22 Commits

Author SHA1 Message Date
Christian Breunig
e96e7bc19a ipsec: T6599: add CLI documentation to disable ESP re-key
(cherry picked from commit 284b5b8e9bec10f4e69c0add321361a832d39b66)
2024-07-22 12:27:19 +02:00
whyrlpool
2ae974066f VPN documentation proofreading (#1506)
* Fix typos in openconnect.rst

change Cerbort->Certbot
Update first line to reflect that openconnect was introduced in 1.3-rolling (T2036)

* typo in dmvpn.rst

* ipsec.rst justification, minor phrasing changes

* l2tp.rst justification and phrasing changes.

* sstp.rst phrasing, justification changes

* Update ipsec.rst

rephrase for clarity and to avoid possessive plural apostrophe

(cherry picked from commit 873a461bdf972ebd815baf50893700b0a2518213)
2024-07-18 16:09:24 +02:00
srividya0208
dc6ec3b965 ipsec: Added information about operational commands
(cherry picked from commit cd1dcb5d8e66e3431415ebf31a2d5902b30c1ffc)
2024-07-13 15:14:10 +00:00
rebortg
deb44d8856 fix several build warnings and errors 2024-04-16 21:58:21 +02:00
Christian Breunig
e30e9608d6 ipsec: add IKEv2 road-warrior documentation
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
2024-02-27 06:56:55 +01:00
aapostoliuk
3c6bb1ec30 Updated DPD and close-action values in IPSEC
Changed from 'hold' to 'trap' and from 'restart' to 'start'
in close-action.
Changed from 'hold' to 'trap' in DPD action.

(cherry picked from commit cfb7e8186d83e45092f361f9717c9542bfad053b)
2024-01-22 10:53:21 +00:00
Christian Breunig
84498945cc ipsec: gre: use dummy interface in example over loopback
(cherry picked from commit 5953d6f69748c82cbd9eafbe662163924ae719e6)
2023-11-24 21:29:53 +01:00
srividya0208
54bdc76b3b correction of ipsec compression syntax and added a reference
for changes done for zone based firewall
2023-09-04 02:49:17 -04:00
Viacheslav Hletenko
8f61920f01 Change IPsec authentication PSK and examples 2023-02-05 12:22:36 +00:00
aapostoliuk
3711f087a3 ipsec: T4925: Added PRF information in IPSEC documentation
Added Pseudo-Random Functions (PRF) information
in IPSEC documentation.
2023-01-19 16:09:04 +02:00
srividya0208
ac70a57fd1 Modified the documentation as per the new format/syntax 2022-11-08 22:24:58 -05:00
srividya0208
da88a7dadc ipsec-interface: syntax correction
The command to set the vpn interface is changed in the rolling release
which is not modified in many configuration examples, corrected syntax
in all pages where it is mentioned
2022-09-08 06:55:52 -04:00
mkorobeinikov
79ac4fec96
Update ipsec.rst 2022-02-23 10:59:25 +10:00
mkorobeinikov
ea485aede1
Add cisco_flexvpn and install_virtualip_on options
Ability to set Cisco FlexVPN vendor ID payload:
charon.cisco_flexvpn = yes
charon.install_virtual_ip_on = tunX
swanctl.connections.<conn>.vips = x.x.x.x, z.z.z.z
2022-02-23 10:49:37 +10:00
mkorobeinikov
5d3bffe651
Ability to set SA life bytes and packets
https://phabricator.vyos.net/T1856
https://github.com/vyos/vyos-1x/pull/1230
2022-02-23 09:13:27 +10:00
srividya0208
06f30a8b32 vpn-gre:incorrect syntax: local-ip and remote-ip changed to source-address and remote
vyos@vyos# set int tunnel tun0
Possible completions:

   remote       Tunnel remote address
   source-address
                Source IP address used to initiate connection
2022-02-15 11:11:00 -05:00
goodNETnick
865ff61166 ESP group parameters 2021-12-07 13:46:15 +10:00
goodNETnick
8f3c52096c IKE group parameters 2021-11-26 11:26:57 +10:00
srividya0208
07f208bd6a VPN IPsec: Added a note related to rsa key
A private key is also needed to finish the ipsec setup which is not mentioned
in the section "Source tunnel from loopbacks/Setting up IPSec". I have added
for reference.
2021-11-18 10:38:43 -05:00
goodNETnick
72a677f75e IPsec key-pair new synthax 2021-10-19 17:36:44 +10:00
srividya0208
8adf48d9b1 RSA Keys: Added information related to RSA keys
RSA-Keys page was blank, so added the steps to generate and add the keys to
the VPN IPSec config.
Also corrected the IPSec/GRE page where authentication parameter was
missing before remote-id.
2020-12-25 07:00:53 -05:00
rebortg
ce090a4ced arrange examples 2020-12-06 21:41:10 +01:00