summaryrefslogtreecommitdiff
path: root/docs/configexamples/azure-vpn-dual-bgp.rst
diff options
context:
space:
mode:
authorsrividya0208 <a.srividya@vyos.io>2023-09-04 02:13:54 -0400
committersrividya0208 <a.srividya@vyos.io>2023-09-04 02:49:17 -0400
commit54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9 (patch)
tree048b25a5e03da4b249bdde325b6841340358eaac /docs/configexamples/azure-vpn-dual-bgp.rst
parenteeefebfbe0c44ccd0e9003055871044045ac424a (diff)
downloadvyos-documentation-54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9.tar.gz
vyos-documentation-54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9.zip
correction of ipsec compression syntax and added a reference
for changes done for zone based firewall
Diffstat (limited to 'docs/configexamples/azure-vpn-dual-bgp.rst')
-rw-r--r--docs/configexamples/azure-vpn-dual-bgp.rst7
1 files changed, 3 insertions, 4 deletions
diff --git a/docs/configexamples/azure-vpn-dual-bgp.rst b/docs/configexamples/azure-vpn-dual-bgp.rst
index 7f4987bb..d019092c 100644
--- a/docs/configexamples/azure-vpn-dual-bgp.rst
+++ b/docs/configexamples/azure-vpn-dual-bgp.rst
@@ -59,7 +59,6 @@ Vyos configuration
.. code-block:: none
- set vpn ipsec esp-group AZURE compression 'disable'
set vpn ipsec esp-group AZURE lifetime '3600'
set vpn ipsec esp-group AZURE mode 'tunnel'
set vpn ipsec esp-group AZURE pfs 'dh-group2'
@@ -69,7 +68,7 @@ Vyos configuration
set vpn ipsec ike-group AZURE dead-peer-detection action 'restart'
set vpn ipsec ike-group AZURE dead-peer-detection interval '15'
set vpn ipsec ike-group AZURE dead-peer-detection timeout '30'
- set vpn ipsec ike-group AZURE ikev2-reauth 'yes'
+ set vpn ipsec ike-group AZURE ikev2-reauth
set vpn ipsec ike-group AZURE key-exchange 'ikev2'
set vpn ipsec ike-group AZURE lifetime '28800'
set vpn ipsec ike-group AZURE proposal 1 dh-group '2'
@@ -96,8 +95,8 @@ Vyos configuration
.. code-block:: none
- set firewall options interface vti1 adjust-mss 1350
- set firewall options interface vti2 adjust-mss 1350
+ set interfaces vti vti1 ip adjust-mss 1350
+ set interfaces vti vti2 ip adjust-mss 1350
- Configure the VPN tunnels