonly value="0 B" class="bg-[#121c27] border border-sky-600/80 rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <!-- Packets -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packets</label>
              <div class="flex-1">
                <input type="text" id="fw-stat-packets" readonly value="0" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <div class="h-1"></div>

            <!-- Rate -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Rate</label>
              <div class="flex-1">
                <input type="text" id="fw-stat-rate" readonly value="0 bps" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <!-- Packet Rate -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Rate</label>
              <div class="flex-1">
                <input type="text" id="fw-stat-pktrate" readonly value="0 p/s" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <div class="h-2"></div>

            <!-- Rate Graph -->
            <div class="space-y-1">
              <div class="text-[11px] text-slate-300 font-medium pl-1">Rate Graph</div>
              <div class="bg-[#0f1721] border border-[#202e40] rounded p-1.5 relative overflow-hidden">
                <svg id="fw-stat-rate-svg" class="w-full h-24" viewBox="0 0 500 100" preserveAspectRatio="none">
                  <!-- Generated grid and sparkline -->
                </svg>
              </div>
              <div class="flex items-center justify-center gap-1.5 text-[11px] text-slate-300 py-0.5">
                <span class="w-2 h-2 rounded-full bg-sky-400"></span>
                <span id="fw-stat-legend-rate" class="font-mono font-semibold text-white">0 bps</span>
                <span class="text-slate-400">Rate</span>
              </div>
            </div>

            <!-- Packet Rate Graph -->
            <div class="space-y-1">
              <div class="text-[11px] text-slate-300 font-medium pl-1">Packet Rate Graph</div>
              <div class="bg-[#0f1721] border border-[#202e40] rounded p-1.5 relative overflow-hidden">
                <svg id="fw-stat-pktrate-svg" class="w-full h-24" viewBox="0 0 500 100" preserveAspectRatio="none">
                  <!-- Generated grid and sparkline -->
                </svg>
              </div>
              <div class="flex items-center justify-center gap-1.5 text-[11px] text-slate-300 py-0.5">
                <span class="w-2 h-2 rounded-full bg-sky-400"></span>
                <span id="fw-stat-legend-pktrate" class="font-mono font-semibold text-white">0 p/s</span>
                <span class="text-slate-400">Packet Rate</span>
              </div>
            </div>
          </div>
        </form>

        <!-- Right Vertical Sidebar -->
        <div class="w-40 min-w-[150px] border-l border-[#213042] bg-[#121a24] p-3 text-xs flex flex-col space-y-4 shrink-0">
          <div>
            <button type="button" onclick="copyFilterRule()" class="w-full flex items-center gap-2 text-slate-300 hover:text-sky-300 text-xs py-1 transition-colors">
              <svg class="w-3.5 h-3.5 text-slate-400" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                <rect x="9" y="9" width="13" height="13" rx="2" ry="2"></rect>
                <path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"></path>
              </svg>
              <span>Copy</span>
            </button>
          </div>

          <div class="space-y-2">
            <div class="text-slate-300 font-semibold flex items-center gap-1.5 text-xs">
              <span class="text-amber-400">⚡</span>
              <span>Actions</span>
            </div>
            <div class="flex flex-col space-y-1.5 pl-1">
              <button type="button" onclick="resetCurrentRuleCounters()" class="text-left text-slate-400 hover:text-sky-300 text-xs py-0.5 transition-colors">Reset Counters</button>
              <button type="button" onclick="resetAllFwCounters()" class="text-left text-slate-400 hover:text-sky-300 text-xs py-0.5 transition-colors">Reset All Counters</button>
            </div>
          </div>
        </div>
      </div>

      <!-- Window Bottom Button Bar -->
      <div class="bg-[#141e2b] border-t border-[#1f2d3e] px-4 py-2 flex items-center justify-end gap-2 shrink-0">
        <button type="button" onclick="closeFilterModal()" class="px-4 py-1.5 rounded bg-[#1c2838] hover:bg-[#25364b] border border-[#2a3c54] text-xs font-medium text-slate-300 transition-colors">Cancel</button>
        <button type="button" onclick="applyFilterRule(false)" class="px-5 py-1.5 rounded bg-[#0078d4] hover:bg-[#006cbd] text-xs font-semibold text-white shadow-sm transition-colors">Apply</button>
        <button type="button" onclick="applyFilterRule(true)" class="px-5 py-1.5 rounded bg-[#0078d4] hover:bg-[#006cbd] text-xs font-semibold text-white shadow-sm transition-colors">OK</button>
      </div>
    </div>
  </div>

  <!-- ================= MODAL: FIREWALL NAT RULE (ROUTEROS WEBFIG / WINBOX V4 REPLICA) ================= -->
  <div id="nat-modal" class="fixed inset-0 bg-black/60 backdrop-blur-[2px] z-50 hidden flex items-center justify-center p-2 sm:p-4">
    <div id="nat-modal-window" class="bg-[#131b26] border border-[#243347] rounded-md shadow-2xl w-full max-w-[720px] max-h-[92vh] flex flex-col overflow-hidden text-xs select-none">
      
      <!-- Window Title Bar -->
      <div class="bg-[#162335] border-b border-[#223145] px-3.5 py-1.5 flex items-center justify-between shrink-0">
        <div class="flex items-center gap-2">
          <!-- WinBox v4 Logo -->
          <div class="flex items-center gap-0.5 text-cyan-400 font-bold font-mono text-[11px] leading-none">
            <svg class="w-3.5 h-3.5 text-cyan-400" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5">
              <path d="M4 5l3.5 10L11 5" stroke-linecap="round" stroke-linejoin="round"/>
              <path d="M15 5v5h4m0-5v10" stroke-linecap="round" stroke-linejoin="round"/>
              <circle cx="12" cy="20" r="1.5" fill="currentColor"/>
            </svg>
            <span class="text-cyan-400 font-bold text-xs tracking-tight">v4</span>
          </div>
          <span class="text-slate-200 font-medium text-xs">NAT Rule &gt;</span>
          <span id="nat-modal-badge" class="bg-[#0078d4] text-white text-[11px] px-2 py-0.5 rounded font-mono font-medium">New...</span>
        </div>
        <div class="flex items-center gap-2">
          <button type="button" onclick="toggleMaximizeNATModal()" title="Maximize / Restore" class="text-slate-400 hover:text-white p-0.5 text-xs transition-colors">
            <svg class="w-3.5 h-3.5" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7"/></svg>
          </button>
          <button type="button" onclick="closeNATModal()" title="Close" class="text-slate-400 hover:text-rose-400 p-0.5 text-xs font-bold leading-none transition-colors">✕</button>
        </div>
      </div>

      <!-- Window Tabs Bar -->
      <div class="bg-[#111923] border-b border-[#1f2d3e] px-2 flex items-center gap-1 shrink-0">
        <button type="button" onclick="switchNATRuleTab('general')" id="nat-tab-btn-general" class="nat-rule-tab-btn bg-[#182638] text-white border-t-2 border-sky-400 px-3.5 py-1.5 text-xs font-medium transition-colors">General</button>
        <button type="button" onclick="switchNATRuleTab('advanced')" id="nat-tab-btn-advanced" class="nat-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Advanced</button>
        <button type="button" onclick="switchNATRuleTab('extra')" id="nat-tab-btn-extra" class="nat-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Extra</button>
        <button type="button" onclick="switchNATRuleTab('action')" id="nat-tab-btn-action" class="nat-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Action</button>
        <button type="button" onclick="switchNATRuleTab('statistics')" id="nat-tab-btn-statistics" class="nat-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Statistics</button>
      </div>

      <!-- Window Body (Split Layout: Left Tab Content + Right Action Sidebar) -->
      <div class="flex-1 flex min-h-0 overflow-hidden">
        
        <!-- Form Content Container (Scrollable) -->
        <form id="nat-rule-form" onsubmit="event.preventDefault(); applyNATRule(true);" class="flex-1 overflow-y-auto px-4 py-3 min-w-0 space-y-1">
          <input type="hidden" id="nat-modal-id">

          <!-- TAB PANE: GENERAL (Screenshot 1) -->
          <div id="nat-pane-general" class="nat-rule-pane space-y-1">
            <!-- Enabled -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Enabled</label>
              <div class="flex items-center">
                <input type="checkbox" id="nat-modal-enabled" checked class="rounded bg-[#15202e] border-[#26374d] text-sky-500 focus:ring-0 w-4 h-4 cursor-pointer">
              </div>
            </div>

            <!-- Comment -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Comment</label>
              <div class="flex-1">
                <input type="text" id="nat-modal-comment" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Chain -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Chain</label>
              <div class="flex-1">
                <select id="nat-modal-chain" onchange="handleNATChainChange()" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-sky-400 font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="srcnat" selected>srcnat</option>
                  <option value="dstnat">dstnat</option>
                </select>
              </div>
            </div>

