diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2023-02-05 12:22:36 +0000 |
|---|---|---|
| committer | Viacheslav Hletenko <v.gletenko@vyos.io> | 2023-02-05 12:22:36 +0000 |
| commit | 8f61920f01d30e2a864dc6927b0038357e56bb05 (patch) | |
| tree | e57f854bda1bc1b0982f5ec4d371539a093a91a4 /docs/configexamples/azure-vpn-bgp.rst | |
| parent | d39ce49e2f54b99433c5c661fc1cb6efbbe6c930 (diff) | |
| download | vyos-documentation-8f61920f01d30e2a864dc6927b0038357e56bb05.tar.gz vyos-documentation-8f61920f01d30e2a864dc6927b0038357e56bb05.zip | |
Change IPsec authentication PSK and examples
Diffstat (limited to 'docs/configexamples/azure-vpn-bgp.rst')
| -rw-r--r-- | docs/configexamples/azure-vpn-bgp.rst | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/docs/configexamples/azure-vpn-bgp.rst b/docs/configexamples/azure-vpn-bgp.rst index 6e715d79..fc6e1a04 100644 --- a/docs/configexamples/azure-vpn-bgp.rst +++ b/docs/configexamples/azure-vpn-bgp.rst @@ -100,15 +100,18 @@ Vyos configuration .. code-block:: none - set vpn ipsec site-to-site peer 203.0.113.2 authentication id '198.51.100.3' + set vpn ipsec authentication psk azure id '198.51.100.3' + set vpn ipsec authentication psk azure id '203.0.113.2' + set vpn ipsec authentication psk azure secret 'ch00s3-4-s3cur3-psk' + set vpn ipsec site-to-site peer azure authentication local-id '198.51.100.3' set vpn ipsec site-to-site peer 203.0.113.2 authentication mode 'pre-shared-secret' - set vpn ipsec site-to-site peer 203.0.113.2 authentication pre-shared-secret 'ch00s3-4-s3cur3-psk' set vpn ipsec site-to-site peer 203.0.113.2 authentication remote-id '203.0.113.2' set vpn ipsec site-to-site peer 203.0.113.2 connection-type 'respond' set vpn ipsec site-to-site peer 203.0.113.2 description 'AZURE PRIMARY TUNNEL' set vpn ipsec site-to-site peer 203.0.113.2 ike-group 'AZURE' set vpn ipsec site-to-site peer 203.0.113.2 ikev2-reauth 'inherit' set vpn ipsec site-to-site peer 203.0.113.2 local-address '10.10.0.5' + set vpn ipsec site-to-site peer azure remote-address '203.0.113.2' set vpn ipsec site-to-site peer 203.0.113.2 vti bind 'vti1' set vpn ipsec site-to-site peer 203.0.113.2 vti esp-group 'AZURE' |