This patch allows the UI to accept a space-delimited list of subnets in the "Local Subnet" and/or "Remote subnet" fields of the IPSec "Connection" page, then (conditionally) populates the openswan ipsec.conf file to set the "leftsubnets" and "rightsubnets" (note: plural) fields, add the networks to the "virtual_private" list, and accept cartesian suffixes in the connecton name when testing for "IPsec SA established"
I have only tested this with a 1x6 arrangement (6 subnets listed on the remote Cisco device)
svn diff --patch-compatible attached.