            <!-- Src. Address -->
            <div class="flex items-center text-xs py-1" id="nat-row-src">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('src', true)" id="nat-plus-src" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-src" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-src" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-src" placeholder="192.168.10.0/24" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('src', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Address -->
            <div class="flex items-center text-xs py-1" id="nat-row-dst">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('dst', true)" id="nat-plus-dst" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-dst" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-dst" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-dst" placeholder="0.0.0.0/0" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('dst', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Address List -->
            <div class="flex items-center text-xs py-1" id="nat-row-srclist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Address List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('srclist', true)" id="nat-plus-srclist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-srclist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-srclist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-srclist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleNATField('srclist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Address List -->
            <div class="flex items-center text-xs py-1" id="nat-row-dstlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Address List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('dstlist', true)" id="nat-plus-dstlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-dstlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-dstlist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-dstlist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleNATField('dstlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Geo Location -->
            <div class="flex items-center text-xs py-1" id="nat-row-srcgeo">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Geo Location</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('srcgeo', true)" id="nat-plus-srcgeo" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-srcgeo" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-srcgeo" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-srcgeo" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleNATField('srcgeo', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Geo Location -->
            <div class="flex items-center text-xs py-1" id="nat-row-dstgeo">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Geo Location</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('dstgeo', true)" id="nat-plus-dstgeo" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-dstgeo" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-dstgeo" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-dstgeo" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleNATField('dstgeo', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Protocol -->
            <div class="flex items-center text-xs py-1" id="nat-row-proto">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Protocol</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('proto', true)" id="nat-plus-proto" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-proto" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-proto" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-proto" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="tcp">6 (tcp)</option>
                    <option value="udp">17 (udp)</option>
                    <option value="icmp">1 (icmp)</option>
                    <option value="gre">47 (gre)</option>
                    <option value="esp">50 (esp)</option>
                    <option value="all">all</option>
                  </select>
                  <button type="button" onclick="toggleNATField('proto', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Port -->
            <div class="flex items-center text-xs py-1" id="nat-row-sport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('sport', true)" id="nat-plus-sport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-sport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-sport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-sport" placeholder="e.g. 80,443 or 1000-2000" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('sport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Port -->
            <div class="flex items-center text-xs py-1" id="nat-row-dport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('dport', true)" id="nat-plus-dport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-dport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-dport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-dport" placeholder="e.g. 80,443,8080" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('dport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Any. Port -->
            <div class="flex items-center text-xs py-1" id="nat-row-anyport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Any. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('anyport', true)" id="nat-plus-anyport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-anyport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-anyport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-anyport" placeholder="53" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('anyport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- In. Interface -->
            <div class="flex items-center text-xs py-1" id="nat-row-iniface">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Interface</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('iniface', true)" id="nat-plus-iniface" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-iniface" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-iniface" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-iniface" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleNATField('iniface', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Interface -->
            <div class="flex items-center text-xs py-1" id="nat-row-outiface">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Interface</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('outiface', true)" id="nat-plus-outiface" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-outiface" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-outiface" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-outiface" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleNATField('outiface', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- In. Interface List -->
            <div class="flex items-center text-xs py-1" id="nat-row-inifacelist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Interface List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('inifacelist', true)" id="nat-plus-inifacelist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-inifacelist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-inifacelist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-inifacelist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="all">all</option>
                    <option value="none">none</option>
                    <option value="dynamic">dynamic</option>
                    <option value="LAN">LAN</option>
                    <option value="WAN">WAN</option>
                  </select>
                  <button type="button" onclick="toggleNATField('inifacelist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Interface List -->
            <div class="flex items-center text-xs py-1" id="nat-row-outifacelist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Interface List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('outifacelist', true)" id="nat-plus-outifacelist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-outifacelist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-outifacelist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="nat-val-outifacelist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="all">all</option>
                    <option value="none">none</option>
                    <option value="dynamic">dynamic</option>
                    <option value="LAN">LAN</option>
                    <option value="WAN">WAN</option>
                  </select>
                  <button type="button" onclick="toggleNATField('outifacelist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Packet Mark -->
            <div class="flex items-center text-xs py-1" id="nat-row-pktmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('pktmark', true)" id="nat-plus-pktmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-pktmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-pktmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-pktmark" placeholder="e.g. qos_nat" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('pktmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Mark -->
            <div class="flex items-center text-xs py-1" id="nat-row-connmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('connmark', true)" id="nat-plus-connmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-connmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-connmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-connmark" placeholder="e.g. wan1_conn" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('connmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Routing Mark -->
            <div class="flex items-center text-xs py-1" id="nat-row-routingmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Routing Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('routingmark', true)" id="nat-plus-routingmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-routingmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-routingmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-routingmark" placeholder="e.g. to_wan2" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('routingmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Connection Type -->
            <div class="flex items-center text-xs py-1" id="nat-row-conntype">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Type</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('conntype', true)" id="nat-plus-conntype" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-conntype" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="nat-val-conntype" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="ftp">ftp</option>
                    <option value="h323">h323</option>
                    <option value="irc">irc</option>
                    <option value="pptp">pptp</option>
                    <option value="sip">sip</option>
                    <option value="tftp">tftp</option>
                  </select>
                  <button type="button" onclick="toggleNATField('conntype', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: ADVANCED (Screenshot 2) -->
          <div id="nat-pane-advanced" class="nat-rule-pane hidden space-y-1">
            <!-- Layer7 Protocol -->
            <div class="flex items-center text-xs py-1" id="nat-row-layer7">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Layer7 Protocol</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('layer7', true)" id="nat-plus-layer7" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-layer7" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-layer7" placeholder="e.g. youtube_regex" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('layer7', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Content -->
            <div class="flex items-center text-xs py-1" id="nat-row-content">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Content</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('content', true)" id="nat-plus-content" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-content" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-content" placeholder="e.g. facebook.com" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('content', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Bytes -->
            <div class="flex items-center text-xs py-1" id="nat-row-connbytes">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Bytes</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('connbytes', true)" id="nat-plus-connbytes" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-connbytes" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-connbytes" placeholder="e.g. 0-500000" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('connbytes', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Rate -->
            <div class="flex items-center text-xs py-1" id="nat-row-connrate">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Rate</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('connrate', true)" id="nat-plus-connrate" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-connrate" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-connrate" placeholder="e.g. 0-100k" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('connrate', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Per Connection Classifier -->
            <div class="flex items-center text-xs py-1" id="nat-row-pcc">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Per Connection Classifier</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('pcc', true)" id="nat-plus-pcc" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-pcc" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-pcc" placeholder="both-addresses:2/0" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('pcc', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Src. MAC Address -->
            <div class="flex items-center text-xs py-1" id="nat-row-srcmac">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. MAC Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('srcmac', true)" id="nat-plus-srcmac" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-srcmac" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="nat-inv-srcmac" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="nat-val-srcmac" placeholder="e.g. 00:11:22:33:44:55" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('srcmac', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Out. Bridge Port -->
            <div class="flex items-center text-xs py-1" id="nat-row-outbridgeport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Bridge Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('outbridgeport', true)" id="nat-plus-outbridgeport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-outbridgeport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-outbridgeport" placeholder="e.g. eth1" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('outbridgeport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- In. Bridge Port -->
            <div class="flex items-center text-xs py-1" id="nat-row-inbridgeport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Bridge Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('inbridgeport', true)" id="nat-plus-inbridgeport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-inbridgeport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-inbridgeport" placeholder="e.g. eth0" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('inbridgeport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- In. Bridge Port List -->
            <div class="flex items-center text-xs py-1" id="nat-row-inbridgeportlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Bridge Port List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('inbridgeportlist', true)" id="nat-plus-inbridgeportlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-inbridgeportlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-inbridgeportlist" placeholder="e.g. LAN" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('inbridgeportlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Bridge Port List -->
            <div class="flex items-center text-xs py-1" id="nat-row-outbridgeportlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Bridge Port List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('outbridgeportlist', true)" id="nat-plus-outbridgeportlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-outbridgeportlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-outbridgeportlist" placeholder="e.g. WAN" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('outbridgeportlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- IPsec Policy -->
            <div class="flex items-center text-xs py-1" id="nat-row-ipsec">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">IPsec Policy</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('ipsec', true)" id="nat-plus-ipsec" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-ipsec" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="nat-val-ipsec" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="in:ipsec">in:ipsec</option>
                    <option value="out:ipsec">out:ipsec</option>
                    <option value="in:none">in:none</option>
                    <option value="out:none">out:none</option>
                  </select>
                  <button type="button" onclick="toggleNATField('ipsec', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Ingress Priority -->
            <div class="flex items-center text-xs py-1" id="nat-row-ingresspriority">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Ingress Priority</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('ingresspriority', true)" id="nat-plus-ingresspriority" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-ingresspriority" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-ingresspriority" placeholder="0-7" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('ingresspriority', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Priority -->
            <div class="flex items-center text-xs py-1" id="nat-row-priority">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Priority</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('priority', true)" id="nat-plus-priority" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-priority" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-priority" placeholder="0-7" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('priority', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- DSCP -->
            <div class="flex items-center text-xs py-1" id="nat-row-dscp">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">DSCP</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('dscp', true)" id="nat-plus-dscp" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-dscp" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-dscp" placeholder="0-63" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('dscp', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TCP MSS -->
            <div class="flex items-center text-xs py-1" id="nat-row-tcpmss">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TCP MSS</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('tcpmss', true)" id="nat-plus-tcpmss" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-tcpmss" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-tcpmss" placeholder="e.g. 1440" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('tcpmss', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TOS -->
            <div class="flex items-center text-xs py-1" id="nat-row-tos">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TOS</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <select id="nat-val-tos" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="">(any)</option>
                  <option value="0">0 (Normal Service)</option>
                  <option value="min-delay">min-delay (16)</option>
                  <option value="max-throughput">max-throughput (8)</option>
                  <option value="max-reliability">max-reliability (4)</option>
                  <option value="min-cost">min-cost (2)</option>
                </select>
              </div>
            </div>

            <!-- Packet Size -->
            <div class="flex items-center text-xs py-1" id="nat-row-pktsize">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Size</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('pktsize', true)" id="nat-plus-pktsize" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-pktsize" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-pktsize" placeholder="e.g. 64-1500" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('pktsize', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Random -->
            <div class="flex items-center text-xs py-1" id="nat-row-random">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Random</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('random', true)" id="nat-plus-random" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-random" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-random" placeholder="1-100 %" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('random', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- ICMP Options -->
            <div class="flex items-center text-xs py-1" id="nat-row-icmpoptions">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">ICMP Options</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('icmpoptions', true)" id="nat-plus-icmpoptions" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-icmpoptions" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-icmpoptions" placeholder="e.g. 8:0 (echo-request)" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('icmpoptions', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- IPv4 Options -->
            <div class="flex items-center text-xs py-1" id="nat-row-ipv4options">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">IPv4 Options</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('ipv4options', true)" id="nat-plus-ipv4options" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-ipv4options" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-ipv4options" placeholder="any, loose-source-routing" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('ipv4options', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TTL -->
            <div class="flex items-center text-xs py-1" id="nat-row-ttl">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TTL</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('ttl', true)" id="nat-plus-ttl" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-ttl" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-ttl" placeholder="equal:64 or less-than:10" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('ttl', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: EXTRA -->
          <div id="nat-pane-extra" class="nat-rule-pane hidden space-y-1">
            <!-- Time -->
            <div class="flex items-center text-xs py-1" id="nat-row-time">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Time</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('time', true)" id="nat-plus-time" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-time" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-time" placeholder="00:00:00-23:59:59" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('time', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Days -->
            <div class="flex items-center text-xs py-1" id="nat-row-days">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Days</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('days', true)" id="nat-plus-days" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-days" class="hidden flex-1 flex flex-wrap items-center gap-2 min-w-0 bg-[#15202e] border border-[#26374d] rounded px-2 py-1">
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="nat-day-sun" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">sun</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="nat-day-mon" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">mon</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="nat-day-tue" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">tue</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="nat-day-wed" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">wed</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="nat-day-thu" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">thu</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="nat-day-fri" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">fri</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="nat-day-sat" checked class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">sat</span></label>
                  <button type="button" onclick="toggleNATField('days', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0 ml-auto">-</button>
                </div>
              </div>
            </div>

            <!-- Limit -->
            <div class="flex items-center text-xs py-1" id="nat-row-limit">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Limit</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('limit', true)" id="nat-plus-limit" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-limit" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-limit" placeholder="e.g. 100,5:packet" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('limit', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Limit -->
            <div class="flex items-center text-xs py-1" id="nat-row-dstlimit">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Limit</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('dstlimit', true)" id="nat-plus-dstlimit" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-dstlimit" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-dstlimit" placeholder="e.g. 100/5s,5" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('dstlimit', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- PSD -->
            <div class="flex items-center text-xs py-1" id="nat-row-psd">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">PSD</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('psd', true)" id="nat-plus-psd" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-psd" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-psd" placeholder="Weight: 21, 3s, 3, 1" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('psd', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: ACTION (Screenshot 3) -->
          <div id="nat-pane-action" class="nat-rule-pane hidden space-y-2">
            <!-- Action -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Action</label>
              <div class="flex-1">
                <select id="nat-modal-action" onchange="toggleNATActionFields()" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-sky-400 font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="accept">accept</option>
                  <option value="add-dst-to-address-list">add dst to address list</option>
                  <option value="add-src-to-address-list">add src to address list</option>
                  <option value="dst-nat">dst-nat</option>
                  <option value="endpoint-independent-nat">endpoint-independent-nat</option>
                  <option value="jump">jump</option>
                  <option value="log">log</option>
                  <option value="masquerade" selected>masquerade</option>
                  <option value="netmap">netmap</option>
                  <option value="passthrough">passthrough</option>
                  <option value="redirect">redirect</option>
                  <option value="return">return</option>
                  <option value="same">same</option>
                  <option value="socksify">socksify</option>
                  <option value="src-nat">src-nat</option>
                </select>
              </div>
            </div>

            <!-- To Addresses (Shown for src-nat, dst-nat, netmap, same, socksify, endpoint-independent-nat) -->
            <div id="nat-row-toaddr" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">To Addresses</label>
              <div class="flex-1">
                <input type="text" id="nat-modal-toaddr" placeholder="192.168.10.50 or WAN IP" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- To Ports (Shown for src-nat, dst-nat, redirect, masquerade, netmap, socksify, endpoint-independent-nat) -->
            <div id="nat-row-toport" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">To Ports</label>
              <div class="flex-1">
                <input type="text" id="nat-modal-toport" placeholder="80 or 8080 or 1024-65535" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Jump Target (Shown when action === jump) -->
            <div id="nat-action-jump-box" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-sky-300 shrink-0 select-none">Jump Target</label>
              <div class="flex-1">
                <input type="text" id="nat-modal-jumptarget" placeholder="chain name" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Address List & Timeout (Shown when action starts with add-) -->
            <div id="nat-action-addrlist-box" class="hidden space-y-1">
              <div class="flex items-center text-xs py-1">
                <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Address List</label>
                <div class="flex-1">
                  <input type="text" id="nat-modal-action-addrlist" list="fw-addrlist-datalist" placeholder="list name" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                </div>
              </div>
              <div class="flex items-center text-xs py-1">
                <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Timeout</label>
                <div class="flex-1">
                  <input type="text" id="nat-modal-action-timeout" placeholder="none or 1d 00:00:00" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Log -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Log</label>
              <div class="flex items-center">
                <input type="checkbox" id="nat-modal-log" onchange="toggleNATLogPrefix()" class="rounded bg-[#15202e] border-[#26374d] text-sky-500 focus:ring-0 w-4 h-4 cursor-pointer">
              </div>
            </div>

            <!-- Log Prefix -->
            <div class="flex items-center text-xs py-1" id="nat-row-logprefix">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Log Prefix</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleNATField('logprefix', true)" id="nat-plus-logprefix" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="nat-field-logprefix" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="nat-val-logprefix" placeholder="e.g. NAT_LOG: " class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleNATField('logprefix', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: STATISTICS (Screenshot 4) -->
          <div id="nat-pane-statistics" class="nat-rule-pane hidden space-y-2 py-1">
            <!-- Bytes -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Bytes</label>
              <div class="flex-1">
                <input type="text" id="nat-stat-bytes" readonly value="0 B" class="bg-[#121c27] border border-sky-600/80 rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <!-- Packets -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packets</label>
              <div class="flex-1">
                <input type="text" id="nat-stat-packets" readonly value="0" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <div class="h-1"></div>

            <!-- Rate -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Rate</label>
              <div class="flex-1">
                <input type="text" id="nat-stat-rate" readonly value="0 bps" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <!-- Packet Rate -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Rate</label>
              <div class="flex-1">
                <input type="text" id="nat-stat-pktrate" readonly value="0 p/s" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <div class="h-2"></div>

            <!-- Rate Graph -->
            <div class="space-y-1">
              <div class="text-[11px] text-slate-300 font-medium pl-1">Rate Graph</div>
              <div class="bg-[#0f1721] border border-[#202e40] rounded p-1.5 relative overflow-hidden">
                <svg id="nat-stat-rate-svg" class="w-full h-24" viewBox="0 0 500 100" preserveAspectRatio="none">
                  <!-- Generated grid and sparkline -->
                </svg>
              </div>
              <div class="flex items-center justify-center gap-1.5 text-[11px] text-slate-300 py-0.5">
                <span class="w-2 h-2 rounded-full bg-sky-400"></span>
                <span id="nat-stat-legend-rate" class="font-mono font-semibold text-white">0 bps</span>
                <span class="text-slate-400">Rate</span>
              </div>
            </div>

