diff options
| author | srividya0208 <a.srividya@vyos.io> | 2023-09-04 02:13:54 -0400 |
|---|---|---|
| committer | srividya0208 <a.srividya@vyos.io> | 2023-09-04 02:49:17 -0400 |
| commit | 54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9 (patch) | |
| tree | 048b25a5e03da4b249bdde325b6841340358eaac /docs/configuration/vpn/dmvpn.rst | |
| parent | eeefebfbe0c44ccd0e9003055871044045ac424a (diff) | |
| download | vyos-documentation-54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9.tar.gz vyos-documentation-54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9.zip | |
correction of ipsec compression syntax and added a reference
for changes done for zone based firewall
Diffstat (limited to 'docs/configuration/vpn/dmvpn.rst')
| -rw-r--r-- | docs/configuration/vpn/dmvpn.rst | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/docs/configuration/vpn/dmvpn.rst b/docs/configuration/vpn/dmvpn.rst index 6680d46a..a85e03b4 100644 --- a/docs/configuration/vpn/dmvpn.rst +++ b/docs/configuration/vpn/dmvpn.rst @@ -200,7 +200,6 @@ Hub set protocols nhrp tunnel tun100 redirect set protocols nhrp tunnel tun100 shortcut - set vpn ipsec esp-group ESP-HUB compression 'disable' set vpn ipsec esp-group ESP-HUB lifetime '1800' set vpn ipsec esp-group ESP-HUB mode 'transport' set vpn ipsec esp-group ESP-HUB pfs 'dh-group2' @@ -208,7 +207,6 @@ Hub set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1' set vpn ipsec esp-group ESP-HUB proposal 2 encryption '3des' set vpn ipsec esp-group ESP-HUB proposal 2 hash 'md5' - set vpn ipsec ike-group IKE-HUB ikev2-reauth 'no' set vpn ipsec ike-group IKE-HUB key-exchange 'ikev1' set vpn ipsec ike-group IKE-HUB lifetime '3600' set vpn ipsec ike-group IKE-HUB proposal 1 dh-group '2' @@ -309,7 +307,6 @@ VyOS can also run in DMVPN spoke mode. set protocols nhrp tunnel tun100 redirect set protocols nhrp tunnel tun100 shortcut - set vpn ipsec esp-group ESP-HUB compression 'disable' set vpn ipsec esp-group ESP-HUB lifetime '1800' set vpn ipsec esp-group ESP-HUB mode 'transport' set vpn ipsec esp-group ESP-HUB pfs 'dh-group2' @@ -318,7 +315,6 @@ VyOS can also run in DMVPN spoke mode. set vpn ipsec esp-group ESP-HUB proposal 2 encryption '3des' set vpn ipsec esp-group ESP-HUB proposal 2 hash 'md5' set vpn ipsec ike-group IKE-HUB close-action 'none' - set vpn ipsec ike-group IKE-HUB ikev2-reauth 'no' set vpn ipsec ike-group IKE-HUB key-exchange 'ikev1' set vpn ipsec ike-group IKE-HUB lifetime '3600' set vpn ipsec ike-group IKE-HUB proposal 1 dh-group '2' |