rebortg
deb44d8856
fix several build warnings and errors
2024-04-16 21:58:21 +02:00
Christian Breunig
e30e9608d6
ipsec: add IKEv2 road-warrior documentation
...
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
2024-02-27 06:56:55 +01:00
aapostoliuk
3c6bb1ec30
Updated DPD and close-action values in IPSEC
...
Changed from 'hold' to 'trap' and from 'restart' to 'start'
in close-action.
Changed from 'hold' to 'trap' in DPD action.
(cherry picked from commit cfb7e8186d83e45092f361f9717c9542bfad053b)
2024-01-22 10:53:21 +00:00
Christian Breunig
84498945cc
ipsec: gre: use dummy interface in example over loopback
...
(cherry picked from commit 5953d6f69748c82cbd9eafbe662163924ae719e6)
2023-11-24 21:29:53 +01:00
srividya0208
54bdc76b3b
correction of ipsec compression syntax and added a reference
...
for changes done for zone based firewall
2023-09-04 02:49:17 -04:00
Viacheslav Hletenko
8f61920f01
Change IPsec authentication PSK and examples
2023-02-05 12:22:36 +00:00
aapostoliuk
3711f087a3
ipsec: T4925: Added PRF information in IPSEC documentation
...
Added Pseudo-Random Functions (PRF) information
in IPSEC documentation.
2023-01-19 16:09:04 +02:00
srividya0208
ac70a57fd1
Modified the documentation as per the new format/syntax
2022-11-08 22:24:58 -05:00
srividya0208
da88a7dadc
ipsec-interface: syntax correction
...
The command to set the vpn interface is changed in the rolling release
which is not modified in many configuration examples, corrected syntax
in all pages where it is mentioned
2022-09-08 06:55:52 -04:00
mkorobeinikov
79ac4fec96
Update ipsec.rst
2022-02-23 10:59:25 +10:00
mkorobeinikov
ea485aede1
Add cisco_flexvpn and install_virtualip_on options
...
Ability to set Cisco FlexVPN vendor ID payload:
charon.cisco_flexvpn = yes
charon.install_virtual_ip_on = tunX
swanctl.connections.<conn>.vips = x.x.x.x, z.z.z.z
2022-02-23 10:49:37 +10:00
mkorobeinikov
5d3bffe651
Ability to set SA life bytes and packets
...
https://phabricator.vyos.net/T1856
https://github.com/vyos/vyos-1x/pull/1230
2022-02-23 09:13:27 +10:00
srividya0208
06f30a8b32
vpn-gre:incorrect syntax: local-ip and remote-ip changed to source-address and remote
...
vyos@vyos# set int tunnel tun0
Possible completions:
remote Tunnel remote address
source-address
Source IP address used to initiate connection
2022-02-15 11:11:00 -05:00
goodNETnick
865ff61166
ESP group parameters
2021-12-07 13:46:15 +10:00
goodNETnick
8f3c52096c
IKE group parameters
2021-11-26 11:26:57 +10:00
srividya0208
07f208bd6a
VPN IPsec: Added a note related to rsa key
...
A private key is also needed to finish the ipsec setup which is not mentioned
in the section "Source tunnel from loopbacks/Setting up IPSec". I have added
for reference.
2021-11-18 10:38:43 -05:00
goodNETnick
72a677f75e
IPsec key-pair new synthax
2021-10-19 17:36:44 +10:00
srividya0208
8adf48d9b1
RSA Keys: Added information related to RSA keys
...
RSA-Keys page was blank, so added the steps to generate and add the keys to
the VPN IPSec config.
Also corrected the IPSec/GRE page where authentication parameter was
missing before remote-id.
2020-12-25 07:00:53 -05:00
rebortg
ce090a4ced
arrange examples
2020-12-06 21:41:10 +01:00