            <!-- Packet Rate Graph -->
            <div class="space-y-1">
              <div class="text-[11px] text-slate-300 font-medium pl-1">Packet Rate Graph</div>
              <div class="bg-[#0f1721] border border-[#202e40] rounded p-1.5 relative overflow-hidden">
                <svg id="nat-stat-pktrate-svg" class="w-full h-24" viewBox="0 0 500 100" preserveAspectRatio="none">
                  <!-- Generated grid and sparkline -->
                </svg>
              </div>
              <div class="flex items-center justify-center gap-1.5 text-[11px] text-slate-300 py-0.5">
                <span class="w-2 h-2 rounded-full bg-sky-400"></span>
                <span id="nat-stat-legend-pktrate" class="font-mono font-semibold text-white">0 p/s</span>
                <span class="text-slate-400">Packet Rate</span>
              </div>
            </div>
          </div>
        </form>

        <!-- Right Vertical Sidebar -->
        <div class="w-40 min-w-[150px] border-l border-[#213042] bg-[#121a24] p-3 text-xs flex flex-col space-y-4 shrink-0">
          <div>
            <button type="button" onclick="copyNATRule()" class="w-full flex items-center gap-2 text-slate-300 hover:text-sky-300 text-xs py-1 transition-colors">
              <svg class="w-3.5 h-3.5 text-slate-400" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                <rect x="9" y="9" width="13" height="13" rx="2" ry="2"></rect>
                <path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"></path>
              </svg>
              <span>Copy</span>
            </button>
          </div>

          <div class="space-y-2">
            <div class="text-slate-300 font-semibold flex items-center gap-1.5 text-xs">
              <span class="text-amber-400">⚡</span>
              <span>Actions</span>
            </div>
            <div class="flex flex-col space-y-1.5 pl-1">
              <button type="button" onclick="resetCurrentNATRuleCounters()" class="text-left text-slate-400 hover:text-sky-300 text-xs py-0.5 transition-colors">Reset Counters</button>
              <button type="button" onclick="resetAllFwCounters()" class="text-left text-slate-400 hover:text-sky-300 text-xs py-0.5 transition-colors">Reset All Counters</button>
            </div>
          </div>
        </div>
      </div>

      <!-- Window Bottom Button Bar -->
      <div class="bg-[#141e2b] border-t border-[#1f2d3e] px-4 py-2 flex items-center justify-end gap-2 shrink-0">
        <button type="button" onclick="closeNATModal()" class="px-4 py-1.5 rounded bg-[#1c2838] hover:bg-[#25364b] border border-[#2a3c54] text-xs font-medium text-slate-300 transition-colors">Cancel</button>
        <button type="button" onclick="applyNATRule(false)" class="px-5 py-1.5 rounded bg-[#0078d4] hover:bg-[#006cbd] text-xs font-semibold text-white shadow-sm transition-colors">Apply</button>
        <button type="button" onclick="applyNATRule(true)" class="px-5 py-1.5 rounded bg-[#0078d4] hover:bg-[#006cbd] text-xs font-semibold text-white shadow-sm transition-colors">OK</button>
      </div>
    </div>
  </div>

  <!-- ================= MODAL: FIREWALL MANGLE RULE (ROUTEROS WEBFIG / WINBOX V4 REPLICA) ================= -->
  <div id="mangle-modal" class="fixed inset-0 bg-black/60 backdrop-blur-[2px] z-50 hidden flex items-center justify-center p-2 sm:p-4">
    <div id="mangle-modal-window" class="bg-[#131b26] border border-[#243347] rounded-md shadow-2xl w-full max-w-[720px] max-h-[92vh] flex flex-col overflow-hidden text-xs select-none">
      
      <!-- Window Title Bar -->
      <div class="bg-[#162335] border-b border-[#223145] px-3.5 py-1.5 flex items-center justify-between shrink-0">
        <div class="flex items-center gap-2">
          <!-- WinBox v4 Logo -->
          <div class="flex items-center gap-0.5 text-cyan-400 font-bold font-mono text-[11px] leading-none">
            <svg class="w-3.5 h-3.5 text-cyan-400" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5">
              <path d="M4 5l3.5 10L11 5" stroke-linecap="round" stroke-linejoin="round"/>
              <path d="M15 5v5h4m0-5v10" stroke-linecap="round" stroke-linejoin="round"/>
              <circle cx="12" cy="20" r="1.5" fill="currentColor"/>
            </svg>
            <span class="text-cyan-400 font-bold text-xs tracking-tight">v4</span>
          </div>
          <span class="text-slate-200 font-medium text-xs">Mangle Rule &gt;</span>
          <span id="mangle-modal-badge" class="bg-[#0078d4] text-white text-[11px] px-2 py-0.5 rounded font-mono font-medium">New...</span>
        </div>
        <div class="flex items-center gap-2">
          <button type="button" onclick="toggleMaximizeMangleModal()" title="Maximize / Restore" class="text-slate-400 hover:text-white p-0.5 text-xs transition-colors">
            <svg class="w-3.5 h-3.5" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7"/></svg>
          </button>
          <button type="button" onclick="closeMangleModal()" title="Close" class="text-slate-400 hover:text-rose-400 p-0.5 text-xs font-bold leading-none transition-colors">✕</button>
        </div>
      </div>

      <!-- Window Tabs Bar -->
      <div class="bg-[#111923] border-b border-[#1f2d3e] px-2 flex items-center gap-1 shrink-0">
        <button type="button" onclick="switchMangleRuleTab('general')" id="mangle-tab-btn-general" class="mangle-rule-tab-btn bg-[#182638] text-white border-t-2 border-sky-400 px-3.5 py-1.5 text-xs font-medium transition-colors">General</button>
        <button type="button" onclick="switchMangleRuleTab('advanced')" id="mangle-tab-btn-advanced" class="mangle-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Advanced</button>
        <button type="button" onclick="switchMangleRuleTab('extra')" id="mangle-tab-btn-extra" class="mangle-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Extra</button>
        <button type="button" onclick="switchMangleRuleTab('action')" id="mangle-tab-btn-action" class="mangle-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Action</button>
        <button type="button" onclick="switchMangleRuleTab('statistics')" id="mangle-tab-btn-statistics" class="mangle-rule-tab-btn text-slate-400 hover:text-white hover:bg-[#15202d] border-t-2 border-transparent px-3.5 py-1.5 text-xs font-medium transition-colors">Statistics</button>
      </div>

      <!-- Window Body (Split Layout: Left Tab Content + Right Action Sidebar) -->
      <div class="flex-1 flex min-h-0 overflow-hidden">
        
        <!-- Form Content Container (Scrollable) -->
        <form id="mangle-rule-form" onsubmit="event.preventDefault(); applyMangleRule(true);" class="flex-1 overflow-y-auto px-4 py-3 min-w-0 space-y-1">
          <input type="hidden" id="mangle-modal-id">

          <!-- TAB PANE: GENERAL (Screenshot 1) -->
          <div id="mangle-pane-general" class="mangle-rule-pane space-y-1">
            <!-- Enabled -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Enabled</label>
              <div class="flex items-center">
                <input type="checkbox" id="mangle-modal-enabled" checked class="rounded bg-[#15202e] border-[#26374d] text-sky-500 focus:ring-0 w-4 h-4 cursor-pointer">
              </div>
            </div>

            <!-- Comment -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Comment</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-comment" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Chain -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Chain</label>
              <div class="flex-1">
                <select id="mangle-modal-chain" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-sky-400 font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="prerouting" selected>prerouting</option>
                  <option value="postrouting">postrouting</option>
                  <option value="forward">forward</option>
                  <option value="input">input</option>
                  <option value="output">output</option>
                </select>
              </div>
            </div>

            <!-- Src. Address -->
            <div class="flex items-center text-xs py-1" id="mangle-row-src">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('src', true)" id="mangle-plus-src" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-src" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-src" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-src" placeholder="192.168.10.0/24" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('src', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Address -->
            <div class="flex items-center text-xs py-1" id="mangle-row-dst">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('dst', true)" id="mangle-plus-dst" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-dst" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-dst" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-dst" placeholder="0.0.0.0/0" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('dst', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Address List -->
            <div class="flex items-center text-xs py-1" id="mangle-row-srclist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Address List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('srclist', true)" id="mangle-plus-srclist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-srclist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-srclist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-srclist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleMangleField('srclist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Address List -->
            <div class="flex items-center text-xs py-1" id="mangle-row-dstlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Address List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('dstlist', true)" id="mangle-plus-dstlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-dstlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-dstlist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-dstlist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleMangleField('dstlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Geo Location -->
            <div class="flex items-center text-xs py-1" id="mangle-row-srcgeo">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Geo Location</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('srcgeo', true)" id="mangle-plus-srcgeo" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-srcgeo" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-srcgeo" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-srcgeo" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleMangleField('srcgeo', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Geo Location -->
            <div class="flex items-center text-xs py-1" id="mangle-row-dstgeo">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Geo Location</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('dstgeo', true)" id="mangle-plus-dstgeo" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-dstgeo" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-dstgeo" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-dstgeo" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleMangleField('dstgeo', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Protocol -->
            <div class="flex items-center text-xs py-1" id="mangle-row-proto">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Protocol</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('proto', true)" id="mangle-plus-proto" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-proto" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-proto" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-proto" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="tcp">6 (tcp)</option>
                    <option value="udp">17 (udp)</option>
                    <option value="icmp">1 (icmp)</option>
                    <option value="gre">47 (gre)</option>
                    <option value="esp">50 (esp)</option>
                    <option value="all">all</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('proto', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Port -->
            <div class="flex items-center text-xs py-1" id="mangle-row-sport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('sport', true)" id="mangle-plus-sport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-sport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-sport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-sport" placeholder="e.g. 80,443 or 1000-2000" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('sport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Port -->
            <div class="flex items-center text-xs py-1" id="mangle-row-dport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('dport', true)" id="mangle-plus-dport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-dport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-dport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-dport" placeholder="e.g. 80,443,8080" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('dport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Any. Port -->
            <div class="flex items-center text-xs py-1" id="mangle-row-anyport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Any. Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('anyport', true)" id="mangle-plus-anyport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-anyport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-anyport" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-anyport" placeholder="53" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('anyport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- In. Interface -->
            <div class="flex items-center text-xs py-1" id="mangle-row-iniface">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Interface</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('iniface', true)" id="mangle-plus-iniface" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-iniface" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-iniface" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-iniface" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleMangleField('iniface', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Interface -->
            <div class="flex items-center text-xs py-1" id="mangle-row-outiface">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Interface</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('outiface', true)" id="mangle-plus-outiface" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-outiface" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-outiface" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-outiface" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full"></select>
                  <button type="button" onclick="toggleMangleField('outiface', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- In. Interface List -->
            <div class="flex items-center text-xs py-1" id="mangle-row-inifacelist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Interface List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('inifacelist', true)" id="mangle-plus-inifacelist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-inifacelist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-inifacelist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-inifacelist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="all">all</option>
                    <option value="none">none</option>
                    <option value="dynamic">dynamic</option>
                    <option value="LAN">LAN</option>
                    <option value="WAN">WAN</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('inifacelist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Interface List -->
            <div class="flex items-center text-xs py-1" id="mangle-row-outifacelist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Interface List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('outifacelist', true)" id="mangle-plus-outifacelist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-outifacelist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-outifacelist" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <select id="mangle-val-outifacelist" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="all">all</option>
                    <option value="none">none</option>
                    <option value="dynamic">dynamic</option>
                    <option value="LAN">LAN</option>
                    <option value="WAN">WAN</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('outifacelist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Packet Mark -->
            <div class="flex items-center text-xs py-1" id="mangle-row-pktmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('pktmark', true)" id="mangle-plus-pktmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-pktmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-pktmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-pktmark" placeholder="e.g. qos_voip" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('pktmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Mark -->
            <div class="flex items-center text-xs py-1" id="mangle-row-connmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('connmark', true)" id="mangle-plus-connmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-connmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-connmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-connmark" placeholder="e.g. wan1_conn" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('connmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Routing Mark -->
            <div class="flex items-center text-xs py-1" id="mangle-row-routingmark">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Routing Mark</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('routingmark', true)" id="mangle-plus-routingmark" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-routingmark" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-routingmark" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-routingmark" placeholder="e.g. to_wan2" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('routingmark', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Connection Type -->
            <div class="flex items-center text-xs py-1" id="mangle-row-conntype">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Type</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('conntype', true)" id="mangle-plus-conntype" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-conntype" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="mangle-val-conntype" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="ftp">ftp</option>
                    <option value="h323">h323</option>
                    <option value="irc">irc</option>
                    <option value="pptp">pptp</option>
                    <option value="sip">sip</option>
                    <option value="tftp">tftp</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('conntype', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Connection State -->
            <div class="flex items-center text-xs py-1" id="mangle-row-cs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection State</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('cs', true)" id="mangle-plus-cs" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-cs" class="hidden flex-1 flex flex-wrap items-center gap-2 min-w-0 bg-[#15202e] border border-[#26374d] rounded px-2 py-1">
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="mangle-modal-cs-established" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">established</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="mangle-modal-cs-related" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">related</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="mangle-modal-cs-new" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">new</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="mangle-modal-cs-invalid" class="rounded bg-[#101721] border-[#2b3e56] text-rose-500"><span class="text-slate-300">invalid</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="mangle-modal-cs-untracked" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500"><span class="text-slate-300">untracked</span></label>
                  <button type="button" onclick="toggleMangleField('cs', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0 ml-auto" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>

