25 Commits

Author SHA1 Message Date
mkorobeinikov
79ac4fec96
Update ipsec.rst 2022-02-23 10:59:25 +10:00
mkorobeinikov
ea485aede1
Add cisco_flexvpn and install_virtualip_on options
Ability to set Cisco FlexVPN vendor ID payload:
charon.cisco_flexvpn = yes
charon.install_virtual_ip_on = tunX
swanctl.connections.<conn>.vips = x.x.x.x, z.z.z.z
2022-02-23 10:49:37 +10:00
mkorobeinikov
5d3bffe651
Ability to set SA life bytes and packets
https://phabricator.vyos.net/T1856
https://github.com/vyos/vyos-1x/pull/1230
2022-02-23 09:13:27 +10:00
Christian Poessinger
4395d0080a openconnect: remove example b/c of missing PKI
OpenConnect lacks full documentation which would also include how to create and
add use keys from the new PKI backend. For the time beeing we should not
confuse users.
2022-02-20 20:28:13 +01:00
Christian Poessinger
9ca9ddcb07
Merge pull request #704 from rickard-tpo/patch-1
Updated OpenConnect SSL Syntax
2022-02-20 20:23:08 +01:00
srividya0208
06f30a8b32 vpn-gre:incorrect syntax: local-ip and remote-ip changed to source-address and remote
vyos@vyos# set int tunnel tun0
Possible completions:

   remote       Tunnel remote address
   source-address
                Source IP address used to initiate connection
2022-02-15 11:11:00 -05:00
rickard-tpo
e614cc874d
Updated SSL Syntax
Updated syntax to match 1.4.x.
2022-01-26 12:27:57 +00:00
goodNETnick
865ff61166 ESP group parameters 2021-12-07 13:46:15 +10:00
goodNETnick
8f3c52096c IKE group parameters 2021-11-26 11:26:57 +10:00
srividya0208
07f208bd6a VPN IPsec: Added a note related to rsa key
A private key is also needed to finish the ipsec setup which is not mentioned
in the section "Source tunnel from loopbacks/Setting up IPSec". I have added
for reference.
2021-11-18 10:38:43 -05:00
goodNETnick
fccc96e134 RSA-keys updated to new syntax 2021-10-20 15:41:45 +10:00
goodNETnick
72a677f75e IPsec key-pair new synthax 2021-10-19 17:36:44 +10:00
usman-umer
edacdd23e5 moved wg back into /interfaces dir 2021-07-11 22:30:24 +01:00
usman-umer
5b407ed606 Moved wireguard from the interfaces to vpn directory, as it is a VPN.
Modified the index files to reflect this.
 Added Diagram of the VPN Topology
 Modified the weird IP subnets for local& remote sites. This Included:
	Changing the Interface Address for the wg01 tunnel
	Chaning the WAN addresses to addrs not in the RFC1918 range (1.1.1.1 & 2.2.2.2)
	Modifing the allowed IPs and static route to reflect this.
	Modified the ping test to reflect this.
 Added an annotated verison of the wireguard local&remote config.
 Added an example of a firewall exception for wirguard (OUTSIDE_IN)
 Modified the explanation for the behavior of AllowedIPs for remote clients.
 Added an example of "sudo wg" to the operational commands.
 Fixed typo
2021-07-10 23:42:23 +01:00
srividya0208
ae6a2ba810 configuration page: corrected spelling and grammatical mistakes
There were minimal grammatical and spelling mistakes in the files which I
corrected as documentation proof reading.
Also added information about few ipsec vpn parameters.
2021-06-30 06:17:12 -04:00
Robert Göhler
679a7967f5
Merge pull request #546 from rebortg/autosectionlabel
Autosectionlabel
2021-06-11 22:28:02 +02:00
rebortg
df504dd6c1 autosectionlabel: add custom headline ref 2021-06-11 22:19:55 +02:00
Christian Poessinger
050335f959 ipsec: T3588: remove obsolete CLI commands for NAT 2021-06-06 20:02:09 +02:00
Oliver Dickins
5bd81dc482
Update l2tp.rst
Update l2tp "name-server" with correct syntax
2021-02-10 19:34:23 +00:00
srividya0208
8adf48d9b1 RSA Keys: Added information related to RSA keys
RSA-Keys page was blank, so added the steps to generate and add the keys to
the VPN IPSec config.
Also corrected the IPSec/GRE page where authentication parameter was
missing before remote-id.
2020-12-25 07:00:53 -05:00
rebortg
19596fd91e vpn: fix lint errors 2020-12-11 14:54:50 +01:00
rebortg
3ba03aeed5 l2tp: fix linter errors 2020-12-11 14:32:32 +01:00
rebortg
f6c43343bb Merge branch 'sagitta' of https://github.com/rebortg/vyos-documentation 2020-12-08 14:57:44 +01:00
rebortg
6f6950d14e fix build errors after arrange 2020-12-07 20:29:11 +01:00
rebortg
ce090a4ced arrange examples 2020-12-06 21:41:10 +01:00