Christian Breunig
284b5b8e9b
ipsec: T6599: add CLI documentation to disable ESP re-key
2024-07-22 12:26:46 +02:00
rebortg
d3ad8cc86c
Merge branch 'current' of github.com:vyos/vyos-documentation into current
2024-07-18 21:53:35 +02:00
whyrlpool
873a461bdf
VPN documentation proofreading ( #1506 )
...
* Fix typos in openconnect.rst
change Cerbort->Certbot
Update first line to reflect that openconnect was introduced in 1.3-rolling (T2036)
* typo in dmvpn.rst
* ipsec.rst justification, minor phrasing changes
* l2tp.rst justification and phrasing changes.
* sstp.rst phrasing, justification changes
* Update ipsec.rst
rephrase for clarity and to avoid possessive plural apostrophe
2024-07-18 14:02:24 +01:00
srividya0208
cd1dcb5d8e
ipsec: Added information about operational commands
2024-07-12 02:33:01 -04:00
rebortg
0a3febc952
fix several build warnings and errors
2024-04-16 21:54:01 +02:00
Christian Breunig
deb4e15e51
ipsec: add IKEv2 road-warrior documentation
2024-02-27 06:55:42 +01:00
aapostoliuk
cfb7e8186d
Updated DPD and close-action values in IPSEC
...
Changed from 'hold' to 'trap' and from 'restart' to 'start'
in close-action.
Changed from 'hold' to 'trap' in DPD action.
2024-01-19 12:39:38 +02:00
Christian Breunig
5953d6f697
ipsec: gre: use dummy interface in example over loopback
2023-11-24 21:29:42 +01:00
srividya0208
4d7e44d3e7
Added config example of vpn ipsec site-to-site
2023-10-26 02:00:19 -04:00
srividya0208
54bdc76b3b
correction of ipsec compression syntax and added a reference
...
for changes done for zone based firewall
2023-09-04 02:49:17 -04:00
Viacheslav Hletenko
8f61920f01
Change IPsec authentication PSK and examples
2023-02-05 12:22:36 +00:00
aapostoliuk
3711f087a3
ipsec: T4925: Added PRF information in IPSEC documentation
...
Added Pseudo-Random Functions (PRF) information
in IPSEC documentation.
2023-01-19 16:09:04 +02:00
srividya0208
ac70a57fd1
Modified the documentation as per the new format/syntax
2022-11-08 22:24:58 -05:00
srividya0208
da88a7dadc
ipsec-interface: syntax correction
...
The command to set the vpn interface is changed in the rolling release
which is not modified in many configuration examples, corrected syntax
in all pages where it is mentioned
2022-09-08 06:55:52 -04:00
mkorobeinikov
79ac4fec96
Update ipsec.rst
2022-02-23 10:59:25 +10:00
mkorobeinikov
ea485aede1
Add cisco_flexvpn and install_virtualip_on options
...
Ability to set Cisco FlexVPN vendor ID payload:
charon.cisco_flexvpn = yes
charon.install_virtual_ip_on = tunX
swanctl.connections.<conn>.vips = x.x.x.x, z.z.z.z
2022-02-23 10:49:37 +10:00
mkorobeinikov
5d3bffe651
Ability to set SA life bytes and packets
...
https://phabricator.vyos.net/T1856
https://github.com/vyos/vyos-1x/pull/1230
2022-02-23 09:13:27 +10:00
srividya0208
06f30a8b32
vpn-gre:incorrect syntax: local-ip and remote-ip changed to source-address and remote
...
vyos@vyos# set int tunnel tun0
Possible completions:
remote Tunnel remote address
source-address
Source IP address used to initiate connection
2022-02-15 11:11:00 -05:00
goodNETnick
865ff61166
ESP group parameters
2021-12-07 13:46:15 +10:00
goodNETnick
8f3c52096c
IKE group parameters
2021-11-26 11:26:57 +10:00
srividya0208
07f208bd6a
VPN IPsec: Added a note related to rsa key
...
A private key is also needed to finish the ipsec setup which is not mentioned
in the section "Source tunnel from loopbacks/Setting up IPSec". I have added
for reference.
2021-11-18 10:38:43 -05:00
goodNETnick
72a677f75e
IPsec key-pair new synthax
2021-10-19 17:36:44 +10:00
srividya0208
8adf48d9b1
RSA Keys: Added information related to RSA keys
...
RSA-Keys page was blank, so added the steps to generate and add the keys to
the VPN IPSec config.
Also corrected the IPSec/GRE page where authentication parameter was
missing before remote-id.
2020-12-25 07:00:53 -05:00
rebortg
ce090a4ced
arrange examples
2020-12-06 21:41:10 +01:00