            <!-- Connection NAT State -->
            <div class="flex items-center text-xs py-1" id="mangle-row-natstate">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection NAT State</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('natstate', true)" id="mangle-plus-natstate" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-natstate" class="hidden flex-1 flex items-center gap-3 min-w-0 bg-[#15202e] border border-[#26374d] rounded px-2 py-1">
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="mangle-modal-nat-srcnat" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">srcnat</span></label>
                  <label class="flex items-center gap-1 cursor-pointer"><input type="checkbox" id="mangle-modal-nat-dstnat" class="rounded bg-[#101721] border-[#2b3e56] text-sky-500"><span class="text-slate-300">dstnat</span></label>
                  <button type="button" onclick="toggleMangleField('natstate', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0 ml-auto" title="Remove / Clear">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: ADVANCED (Screenshot 2) -->
          <div id="mangle-pane-advanced" class="mangle-rule-pane hidden space-y-1">
            <!-- Layer7 Protocol -->
            <div class="flex items-center text-xs py-1" id="mangle-row-layer7">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Layer7 Protocol</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('layer7', true)" id="mangle-plus-layer7" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-layer7" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-layer7" placeholder="e.g. youtube_regex" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('layer7', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Content -->
            <div class="flex items-center text-xs py-1" id="mangle-row-content">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Content</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('content', true)" id="mangle-plus-content" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-content" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-content" placeholder="e.g. facebook.com" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('content', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Bytes -->
            <div class="flex items-center text-xs py-1" id="mangle-row-connbytes">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Bytes</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('connbytes', true)" id="mangle-plus-connbytes" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-connbytes" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-connbytes" placeholder="e.g. 0-500000" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('connbytes', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Rate -->
            <div class="flex items-center text-xs py-1" id="mangle-row-connrate">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Rate</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('connrate', true)" id="mangle-plus-connrate" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-connrate" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-connrate" placeholder="e.g. 0-100k" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('connrate', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Per Connection Classifier -->
            <div class="flex items-center text-xs py-1" id="mangle-row-pcc">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Per Connection Classifier</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('pcc', true)" id="mangle-plus-pcc" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-pcc" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-pcc" placeholder="both-addresses:2/0" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('pcc', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Src. MAC Address -->
            <div class="flex items-center text-xs py-1" id="mangle-row-srcmac">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. MAC Address</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('srcmac', true)" id="mangle-plus-srcmac" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-srcmac" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <label title="Invert match (!)" class="flex items-center gap-1 cursor-pointer pr-1 select-none">
                    <input type="checkbox" id="mangle-inv-srcmac" class="rounded bg-[#101721] border-[#2b3e56] text-amber-500 focus:ring-0 w-3.5 h-3.5">
                    <span class="font-mono font-bold text-amber-400 text-xs">!</span>
                  </label>
                  <input type="text" id="mangle-val-srcmac" placeholder="AA:BB:CC:DD:EE:FF" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('srcmac', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Out. Bridge Port -->
            <div class="flex items-center text-xs py-1" id="mangle-row-outbridgeport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Bridge Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('outbridgeport', true)" id="mangle-plus-outbridgeport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-outbridgeport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-outbridgeport" placeholder="ether1" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('outbridgeport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- In. Bridge Port -->
            <div class="flex items-center text-xs py-1" id="mangle-row-inbridgeport">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Bridge Port</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('inbridgeport', true)" id="mangle-plus-inbridgeport" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-inbridgeport" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-inbridgeport" placeholder="ether2" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('inbridgeport', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- In. Bridge Port List -->
            <div class="flex items-center text-xs py-1" id="mangle-row-inbridgeportlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">In. Bridge Port List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('inbridgeportlist', true)" id="mangle-plus-inbridgeportlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-inbridgeportlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-inbridgeportlist" placeholder="LAN_Ports" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('inbridgeportlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Out. Bridge Port List -->
            <div class="flex items-center text-xs py-1" id="mangle-row-outbridgeportlist">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Out. Bridge Port List</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('outbridgeportlist', true)" id="mangle-plus-outbridgeportlist" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-outbridgeportlist" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-outbridgeportlist" placeholder="WAN_Ports" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('outbridgeportlist', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- IPsec Policy -->
            <div class="flex items-center text-xs py-1" id="mangle-row-ipsec">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">IPsec Policy</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('ipsec', true)" id="mangle-plus-ipsec" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-ipsec" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="mangle-val-ipsec" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="none">none</option>
                    <option value="in:ipsec">in:ipsec</option>
                    <option value="in:none">in:none</option>
                    <option value="out:ipsec">out:ipsec</option>
                    <option value="out:none">out:none</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('ipsec', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TLS Host -->
            <div class="flex items-center text-xs py-1" id="mangle-row-tlshost">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TLS Host</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('tlshost', true)" id="mangle-plus-tlshost" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-tlshost" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-tlshost" placeholder="*.example.com" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('tlshost', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Ingress Priority -->
            <div class="flex items-center text-xs py-1" id="mangle-row-ingresspriority">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Ingress Priority</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('ingresspriority', true)" id="mangle-plus-ingresspriority" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-ingresspriority" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-ingresspriority" placeholder="0-7" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('ingresspriority', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Priority -->
            <div class="flex items-center text-xs py-1" id="mangle-row-priority">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Priority</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('priority', true)" id="mangle-plus-priority" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-priority" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-priority" placeholder="0-7" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('priority', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- DSCP -->
            <div class="flex items-center text-xs py-1" id="mangle-row-dscp">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">DSCP</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('dscp', true)" id="mangle-plus-dscp" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-dscp" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-dscp" placeholder="0-63" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('dscp', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TCP MSS -->
            <div class="flex items-center text-xs py-1" id="mangle-row-tcpmss">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TCP MSS</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('tcpmss', true)" id="mangle-plus-tcpmss" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-tcpmss" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-tcpmss" placeholder="e.g. 1440" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('tcpmss', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TOS -->
            <div class="flex items-center text-xs py-1" id="mangle-row-tos">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TOS</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <select id="mangle-val-tos" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="">(any)</option>
                  <option value="0">0 (Normal Service)</option>
                  <option value="min-delay">min-delay (16)</option>
                  <option value="max-throughput">max-throughput (8)</option>
                  <option value="max-reliability">max-reliability (4)</option>
                  <option value="min-cost">min-cost (2)</option>
                </select>
              </div>
            </div>

            <!-- Packet Size -->
            <div class="flex items-center text-xs py-1" id="mangle-row-pktsize">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Size</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('pktsize', true)" id="mangle-plus-pktsize" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-pktsize" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-pktsize" placeholder="e.g. 64-1500" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('pktsize', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Random -->
            <div class="flex items-center text-xs py-1" id="mangle-row-random">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Random</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('random', true)" id="mangle-plus-random" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-random" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-random" placeholder="1-100 %" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('random', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TCP Flags -->
            <div class="flex items-center text-xs py-1" id="mangle-row-tcpflags">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TCP Flags</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('tcpflags', true)" id="mangle-plus-tcpflags" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-tcpflags" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-tcpflags" placeholder="syn,ack,fin,rst" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('tcpflags', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- ICMP Options -->
            <div class="flex items-center text-xs py-1" id="mangle-row-icmpoptions">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">ICMP Options</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('icmpoptions', true)" id="mangle-plus-icmpoptions" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-icmpoptions" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-icmpoptions" placeholder="e.g. 8:0 (echo-request)" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('icmpoptions', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- IPv4 Options -->
            <div class="flex items-center text-xs py-1" id="mangle-row-ipv4options">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">IPv4 Options</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('ipv4options', true)" id="mangle-plus-ipv4options" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-ipv4options" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-ipv4options" placeholder="any, loose-source-routing" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('ipv4options', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- TTL -->
            <div class="flex items-center text-xs py-1" id="mangle-row-ttl">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">TTL</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('ttl', true)" id="mangle-plus-ttl" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-ttl" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-ttl" placeholder="equal:64 or less-than:10" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('ttl', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: EXTRA (Screenshot 3) -->
          <div id="mangle-pane-extra" class="mangle-rule-pane hidden space-y-1">
            <!-- Nth -->
            <div class="flex items-center text-xs py-1" id="mangle-row-nth">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Nth</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('nth', true)" id="mangle-plus-nth" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-nth" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-nth" placeholder="e.g. 2,1" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('nth', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Connection Limit -->
            <div class="flex items-center text-xs py-1" id="mangle-row-connlimit">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Connection Limit</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('connlimit', true)" id="mangle-plus-connlimit" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-connlimit" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-connlimit" placeholder="e.g. 100,32" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('connlimit', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Src. Address Type -->
            <div class="flex items-center text-xs py-1" id="mangle-row-srcaddrtype">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Src. Address Type</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('srcaddrtype', true)" id="mangle-plus-srcaddrtype" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-srcaddrtype" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="mangle-val-srcaddrtype" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="unicast">unicast</option>
                    <option value="local">local</option>
                    <option value="broadcast">broadcast</option>
                    <option value="multicast">multicast</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('srcaddrtype', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Address Type -->
            <div class="flex items-center text-xs py-1" id="mangle-row-dstaddrtype">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Address Type</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('dstaddrtype', true)" id="mangle-plus-dstaddrtype" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-dstaddrtype" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="mangle-val-dstaddrtype" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="unicast">unicast</option>
                    <option value="local">local</option>
                    <option value="broadcast">broadcast</option>
                    <option value="multicast">multicast</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('dstaddrtype', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Hotspot -->
            <div class="flex items-center text-xs py-1" id="mangle-row-hotspot">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Hotspot</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('hotspot', true)" id="mangle-plus-hotspot" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-hotspot" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="mangle-val-hotspot" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="from-client">from-client</option>
                    <option value="to-client">to-client</option>
                    <option value="auth">auth</option>
                    <option value="http">http</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('hotspot', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- IP Fragment -->
            <div class="flex items-center text-xs py-1" id="mangle-row-ipfragment">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">IP Fragment</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('ipfragment', true)" id="mangle-plus-ipfragment" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-ipfragment" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <select id="mangle-val-ipfragment" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                    <option value="yes">yes</option>
                    <option value="no">no</option>
                  </select>
                  <button type="button" onclick="toggleMangleField('ipfragment', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Limit -->
            <div class="flex items-center text-xs py-1" id="mangle-row-limit">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Limit</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('limit', true)" id="mangle-plus-limit" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-limit" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-limit" placeholder="e.g. 100,5:packet" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('limit', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Dst. Limit -->
            <div class="flex items-center text-xs py-1" id="mangle-row-dstlimit">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Dst. Limit</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('dstlimit', true)" id="mangle-plus-dstlimit" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-dstlimit" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-dstlimit" placeholder="e.g. 100/5s,5" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('dstlimit', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- Time -->
            <div class="flex items-center text-xs py-1" id="mangle-row-time">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Time</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('time', true)" id="mangle-plus-time" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-time" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-time" placeholder="00:00:00-23:59:59" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('time', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>

            <!-- PSD -->
            <div class="flex items-center text-xs py-1" id="mangle-row-psd">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">PSD</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('psd', true)" id="mangle-plus-psd" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-psd" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-psd" placeholder="Weight: 21, 3s, 3, 1" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('psd', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: ACTION (Screenshot 4) -->
          <div id="mangle-pane-action" class="mangle-rule-pane hidden space-y-2">
            <!-- Action -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Action</label>
              <div class="flex-1">
                <select id="mangle-modal-action" onchange="toggleMangleActionFields()" class="bg-[#15202e] border border-sky-600/80 rounded px-2.5 py-1 text-xs text-sky-400 font-mono focus:outline-none focus:border-sky-500 w-full cursor-pointer">
                  <option value="accept" selected>accept</option>
                  <option value="add-dst-to-address-list">add-dst-to-address-list</option>
                  <option value="add-src-to-address-list">add-src-to-address-list</option>
                  <option value="change-dscp">change-dscp</option>
                  <option value="change-mss">change-mss</option>
                  <option value="change-ttl">change-ttl</option>
                  <option value="clear-df">clear-df</option>
                  <option value="fasttrack-connection">fasttrack-connection</option>
                  <option value="jump">jump</option>
                  <option value="log">log</option>
                  <option value="mark-connection">mark-connection</option>
                  <option value="mark-packet">mark-packet</option>
                  <option value="mark-routing">mark-routing</option>
                  <option value="passthrough">passthrough</option>
                  <option value="return">return</option>
                  <option value="route">route</option>
                  <option value="set-priority">set-priority</option>
                  <option value="sniff-pc">sniff-pc</option>
                  <option value="sniff-tzsp">sniff-tzsp</option>
                  <option value="strip-ipv4-options">strip-ipv4-options</option>
                </select>
              </div>
            </div>

