Added VPN IPSec connection-type recommendation for the close-action and
dpd settings.
For example close-action restart should not be added on both peers
The command to set the vpn interface is changed in the rolling release
which is not modified in many configuration examples, corrected syntax
in all pages where it is mentioned
The command path:
set vpn sstp ssl key-file <file>
Does not appear to exist anymore, as per https://github.com/vyos/vyos-1x/pull/1038
Can the doc be updated with instructions on SSTP setup with new command structure?
Removed the note from the firewall page as nat grouping is not added yet
Added the information about new option 'none' in the site-to-site ipsec vpn
page
OpenConnect lacks full documentation which would also include how to create and
add use keys from the new PKI backend. For the time beeing we should not
confuse users.
A private key is also needed to finish the ipsec setup which is not mentioned
in the section "Source tunnel from loopbacks/Setting up IPSec". I have added
for reference.
Modified the index files to reflect this.
Added Diagram of the VPN Topology
Modified the weird IP subnets for local& remote sites. This Included:
Changing the Interface Address for the wg01 tunnel
Chaning the WAN addresses to addrs not in the RFC1918 range (1.1.1.1 & 2.2.2.2)
Modifing the allowed IPs and static route to reflect this.
Modified the ping test to reflect this.
Added an annotated verison of the wireguard local&remote config.
Added an example of a firewall exception for wirguard (OUTSIDE_IN)
Modified the explanation for the behavior of AllowedIPs for remote clients.
Added an example of "sudo wg" to the operational commands.
Fixed typo
There were minimal grammatical and spelling mistakes in the files which I
corrected as documentation proof reading.
Also added information about few ipsec vpn parameters.
RSA-Keys page was blank, so added the steps to generate and add the keys to
the VPN IPSec config.
Also corrected the IPSec/GRE page where authentication parameter was
missing before remote-id.