            <!-- New Connection Mark (when mark-connection) -->
            <div id="mangle-row-newconnmark" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">New Connection Mark</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-newconnmark" placeholder="e.g. wan1_conn" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- New Routing Mark (when mark-routing) -->
            <div id="mangle-row-newroutingmark" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">New Routing Mark</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-newroutingmark" placeholder="e.g. to_wan2" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- New Packet Mark (when mark-packet) -->
            <div id="mangle-row-newpktmark" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">New Packet Mark</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-newpktmark" placeholder="e.g. qos_voip" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- New TCP MSS (when change-mss) -->
            <div id="mangle-row-newmss" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">New TCP MSS</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-newmss" placeholder="1440 or clamp-to-pmtu" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- New DSCP (when change-dscp) -->
            <div id="mangle-row-newdscp" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">New DSCP</label>
              <div class="flex-1">
                <input type="number" id="mangle-modal-newdscp" min="0" max="63" placeholder="0-63" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- New TTL (when change-ttl) -->
            <div id="mangle-row-newttl" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">New TTL</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-newttl" placeholder="set:64, decrement:1, increment:1" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- New Priority (when set-priority) -->
            <div id="mangle-row-newpriority" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">New Priority</label>
              <div class="flex-1">
                <input type="number" id="mangle-modal-newpriority" min="0" max="7" placeholder="0-7" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Route (when route) -->
            <div id="mangle-row-route" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Route</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-route" placeholder="e.g. 192.168.1.1 or routing table" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Sniff Target (when sniff-pc or sniff-tzsp) -->
            <div id="mangle-row-sniff" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Sniff Target</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-sniff" placeholder="IP / Host / Port" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Passthrough Checkbox (visible for marks / changes) -->
            <div id="mangle-row-passthrough" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Passthrough</label>
              <div class="flex items-center">
                <input type="checkbox" id="mangle-modal-passthrough" checked class="rounded bg-[#15202e] border-[#26374d] text-sky-500 focus:ring-0 w-4 h-4 cursor-pointer">
              </div>
            </div>

            <!-- Jump Target (Shown when action === jump) -->
            <div id="mangle-action-jump-box" class="hidden flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-sky-300 shrink-0 select-none">Jump Target</label>
              <div class="flex-1">
                <input type="text" id="mangle-modal-jumptarget" placeholder="chain name" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
              </div>
            </div>

            <!-- Address List & Timeout (Shown when action starts with add-) -->
            <div id="mangle-action-addrlist-box" class="hidden space-y-1">
              <div class="flex items-center text-xs py-1">
                <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Address List</label>
                <div class="flex-1">
                  <input type="text" id="mangle-modal-action-addrlist" list="fw-addrlist-datalist" placeholder="list name" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                </div>
              </div>
              <div class="flex items-center text-xs py-1">
                <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Timeout</label>
                <div class="flex-1">
                  <input type="text" id="mangle-modal-action-timeout" placeholder="none or 1d 00:00:00" class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white font-mono focus:outline-none focus:border-sky-500 w-full">
                </div>
              </div>
            </div>

            <hr class="border-[#213042] my-2">

            <!-- Log -->
            <div class="flex items-center text-xs py-1">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Log</label>
              <div class="flex items-center">
                <input type="checkbox" id="mangle-modal-log" onchange="toggleMangleLogPrefix()" class="rounded bg-[#15202e] border-[#26374d] text-sky-500 focus:ring-0 w-4 h-4 cursor-pointer">
              </div>
            </div>

            <!-- Log Prefix -->
            <div class="flex items-center text-xs py-1" id="mangle-row-logprefix">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Log Prefix</label>
              <div class="flex-1 flex items-center gap-1.5 min-w-0">
                <button type="button" onclick="toggleMangleField('logprefix', true)" id="mangle-plus-logprefix" class="w-5 h-5 flex items-center justify-center bg-[#172435] hover:bg-[#1e3047] border border-[#2b3e56] rounded text-slate-300 hover:text-sky-300 text-xs font-bold leading-none">+</button>
                <div id="mangle-field-logprefix" class="hidden flex-1 flex items-center gap-1.5 min-w-0">
                  <input type="text" id="mangle-val-logprefix" placeholder="e.g. MANGLE_LOG: " class="bg-[#15202e] border border-[#26374d] rounded px-2.5 py-1 text-xs text-white focus:outline-none focus:border-sky-500 w-full font-mono">
                  <button type="button" onclick="toggleMangleField('logprefix', false)" class="w-5 h-5 flex items-center justify-center text-slate-500 hover:text-rose-400 text-xs font-bold leading-none shrink-0">-</button>
                </div>
              </div>
            </div>
          </div>

          <!-- TAB PANE: STATISTICS -->
          <div id="mangle-pane-statistics" class="mangle-rule-pane hidden space-y-2 py-1">
            <!-- Bytes -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Bytes</label>
              <div class="flex-1">
                <input type="text" id="mangle-stat-bytes" readonly value="0 B" class="bg-[#121c27] border border-sky-600/80 rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <!-- Packets -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packets</label>
              <div class="flex-1">
                <input type="text" id="mangle-stat-packets" readonly value="0" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <div class="h-1"></div>

            <!-- Rate -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Rate</label>
              <div class="flex-1">
                <input type="text" id="mangle-stat-rate" readonly value="0 bps" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <!-- Packet Rate -->
            <div class="flex items-center text-xs">
              <label class="w-36 sm:w-44 text-right pr-3.5 text-slate-300 shrink-0 select-none">Packet Rate</label>
              <div class="flex-1">
                <input type="text" id="mangle-stat-pktrate" readonly value="0 p/s" class="bg-[#121c27] border border-[#26374d] rounded px-2.5 py-1 text-xs text-slate-200 font-mono w-full select-all">
              </div>
            </div>

            <div class="h-2"></div>

            <!-- Rate Graph -->
            <div class="space-y-1">
              <div class="text-[11px] text-slate-300 font-medium pl-1">Rate Graph</div>
              <div class="bg-[#0f1721] border border-[#202e40] rounded p-1.5 relative overflow-hidden">
                <svg id="mangle-stat-rate-svg" class="w-full h-24" viewBox="0 0 500 100" preserveAspectRatio="none">
                  <!-- Generated grid and sparkline -->
                </svg>
              </div>
              <div class="flex items-center justify-center gap-1.5 text-[11px] text-slate-300 py-0.5">
                <span class="w-2 h-2 rounded-full bg-sky-400"></span>
                <span id="mangle-stat-legend-rate" class="font-mono font-semibold text-white">0 bps</span>
                <span class="text-slate-400">Rate</span>
              </div>
            </div>

            <!-- Packet Rate Graph -->
            <div class="space-y-1">
              <div class="text-[11px] text-slate-300 font-medium pl-1">Packet Rate Graph</div>
              <div class="bg-[#0f1721] border border-[#202e40] rounded p-1.5 relative overflow-hidden">
                <svg id="mangle-stat-pktrate-svg" class="w-full h-24" viewBox="0 0 500 100" preserveAspectRatio="none">
                  <!-- Generated grid and sparkline -->
                </svg>
              </div>
              <div class="flex items-center justify-center gap-1.5 text-[11px] text-slate-300 py-0.5">
                <span class="w-2 h-2 rounded-full bg-sky-400"></span>
                <span id="mangle-stat-legend-pktrate" class="font-mono font-semibold text-white">0 p/s</span>
                <span class="text-slate-400">Packet Rate</span>
              </div>
            </div>
          </div>
        </form>

        <!-- Right Vertical Sidebar -->
        <div class="w-40 min-w-[150px] border-l border-[#213042] bg-[#121a24] p-3 text-xs flex flex-col space-y-4 shrink-0">
          <div>
            <button type="button" onclick="copyMangleRule()" class="w-full flex items-center gap-2 text-slate-300 hover:text-sky-300 text-xs py-1 transition-colors">
              <svg class="w-3.5 h-3.5 text-slate-400" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                <rect x="9" y="9" width="13" height="13" rx="2" ry="2"></rect>
                <path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"></path>
              </svg>
              <span>Copy</span>
            </button>
          </div>

          <div class="space-y-2">
            <div class="text-slate-300 font-semibold flex items-center gap-1.5 text-xs">
              <span class="text-amber-400">⚡</span>
              <span>Actions</span>
            </div>
            <div class="flex flex-col space-y-1.5 pl-1">
              <button type="button" onclick="resetCurrentMangleRuleCounters()" class="text-left text-slate-400 hover:text-sky-300 text-xs py-0.5 transition-colors">Reset Counters</button>
              <button type="button" onclick="resetAllFwCounters()" class="text-left text-slate-400 hover:text-sky-300 text-xs py-0.5 transition-colors">Reset All Counters</button>
            </div>
          </div>
        </div>
      </div>

      <!-- Window Bottom Button Bar -->
      <div class="bg-[#141e2b] border-t border-[#1f2d3e] px-4 py-2 flex items-center justify-end gap-2 shrink-0">
        <button type="button" onclick="closeMangleModal()" class="px-4 py-1.5 rounded bg-[#1c2838] hover:bg-[#25364b] border border-[#2a3c54] text-xs font-medium text-slate-300 transition-colors">Cancel</button>
        <button type="button" onclick="applyMangleRule(false)" class="px-5 py-1.5 rounded bg-[#0078d4] hover:bg-[#006cbd] text-xs font-semibold text-white shadow-sm transition-colors">Apply</button>
        <button type="button" onclick="applyMangleRule(true)" class="px-5 py-1.5 rounded bg-[#0078d4] hover:bg-[#006cbd] text-xs font-semibold text-white shadow-sm transition-colors">OK</button>
      </div>
    </div>
  </div>

  <!-- ================= MODAL: ADDRESS LIST ENTRY ================= -->
  <div id="addrlist-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-md shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="addrlist-modal-title" class="text-sm font-bold text-white">Add Address List Entry</h3>
        <button onclick="closeAddrListModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveAddrList(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="addrlist-modal-id">
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">List Name *</label>
          <input type="text" id="addrlist-modal-name" placeholder="e.g. LAN_Subnets, Blocked_IPs" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-emerald-500">
        </div>
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">IP Address / Subnet (CIDR) *</label>
          <input type="text" id="addrlist-modal-addr" placeholder="192.168.10.0/24 or 203.0.113.5" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-emerald-500">
        </div>
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="addrlist-modal-comment" placeholder="Optional description" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>
        <div class="pt-2">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="addrlist-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="font-medium text-slate-300">Disabled (X)</span>
          </label>
        </div>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeAddrListModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" id="addrlist-modal-submit-btn" class="px-5 py-2 rounded-lg font-semibold bg-emerald-600 hover:bg-emerald-500 text-white shadow-lg shadow-emerald-500/20">Save Entry</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: GEO INTERVAL SETTINGS ================= -->
  <div id="geo-interval-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-md shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 class="text-sm font-bold text-white">Geo-Location Auto-Update Settings</h3>
        <button onclick="closeGeoIntervalModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitGeoIntervalSettings(event)" class="p-6 space-y-4 text-xs">
        <div class="p-3 bg-slate-950/60 border border-slate-800 rounded-xl space-y-2">
          <label class="flex items-center space-x-2.5 cursor-pointer">
            <input type="checkbox" id="geo-cfg-autoupdate" checked class="rounded bg-slate-800 border-slate-700 text-emerald-500">
            <span class="font-semibold text-white">Enable Automatic Background Updates</span>
          </label>
          <p class="text-[11px] text-slate-400 pl-6">Automatically fetches the latest country IP blocks from IPdeny registries and updates active kernel ipsets without service interruption.</p>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Update Interval *</label>
          <select id="geo-cfg-interval" onchange="toggleCustomGeoInterval()" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-emerald-500">
            <option value="12">Every 12 Hours</option>
            <option value="24" selected>Every 24 Hours (Daily - Recommended)</option>
            <option value="48">Every 48 Hours (2 Days)</option>
            <option value="72">Every 3 Days</option>
            <option value="168">Every 7 Days (Weekly)</option>
            <option value="720">Every 30 Days (Monthly)</option>
            <option value="custom">Custom Hours...</option>
          </select>
        </div>

        <div id="geo-cfg-custom-box" class="hidden">
          <label class="block font-semibold text-slate-300 mb-1.5">Custom Interval (Hours)</label>
          <input type="number" id="geo-cfg-custom-hours" min="1" max="8760" value="24" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeGeoIntervalModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-emerald-600 hover:bg-emerald-500 text-white shadow-lg shadow-emerald-500/20">Save Schedule</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: GEO SUBNETS PREVIEW ================= -->
  <div id="geo-subnets-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 id="geo-subnets-title" class="text-sm font-bold text-white">Country Subnets</h3>
          <span id="geo-subnets-subtitle" class="text-[11px] font-mono text-slate-400">CIDR Blocks</span>
        </div>
        <button onclick="closeGeoSubnetsModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <div class="p-6 space-y-3 text-xs">
        <p class="text-slate-400">Showing first 100 subnets in this country zone:</p>
        <div id="geo-subnets-list" class="bg-slate-950 border border-slate-800 rounded-xl p-3 max-h-72 overflow-y-auto font-mono text-[11px] text-emerald-400 space-y-1"></div>
        <div class="pt-3 border-t border-slate-800 flex justify-end">
          <button type="button" onclick="closeGeoSubnetsModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Close</button>
        </div>
      </div>
    </div>
  </div>

  <!-- ================= MODAL: ADD / EDIT ROUTE ================= -->
  <div id="route-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="route-modal-title" class="text-sm font-bold text-white">Add Static Route</h3>
        <button onclick="closeRouteModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveRoute(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="route-modal-id">
        <input type="hidden" id="route-modal-old-dst">
        <input type="hidden" id="route-modal-old-gw">
        <input type="hidden" id="route-modal-old-distance">
        <input type="hidden" id="route-modal-old-table">
        <input type="hidden" id="route-modal-old-iface">

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Dst. Address (CIDR) *</label>
          <input type="text" id="route-modal-dst" value="0.0.0.0/0" placeholder="0.0.0.0/0 or 10.0.0.0/8" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-cyan-500">
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Gateway (IP or Interface)</label>
            <input type="text" id="route-modal-gw" placeholder="10.42.36.1 or wg0" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-cyan-500">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Routing Table / Mark</label>
            <select id="route-modal-table" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-cyan-500">
              <option value="main" selected>main</option>
            </select>
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Distance (Metric)</label>
            <input type="number" id="route-modal-distance" value="1" min="0" max="255" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-cyan-500">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Interface (Optional)</label>
            <select id="route-modal-iface" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-cyan-500"></select>
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="route-modal-comment" placeholder="e.g. Primary WAN Default Gateway" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>

        <div class="pt-2">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="route-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="font-medium text-slate-300">Disabled (X)</span>
          </label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeRouteModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-cyan-600 hover:bg-cyan-500 text-white shadow-lg shadow-cyan-500/20">Save Route</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD POLICY ROUTING RULE ================= -->
  <div id="prule-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="prule-modal-title" class="text-sm font-bold text-white">Add Policy Routing Rule (/ip route rule)</h3>
        <button onclick="closePolicyRuleModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSavePolicyRule(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="prule-modal-id">

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Priority / Preference</label>
            <input type="number" id="prule-modal-pref" placeholder="1000" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Routing Mark (fwmark)</label>
            <input type="text" id="prule-modal-mark" placeholder="e.g. to_WAN2 or 100" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Src. Address (CIDR)</label>
            <input type="text" id="prule-modal-src" placeholder="192.168.10.0/24" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Dst. Address (CIDR)</label>
            <input type="text" id="prule-modal-dst" placeholder="0.0.0.0/0" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Lookup Table *</label>
            <select id="prule-modal-table" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Action</label>
            <select id="prule-modal-action" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="lookup" selected>lookup (standard)</option>
              <option value="unreachable">unreachable</option>
              <option value="blackhole">blackhole</option>
            </select>
          </div>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closePolicyRuleModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-cyan-600 hover:bg-cyan-500 text-white shadow-lg shadow-cyan-500/20">Save Policy Rule</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: CREATE ROUTING TABLE ================= -->
  <div id="table-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-md shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 class="text-sm font-bold text-white">Create New Routing Table</h3>
        <button onclick="closeTableModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveTable(event)" class="p-6 space-y-4 text-xs">
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Table Name *</label>
          <input type="text" id="table-modal-name" placeholder="e.g. wan2_traffic, vpn_table" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-cyan-500">
        </div>
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">FIB Table ID (Optional)</label>
          <input type="number" id="table-modal-id" min="1" max="252" placeholder="Auto (100+)" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
        </div>
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="table-modal-comment" placeholder="Purpose of this routing table" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeTableModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-cyan-600 hover:bg-cyan-500 text-white shadow-lg shadow-cyan-500/20">Create Table</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD/EDIT EoIP TUNNEL ================= -->
  <div id="eoip-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 id="eoip-modal-title" class="text-sm font-bold text-white">Add EoIP Tunnel</h3>
          <p class="text-[11px] text-slate-400">Layer 2 Ethernet-over-IP (GRETAP) Tunnel</p>
        </div>
        <button onclick="closeEoIPModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveEoIP(event)" class="p-6 space-y-4 text-xs font-sans">
        <input type="hidden" id="eoip-modal-id">
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Interface Name *</label>
            <input type="text" id="eoip-modal-name" placeholder="eoip-tunnel1" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-emerald-500">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Tunnel ID (1 - 65535) *</label>
            <input type="number" id="eoip-modal-tunnelid" min="1" max="65535" placeholder="10" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-emerald-500">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Remote Address (Remote Router IP) *</label>
            <input type="text" id="eoip-modal-remote" placeholder="e.g. 10.2.145.253" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-emerald-500">
            <span class="text-[10px] text-slate-400">Underlay public or transport IP of remote peer</span>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Tunnel IP / Subnet (CIDR)</label>
            <input type="text" id="eoip-modal-ip" placeholder="e.g. 172.16.33.254/30" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-emerald-500">
            <span class="text-[10px] text-slate-400">Overlay IPv4 assigned directly to tunnel (/30, /24)</span>
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Underlay Local IP (GRE Source)</label>
            <input type="text" id="eoip-modal-local" placeholder="e.g. 10.42.36.5" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-emerald-500">
            <span class="text-[10px] text-slate-400">Local router IP for outer GRE packets</span>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">MAC Address (Auto if empty)</label>
            <input type="text" id="eoip-modal-mac" placeholder="02:64:xx:xx:xx:xx" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">MTU</label>
            <input type="number" id="eoip-modal-mtu" value="1500" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
            <input type="text" id="eoip-modal-comment" placeholder="Bridge to Office Branch" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
          </div>
        </div>

        <div class="flex items-center justify-between pt-1">
          <label class="flex items-center space-x-2 text-slate-300">
            <input type="checkbox" id="eoip-modal-clampmss" checked class="rounded bg-slate-800 border-slate-700 text-emerald-600">
            <span>Clamp TCP MSS (PMTUD protection)</span>
          </label>
          <label class="flex items-center space-x-2 text-slate-300">
            <input type="checkbox" id="eoip-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-600">
            <span>Disabled</span>
          </label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeEoIPModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-emerald-600 hover:bg-emerald-500 text-white shadow-lg shadow-emerald-500/20">Save Tunnel</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD/EDIT PPP SECRET (USER) ================= -->
  <div id="ppp-secret-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 id="secret-modal-title" class="text-sm font-bold text-white">Add PPP Secret</h3>
          <p class="text-[11px] text-slate-400">User account for PPPoE, PPTP, and L2TP authentication</p>
        </div>
        <button onclick="closePPPSecretModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSavePPPSecret(event)" class="p-6 space-y-4 text-xs font-sans">
        <input type="hidden" id="secret-modal-id">
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Username (Name) *</label>
            <input type="text" id="secret-modal-name" placeholder="client_user1" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-violet-500">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Password *</label>
            <input type="password" id="secret-modal-password" placeholder="••••••••" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-violet-500">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Service</label>
            <select id="secret-modal-service" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="any">any</option>
              <option value="pppoe">pppoe</option>
              <option value="pptp">pptp</option>
              <option value="l2tp">l2tp</option>
            </select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Profile</label>
            <select id="secret-modal-profile" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Local Address (Optional)</label>
            <input type="text" id="secret-modal-local" placeholder="Override server IP" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Remote Address (Optional Static IP)</label>
            <input type="text" id="secret-modal-remote" placeholder="Static client IP" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="secret-modal-comment" placeholder="Home user / Office user" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>

        <div class="flex items-center space-x-2 pt-1">
          <input type="checkbox" id="secret-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-600">
          <label for="secret-modal-disabled" class="text-slate-300">Disabled</label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closePPPSecretModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-violet-600 hover:bg-violet-500 text-white shadow-lg shadow-violet-500/20">Save Secret</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD/EDIT PPP PROFILE ================= -->
  <div id="ppp-profile-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 id="profile-modal-title" class="text-sm font-bold text-white">Add PPP Profile</h3>
          <p class="text-[11px] text-slate-400">IP pool and encryption settings for PPP servers</p>
        </div>
        <button onclick="closePPPProfileModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSavePPPProfile(event)" class="p-6 space-y-4 text-xs font-sans">
        <input type="hidden" id="profile-modal-id">
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Profile Name *</label>
          <input type="text" id="profile-modal-name" placeholder="e.g. office-pool" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-violet-500">
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Local Address *</label>
            <input type="text" id="profile-modal-local" placeholder="10.10.10.1" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Remote Address (Pool) *</label>
            <input type="text" id="profile-modal-remote" placeholder="10.10.10.10-10.10.10.50" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">DNS Servers</label>
            <input type="text" id="profile-modal-dns" value="1.1.1.1,8.8.8.8" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Use Encryption</label>
            <select id="profile-modal-encryption" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="no">no</option>
              <option value="yes">yes</option>
              <option value="required" selected>required (MPPE-128)</option>
            </select>
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="profile-modal-comment" placeholder="Description of this profile" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>

        <div class="flex items-center space-x-2 pt-1">
          <input type="checkbox" id="profile-modal-onlyone" checked class="rounded bg-slate-800 border-slate-700 text-violet-600">
          <label for="profile-modal-onlyone" class="text-slate-300">Only One session per user account</label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closePPPProfileModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-violet-600 hover:bg-violet-500 text-white shadow-lg shadow-violet-500/20">Save Profile</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: IPSEC ROADWARRIOR SERVER ================= -->
  <div id="ipsec-server-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 class="text-sm font-bold text-white">IPSec (IKEv2) Roadwarrior Server</h3>
          <p class="text-[11px] text-slate-400">Mobile VPN server for Windows, macOS, iOS, Android clients</p>
        </div>
        <button onclick="closeIPSecServerModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveIPSecServer(event)" class="p-6 space-y-4 text-xs font-sans">
        <div class="flex items-center justify-between border-b border-slate-800 pb-3">
          <span class="text-slate-300 font-semibold">Server State</span>
          <div class="flex items-center gap-3">
            <span id="modal-ipsec-server-status" class="px-2 py-0.5 rounded text-[10px] font-mono font-semibold bg-slate-800 text-slate-400">STOPPED</span>
            <label class="relative inline-flex items-center cursor-pointer">
              <input type="checkbox" id="modal-ipsec-server-enabled" class="sr-only peer">
              <div class="w-11 h-6 bg-slate-700 peer-focus:outline-none rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-slate-300 after:border after:rounded-full after:h-5 after:w-5 after:transition-all peer-checked:bg-amber-600"></div>
            </label>
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Pre-Shared Key (PSK) *</label>
          <input type="password" id="modal-ipsec-server-psk" placeholder="••••••••" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-amber-500">
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Virtual IP Pool (CIDR) *</label>
            <input type="text" id="modal-ipsec-server-pool" value="10.10.30.0/24" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">DNS Servers</label>
            <input type="text" id="modal-ipsec-server-dns" value="1.1.1.1,8.8.8.8" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Local Traffic Selector (Subnet)</label>
          <input type="text" id="modal-ipsec-server-subnet" value="0.0.0.0/0" placeholder="0.0.0.0/0 (Full Tunnel)" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeIPSecServerModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-amber-600 hover:bg-amber-500 text-white shadow-lg shadow-amber-500/20">Apply IPSec Server</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: WIREGUARD CLIENT CONFIG VIEWER ================= -->
  <div id="wg-client-conf-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 class="text-sm font-bold text-white">WireGuard Client Configuration</h3>
          <p class="text-[11px] text-slate-400">Import this .conf into WireGuard on iOS, Android, macOS or Windows</p>
        </div>
        <button onclick="closeWGClientConfModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <div class="p-6 space-y-4">
        <div>
          <label class="block text-xs font-semibold text-slate-300 mb-1.5">WireGuard Client Profile (.conf)</label>
          <textarea id="wg-client-conf-text" rows="11" readonly class="w-full bg-slate-950 border border-slate-800 rounded-xl p-3 text-xs font-mono text-cyan-300 select-all focus:outline-none"></textarea>
        </div>
        <div class="flex justify-between items-center pt-2">
          <span class="text-[11px] text-slate-500">Ready for instant import</span>
          <div class="space-x-2">
            <button onclick="copyWGClientConf()" class="px-4 py-2 rounded-lg text-xs font-semibold bg-slate-800 hover:bg-slate-700 text-white border border-slate-700 transition">
              Copy Config
            </button>
            <button onclick="downloadWGClientConf()" class="px-4 py-2 rounded-lg text-xs font-semibold bg-cyan-600 hover:bg-cyan-500 text-white shadow-lg shadow-cyan-500/20 transition">
              Download .conf
            </button>
          </div>
        </div>
      </div>
    </div>
  </div>

  <!-- ================= MODAL: BGP INSTANCE SETTINGS ================= -->
  <div id="bgp-instance-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 class="text-sm font-bold text-white">BGP Instance Settings (/routing bgp instance)</h3>
          <p class="text-[11px] text-slate-400">Configure global Autonomous System and route redistribution</p>
        </div>
        <button onclick="closeBgpInstanceModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form id="bgp-instance-form" onsubmit="submitBgpInstance(event)" class="p-6 space-y-4 text-xs">
        <div class="flex items-center justify-between p-3 rounded-xl bg-slate-800/60 border border-slate-700/60">
          <div>
            <div class="font-semibold text-white">Enable BGP Routing</div>
            <div class="text-[11px] text-slate-400">Run FRRouting bgpd service for dynamic exterior gateway routing</div>
          </div>
          <input type="checkbox" id="modal-bgp-enabled" class="w-4 h-4 rounded text-purple-600 focus:ring-purple-500 bg-slate-800 border-slate-600">
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Autonomous System (AS) *</label>
            <input type="number" id="modal-bgp-as" required min="1" max="4294967295" placeholder="65001" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-purple-500">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Router ID</label>
            <input type="text" id="modal-bgp-router-id" placeholder="192.168.131.56" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-purple-500">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Keepalive Time (s)</label>
            <input type="number" id="modal-bgp-keepalive" value="60" min="1" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Hold Time (s)</label>
            <input type="number" id="modal-bgp-holdtime" value="180" min="3" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="border-t border-slate-800 pt-3">
          <label class="block font-semibold text-slate-300 mb-2">Redistribute Routes into BGP</label>
          <div class="space-y-2">
            <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
              <input type="checkbox" id="modal-bgp-redist-conn" class="rounded text-purple-600 bg-slate-800 border-slate-700">
              <span>Redistribute Connected Subnets</span>
            </label>
            <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
              <input type="checkbox" id="modal-bgp-redist-static" class="rounded text-purple-600 bg-slate-800 border-slate-700">
              <span>Redistribute Static Routes</span>
            </label>
            <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
              <input type="checkbox" id="modal-bgp-redist-ospf" class="rounded text-purple-600 bg-slate-800 border-slate-700">
              <span>Redistribute OSPF Routes</span>
            </label>
          </div>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeBgpInstanceModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-purple-600 hover:bg-purple-500 text-white shadow-lg shadow-purple-500/20">Save BGP Settings</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: BGP PEER ================= -->
  <div id="bgp-peer-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 id="bgp-peer-modal-title" class="text-sm font-bold text-white">Add BGP Peer Connection</h3>
          <p class="text-[11px] text-slate-400">Establish eBGP / iBGP session with remote router</p>
        </div>
        <button onclick="closeBgpPeerModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form id="bgp-peer-form" onsubmit="submitBgpPeer(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="modal-bgp-peer-id">
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Connection Name *</label>
          <input type="text" id="modal-bgp-peer-name" required placeholder="upstream-carrier-a" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Remote Address (IP) *</label>
            <input type="text" id="modal-bgp-peer-remote-addr" required placeholder="192.168.131.1" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Remote AS *</label>
            <input type="number" id="modal-bgp-peer-remote-as" required min="1" max="4294967295" placeholder="65000" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Local Address (Update Source)</label>
            <input type="text" id="modal-bgp-peer-local-addr" placeholder="Optional source IP/iface" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">MD5 Password (BGP Auth)</label>
            <input type="password" id="modal-bgp-peer-password" placeholder="Optional secret" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">In Filter (Routing Filter Chain)</label>
            <input type="text" id="modal-bgp-peer-in-filter" placeholder="e.g. bgp-in" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
            <p class="text-[10px] text-slate-500 mt-0.5">Filter chain for inbound routes from peer</p>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Out Filter (Routing Filter Chain)</label>
            <input type="text" id="modal-bgp-peer-out-filter" placeholder="e.g. bgp-out" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
            <p class="text-[10px] text-slate-500 mt-0.5">Filter chain for outbound routes to peer</p>
          </div>
        </div>

        <div class="grid grid-cols-2 gap-3 p-3 rounded-xl bg-slate-800/40 border border-slate-700/50">
          <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-bgp-peer-multihop" class="rounded text-purple-600 bg-slate-800 border-slate-700">
            <span>eBGP Multi-hop</span>
          </label>
          <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-bgp-peer-nexthop-self" checked class="rounded text-purple-600 bg-slate-800 border-slate-700">
            <span>Next-hop Self</span>
          </label>
          <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-bgp-peer-passive" class="rounded text-purple-600 bg-slate-800 border-slate-700">
            <span>Passive Mode</span>
          </label>
          <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-bgp-peer-disabled" class="rounded text-purple-600 bg-slate-800 border-slate-700">
            <span>Disabled (X)</span>
          </label>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="modal-bgp-peer-comment" placeholder="Core transit uplink" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeBgpPeerModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-purple-600 hover:bg-purple-500 text-white shadow-lg shadow-purple-500/20">Save Peer</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: BGP NETWORK ================= -->
  <div id="bgp-network-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-md shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="bgp-network-modal-title" class="text-sm font-bold text-white">Advertise BGP Network</h3>
        <button onclick="closeBgpNetworkModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form id="bgp-network-form" onsubmit="submitBgpNetwork(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="modal-bgp-net-id">
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Network Prefix (CIDR) *</label>
          <input type="text" id="modal-bgp-net-cidr" required placeholder="10.200.0.0/24" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-purple-500">
        </div>
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="modal-bgp-net-comment" placeholder="Public IP block prefix" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>
        <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
          <input type="checkbox" id="modal-bgp-net-disabled" class="rounded text-purple-600 bg-slate-800 border-slate-700">
          <span>Disabled</span>
        </label>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeBgpNetworkModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-purple-600 hover:bg-purple-500 text-white shadow-lg shadow-purple-500/20">Save Network</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: OSPF INSTANCE SETTINGS ================= -->
  <div id="ospf-instance-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 class="text-sm font-bold text-white">OSPF Instance Settings (/routing ospf instance)</h3>
          <p class="text-[11px] text-slate-400">Configure OSPFv2 link-state routing daemon and redistributions</p>
        </div>
        <button onclick="closeOspfInstanceModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form id="ospf-instance-form" onsubmit="submitOspfInstance(event)" class="p-6 space-y-4 text-xs">
        <div class="flex items-center justify-between p-3 rounded-xl bg-slate-800/60 border border-slate-700/60">
          <div>
            <div class="font-semibold text-white">Enable OSPF Routing</div>
            <div class="text-[11px] text-slate-400">Run FRRouting ospfd service for dynamic interior gateway routing</div>
          </div>
          <input type="checkbox" id="modal-ospf-enabled" class="w-4 h-4 rounded text-indigo-600 focus:ring-indigo-500 bg-slate-800 border-slate-600">
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Router ID</label>
            <input type="text" id="modal-ospf-router-id" placeholder="192.168.131.56" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-indigo-500">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Default Metric</label>
            <input type="number" id="modal-ospf-metric" value="10" min="1" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="border-t border-slate-800 pt-3">
          <label class="block font-semibold text-slate-300 mb-2">Redistribute Routes into OSPF</label>
          <div class="space-y-2">
            <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
              <input type="checkbox" id="modal-ospf-redist-conn" class="rounded text-indigo-600 bg-slate-800 border-slate-700">
              <span>Redistribute Connected Subnets</span>
            </label>
            <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
              <input type="checkbox" id="modal-ospf-redist-static" class="rounded text-indigo-600 bg-slate-800 border-slate-700">
              <span>Redistribute Static Routes</span>
            </label>
            <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
              <input type="checkbox" id="modal-ospf-redist-bgp" class="rounded text-indigo-600 bg-slate-800 border-slate-700">
              <span>Redistribute BGP Routes</span>
            </label>
          </div>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeOspfInstanceModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-indigo-600 hover:bg-indigo-500 text-white shadow-lg shadow-indigo-500/20">Save OSPF Settings</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: OSPF AREA ================= -->
  <div id="ospf-area-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-md shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="ospf-area-modal-title" class="text-sm font-bold text-white">Add OSPF Area</h3>
        <button onclick="closeOspfAreaModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form id="ospf-area-form" onsubmit="submitOspfArea(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="modal-ospf-area-id">
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Area Name *</label>
          <input type="text" id="modal-ospf-area-name" required placeholder="backbone" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
        </div>
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Area ID *</label>
            <input type="text" id="modal-ospf-area-areaid" required placeholder="0.0.0.0" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Area Type</label>
            <select id="modal-ospf-area-type" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="default">Default / Normal</option>
              <option value="stub">Stub</option>
              <option value="nssa">NSSA</option>
            </select>
          </div>
        </div>
        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="modal-ospf-area-comment" placeholder="Area description" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>
        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeOspfAreaModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-indigo-600 hover:bg-indigo-500 text-white shadow-lg shadow-indigo-500/20">Save Area</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: OSPF INTERFACE ================= -->
  <div id="ospf-interface-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 id="ospf-interface-modal-title" class="text-sm font-bold text-white">Add OSPF Interface</h3>
          <p class="text-[11px] text-slate-400">Configure OSPF link parameters on a network subnet or interface</p>
        </div>
        <button onclick="closeOspfInterfaceModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form id="ospf-interface-form" onsubmit="submitOspfInterface(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="modal-ospf-iface-id">
        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Subnet Network (CIDR) *</label>
            <input type="text" id="modal-ospf-iface-net" required placeholder="192.168.131.0/24" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">OSPF Area *</label>
            <input type="text" id="modal-ospf-iface-area" required value="0.0.0.0" placeholder="0.0.0.0" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Interface (Optional Device)</label>
            <select id="modal-ospf-iface-device" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="">Any matching interface</option>
            </select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Metric Cost</label>
            <input type="number" id="modal-ospf-iface-cost" value="10" min="1" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-3 gap-3">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Priority</label>
            <input type="number" id="modal-ospf-iface-priority" value="1" min="0" max="255" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Hello (s)</label>
            <input type="number" id="modal-ospf-iface-hello" value="10" min="1" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Dead (s)</label>
            <input type="number" id="modal-ospf-iface-dead" value="40" min="1" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Authentication Type</label>
            <select id="modal-ospf-iface-auth-type" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="none">None</option>
              <option value="simple">Simple Password</option>
              <option value="md5">MD5 Cryptographic</option>
            </select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Auth Secret Key</label>
            <input type="password" id="modal-ospf-iface-auth-key" placeholder="••••••••" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-3 p-3 rounded-xl bg-slate-800/40 border border-slate-700/50">
          <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-ospf-iface-passive" class="rounded text-indigo-600 bg-slate-800 border-slate-700">
            <span>Passive (Do not form adjs)</span>
          </label>
          <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-ospf-iface-disabled" class="rounded text-indigo-600 bg-slate-800 border-slate-700">
            <span>Disabled (X)</span>
          </label>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="modal-ospf-iface-comment" placeholder="LAN segment routing" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeOspfInterfaceModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-indigo-600 hover:bg-indigo-500 text-white shadow-lg shadow-indigo-500/20">Save Interface</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD / EDIT ROUTING FILTER ================= -->
  <div id="modal-routing-filter" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-xl shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 id="modal-rf-title" class="text-sm font-bold text-white">Add Routing Filter Rule</h3>
          <p class="text-[11px] text-slate-400">Match routing prefixes, AS-Path, communities, and set BGP attributes (/routing filter)</p>
        </div>
        <button onclick="closeRoutingFilterModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form id="routing-filter-form" onsubmit="submitRoutingFilter(event)" class="p-6 space-y-4 text-xs max-h-[85vh] overflow-y-auto">
        <input type="hidden" id="modal-rf-id">

        <div class="grid grid-cols-3 gap-3">
          <div class="col-span-1">
            <label class="block font-semibold text-slate-300 mb-1.5">Chain Name *</label>
            <input type="text" id="modal-rf-chain" required placeholder="bgp-in" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
            <p class="text-[10px] text-slate-500 mt-0.5">e.g. bgp-in, bgp-out</p>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Rule Order *</label>
            <input type="number" id="modal-rf-order" value="10" min="1" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
            <p class="text-[10px] text-slate-500 mt-0.5">Sequence (10, 20...)</p>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Action *</label>
            <select id="modal-rf-action" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="accept">accept (Permit)</option>
              <option value="discard">discard (Deny)</option>
              <option value="reject">reject (Deny)</option>
              <option value="passthrough">passthrough (Continue)</option>
            </select>
            <p class="text-[10px] text-slate-500 mt-0.5">Filter action</p>
          </div>
        </div>

        <!-- Match Criteria Box -->
        <div class="p-3.5 rounded-xl bg-slate-800/40 border border-slate-700/50 space-y-3">
          <div class="text-[11px] font-bold text-cyan-400 uppercase tracking-wider">Match Conditions</div>
          
          <div class="grid grid-cols-2 gap-3">
            <div>
              <label class="block font-medium text-slate-300 mb-1">Prefix (CIDR)</label>
              <input type="text" id="modal-rf-prefix" placeholder="e.g. 10.0.0.0/8 or 0.0.0.0/0" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
              <p class="text-[10px] text-slate-500 mt-0.5">Leave blank to match all prefixes</p>
            </div>
            <div>
              <label class="block font-medium text-slate-300 mb-1">Prefix Length (Range)</label>
              <input type="text" id="modal-rf-prefix-len" placeholder="e.g. 16-24 or ge 24 le 32" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
              <p class="text-[10px] text-slate-500 mt-0.5">Optional subnet mask length filter</p>
            </div>
          </div>

          <div class="grid grid-cols-3 gap-3">
            <div>
              <label class="block font-medium text-slate-300 mb-1">Match Protocol</label>
              <select id="modal-rf-protocol" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
                <option value="any">Any Protocol</option>
                <option value="bgp">BGP</option>
                <option value="ospf">OSPF</option>
                <option value="connected">Connected</option>
                <option value="static">Static</option>
              </select>
            </div>
            <div>
              <label class="block font-medium text-slate-300 mb-1">Match AS-Path (Regex)</label>
              <input type="text" id="modal-rf-as-path" placeholder="e.g. ^65001_ or _65000$" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
            </div>
            <div>
              <label class="block font-medium text-slate-300 mb-1">Match Community</label>
              <input type="text" id="modal-rf-community" placeholder="e.g. 65001:100" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
            </div>
          </div>
        </div>

        <!-- Set Attributes Box (Modifications) -->
        <div class="p-3.5 rounded-xl bg-slate-800/40 border border-slate-700/50 space-y-3">
          <div class="text-[11px] font-bold text-purple-400 uppercase tracking-wider">Set Modifications (On Accept)</div>
          
          <div class="grid grid-cols-3 gap-3">
            <div>
              <label class="block font-medium text-slate-300 mb-1">Set BGP Local Pref</label>
              <input type="number" id="modal-rf-set-local-pref" placeholder="e.g. 150" min="0" max="4294967295" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
            </div>
            <div>
              <label class="block font-medium text-slate-300 mb-1">Set Metric / MED</label>
              <input type="number" id="modal-rf-set-metric" placeholder="e.g. 20" min="0" max="4294967295" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
            </div>
            <div>
              <label class="block font-medium text-slate-300 mb-1">Set AS Prepend (Count)</label>
              <input type="number" id="modal-rf-set-as-prepend" placeholder="e.g. 2" min="1" max="10" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
            </div>
          </div>

          <div class="grid grid-cols-2 gap-3">
            <div>
              <label class="block font-medium text-slate-300 mb-1">Set Community</label>
              <input type="text" id="modal-rf-set-community" placeholder="e.g. 65001:200 or no-export" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
            </div>
            <div>
              <label class="block font-medium text-slate-300 mb-1">Set Next Hop (IP)</label>
              <input type="text" id="modal-rf-set-next-hop" placeholder="e.g. 192.168.1.1" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-1.5 text-white font-mono">
            </div>
          </div>
        </div>

        <div class="grid grid-cols-3 gap-3">
          <div class="col-span-2">
            <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
            <input type="text" id="modal-rf-comment" placeholder="Filter upstream customer prefix" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
          </div>
          <div class="flex items-center pt-6">
            <label class="flex items-center space-x-2 text-slate-300 cursor-pointer">
              <input type="checkbox" id="modal-rf-disabled" class="rounded text-emerald-600 bg-slate-800 border-slate-700">
              <span class="font-medium">Disabled (X)</span>
            </label>
          </div>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeRoutingFilterModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-emerald-600 hover:bg-emerald-500 text-white shadow-lg shadow-emerald-500/20">Save Filter Rule</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD / EDIT DHCP CLIENT ================= -->
  <div id="modal-dhcp-client" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-md shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div class="flex items-center gap-2">
          <span class="px-2 py-0.5 rounded text-[10px] font-mono bg-amber-500/20 text-amber-300 border border-amber-500/30 font-semibold">/ip dhcp-client</span>
          <h3 id="modal-dhcp-title" class="text-sm font-bold text-white">Add DHCP Client</h3>
        </div>
        <button onclick="closeDHCPClientModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>

      <form onsubmit="submitSaveDHCPClient(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="modal-dhcp-id">

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Interface *</label>
          <select id="modal-dhcp-iface" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-amber-500">
            <option value="">Select interface...</option>
          </select>
          <p class="text-[11px] text-slate-500 mt-1">Physical port, VLAN sub-interface, or Bridge to acquire dynamic lease on.</p>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Default Route Distance</label>
            <input type="number" id="modal-dhcp-distance" value="1" min="1" max="255" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono focus:outline-none focus:border-amber-500">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
            <input type="text" id="modal-dhcp-comment" placeholder="e.g. ISP WAN DHCP" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white focus:outline-none focus:border-amber-500">
          </div>
        </div>

        <div class="bg-slate-950/60 border border-slate-800/80 rounded-xl p-3 space-y-2.5">
          <div class="text-[11px] font-bold text-slate-400 uppercase tracking-wider">Gateway & DNS Options</div>
          
          <label class="flex items-center space-x-2.5 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-dhcp-def-route" checked class="rounded text-amber-500 bg-slate-800 border-slate-700 focus:ring-amber-500">
            <span>Add Default Route (default gateway from DHCP)</span>
          </label>

          <label class="flex items-center space-x-2.5 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-dhcp-peer-dns" checked class="rounded text-amber-500 bg-slate-800 border-slate-700 focus:ring-amber-500">
            <span>Use Peer DNS (DNS servers from DHCP)</span>
          </label>

          <label class="flex items-center space-x-2.5 text-slate-300 cursor-pointer">
            <input type="checkbox" id="modal-dhcp-peer-ntp" checked class="rounded text-amber-500 bg-slate-800 border-slate-700 focus:ring-amber-500">
            <span>Use Peer NTP (NTP servers from DHCP)</span>
          </label>

          <label class="flex items-center space-x-2.5 text-slate-300 cursor-pointer pt-1 border-t border-slate-800/80">
            <input type="checkbox" id="modal-dhcp-enabled" checked class="rounded text-emerald-500 bg-slate-800 border-slate-700 focus:ring-emerald-500">
            <span class="font-semibold text-white">Enable DHCP Client immediately</span>
          </label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeDHCPClientModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800 transition">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-amber-500 hover:bg-amber-400 text-slate-950 shadow-lg shadow-amber-500/20 transition">Save DHCP Client</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD / EDIT BRIDGE ================= -->
  <div id="bridge-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="bridge-modal-title" class="text-sm font-bold text-white">Add Bridge Interface</h3>
        <button onclick="closeBridgeModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveBridge(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="bridge-modal-id">

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Bridge Name *</label>
            <input type="text" id="bridge-modal-name" required placeholder="e.g. bridge1" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">MTU</label>
            <input type="number" id="bridge-modal-mtu" value="1500" min="68" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Admin MAC Address (Optional)</label>
          <input type="text" id="bridge-modal-mac" placeholder="Leave blank for auto MAC" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">STP Protocol</label>
            <select id="bridge-modal-stp" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="rstp" selected>RSTP (Rapid STP - Recommended)</option>
              <option value="stp">STP (IEEE 802.1D)</option>
              <option value="none">none (Disable STP)</option>
            </select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">STP Priority</label>
            <input type="number" id="bridge-modal-priority" value="32768" min="0" max="65535" step="4096" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <!-- VLAN Filtering Box -->
        <div class="p-3.5 bg-slate-950/60 border border-slate-800 rounded-xl space-y-3">
          <label class="flex items-center space-x-2.5 cursor-pointer">
            <input type="checkbox" id="bridge-modal-vlanfiltering" onchange="toggleBridgeModalVlanFiltering()" class="rounded bg-slate-800 border-slate-700 text-sky-500">
            <span class="font-semibold text-white">VLAN Filtering (802.1Q Aware)</span>
          </label>
          <div id="bridge-modal-pvid-box" class="grid grid-cols-2 gap-3 pl-6">
            <div>
              <label class="block text-[11px] text-slate-400 mb-1">Default PVID</label>
              <input type="number" id="bridge-modal-pvid" value="1" min="1" max="4094" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-2.5 py-1 text-white font-mono text-xs">
            </div>
            <div class="flex items-center pt-4">
              <label class="flex items-center space-x-2 text-slate-400 cursor-pointer text-xs">
                <input type="checkbox" id="bridge-modal-fastforward" checked class="rounded bg-slate-800 border-slate-700 text-sky-500">
                <span>Fast Forward</span>
              </label>
            </div>
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="bridge-modal-comment" placeholder="e.g. LAN Bridge with EoIP" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>

        <div class="pt-1">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="bridge-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="font-medium text-slate-300">Disabled (X)</span>
          </label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeBridgeModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-sky-600 hover:bg-sky-500 text-white shadow-lg shadow-sky-500/20">Save Bridge</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD / EDIT BRIDGE PORT ================= -->
  <div id="bridge-port-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="bridge-port-modal-title" class="text-sm font-bold text-white">Add Port to Bridge</h3>
        <button onclick="closeBridgePortModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveBridgePort(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="bridge-port-modal-id">

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Target Bridge *</label>
            <select id="bridge-port-modal-bridge" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Interface *</label>
            <select id="bridge-port-modal-interface" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
          </div>
        </div>

        <div class="grid grid-cols-3 gap-3">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">PVID</label>
            <input type="number" id="bridge-port-modal-pvid" value="1" min="1" max="4094" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Path Cost</label>
            <input type="number" id="bridge-port-modal-pathcost" value="10" min="1" max="65535" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Horizon (Split)</label>
            <input type="number" id="bridge-port-modal-horizon" value="0" min="0" max="65535" title="0=none. Ports with identical horizon > 0 cannot communicate (split-horizon isolation for EoIP / VPLS)" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Frame Types</label>
            <select id="bridge-port-modal-frametypes" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
              <option value="admit-all" selected>admit all</option>
              <option value="admit-only-vlan-tagged">admit only VLAN tagged</option>
              <option value="admit-only-untagged-and-priority-tagged">admit only untagged</option>
            </select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Priority</label>
            <input type="number" id="bridge-port-modal-priority" value="128" min="0" max="240" step="16" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div class="grid grid-cols-2 gap-3 p-3 bg-slate-950/60 border border-slate-800 rounded-xl">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="bridge-port-modal-learn" checked class="rounded bg-slate-800 border-slate-700 text-sky-500">
            <span class="text-white font-semibold">MAC Learning</span>
          </label>
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="bridge-port-modal-ingressfiltering" class="rounded bg-slate-800 border-slate-700 text-sky-500">
            <span class="text-white font-semibold">Ingress Filtering</span>
          </label>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="bridge-port-modal-comment" placeholder="e.g. Uplink to switch" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>

        <div class="pt-1">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="bridge-port-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="font-medium text-slate-300">Disabled (X)</span>
          </label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeBridgePortModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-sky-600 hover:bg-sky-500 text-white shadow-lg shadow-sky-500/20">Save Port</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD / EDIT BRIDGE VLAN ================= -->
  <div id="bridge-vlan-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-lg shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <h3 id="bridge-vlan-modal-title" class="text-sm font-bold text-white">Add Bridge VLAN Entry</h3>
        <button onclick="closeBridgeVlanModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitSaveBridgeVLAN(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="bridge-vlan-modal-id">

        <div class="grid grid-cols-2 gap-4">
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">Target Bridge *</label>
            <select id="bridge-vlan-modal-bridge" onchange="updateBridgeVlanPortCheckboxes()" required class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono"></select>
          </div>
          <div>
            <label class="block font-semibold text-slate-300 mb-1.5">VLAN IDs *</label>
            <input type="text" id="bridge-vlan-modal-vlanids" required placeholder="e.g. 10 or 10,20,30 or 10-20" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Tagged Member Ports (Trunk)</label>
          <div id="bridge-vlan-tagged-ports" class="max-h-36 overflow-y-auto p-2.5 bg-slate-950/60 border border-slate-800 rounded-xl space-y-1 font-mono text-slate-300">
            <span class="text-slate-500 text-xs font-sans">Select a bridge above to view member ports</span>
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Untagged Member Ports (Access)</label>
          <div id="bridge-vlan-untagged-ports" class="max-h-36 overflow-y-auto p-2.5 bg-slate-950/60 border border-slate-800 rounded-xl space-y-1 font-mono text-slate-300">
            <span class="text-slate-500 text-xs font-sans">Select a bridge above to view member ports</span>
          </div>
        </div>

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">Comment</label>
          <input type="text" id="bridge-vlan-modal-comment" placeholder="e.g. Office & Guest VLANs" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white">
        </div>

        <div class="pt-1">
          <label class="flex items-center space-x-2 cursor-pointer">
            <input type="checkbox" id="bridge-vlan-modal-disabled" class="rounded bg-slate-800 border-slate-700 text-rose-500">
            <span class="font-medium text-slate-300">Disabled (X)</span>
          </label>
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeBridgeVlanModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-sky-600 hover:bg-sky-500 text-white shadow-lg shadow-sky-500/20">Save VLAN Entry</button>
        </div>
      </form>
    </div>
  </div>

  <!-- ================= MODAL: ADD IP ADDRESS TO BRIDGE ================= -->
  <div id="bridge-ip-modal" class="fixed inset-0 bg-slate-950/80 backdrop-blur-sm z-50 hidden flex items-center justify-center p-4">
    <div class="bg-slate-900 border border-slate-800 rounded-2xl w-full max-w-sm shadow-2xl overflow-hidden animate-in">
      <div class="px-6 py-4 border-b border-slate-800 flex items-center justify-between bg-slate-950/40">
        <div>
          <h3 class="text-sm font-bold text-white">Assign IP Address to Bridge</h3>
          <span id="bridge-ip-modal-sub" class="text-[11px] font-mono text-sky-400">bridge1</span>
        </div>
        <button onclick="closeBridgeIPModal()" class="text-slate-400 hover:text-white p-1 rounded-lg">✕</button>
      </div>
      <form onsubmit="submitAddBridgeIP(event)" class="p-6 space-y-4 text-xs">
        <input type="hidden" id="bridge-ip-modal-id">

        <div>
          <label class="block font-semibold text-slate-300 mb-1.5">IPv4 / Subnet (CIDR) *</label>
          <input type="text" id="bridge-ip-modal-cidr" required placeholder="e.g. 192.168.88.1/24" class="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2 text-white font-mono">
        </div>

        <div class="pt-4 border-t border-slate-800 flex justify-end space-x-3">
          <button type="button" onclick="closeBridgeIPModal()" class="px-4 py-2 rounded-lg text-slate-400 hover:bg-slate-800">Cancel</button>
          <button type="submit" class="px-5 py-2 rounded-lg font-semibold bg-sky-600 hover:bg-sky-500 text-white shadow-lg shadow-sky-500/20">Assign IP</button>
        </div>
      </form>
    </div>
  </div>

  <datalist id="fw-addrlist-datalist"></datalist>
  <script src="app.js?v=5.4"></script>
</body>
</html>