diff options
author | srividya0208 <a.srividya@vyos.io> | 2022-11-08 22:18:57 -0500 |
---|---|---|
committer | srividya0208 <a.srividya@vyos.io> | 2022-11-08 22:24:58 -0500 |
commit | ac70a57fd10e8e84d39544414e6f3c84ed52dd5a (patch) | |
tree | 74986f10da296812f6545fc5f94f30289b1407ac /docs/configuration/vpn/site2site_ipsec.rst | |
parent | 63092a8cc61c3bb72f96c6b8950fdfcec0968dd6 (diff) | |
download | vyos-documentation-ac70a57fd10e8e84d39544414e6f3c84ed52dd5a.tar.gz vyos-documentation-ac70a57fd10e8e84d39544414e6f3c84ed52dd5a.zip |
Modified the documentation as per the new format/syntax
Diffstat (limited to 'docs/configuration/vpn/site2site_ipsec.rst')
-rw-r--r-- | docs/configuration/vpn/site2site_ipsec.rst | 20 |
1 files changed, 8 insertions, 12 deletions
diff --git a/docs/configuration/vpn/site2site_ipsec.rst b/docs/configuration/vpn/site2site_ipsec.rst index e72dbdd4..482c7130 100644 --- a/docs/configuration/vpn/site2site_ipsec.rst +++ b/docs/configuration/vpn/site2site_ipsec.rst @@ -8,19 +8,10 @@ to exchange encrypted information between them and VyOS itself or connected/routed networks. To configure site-to-site connection you need to add peers with the -``set vpn ipsec site-to-site`` command. +``set vpn ipsec site-to-site peer <name>`` command. -You can identify a remote peer with: - -* IPv4 or IPv6 address. This mode is easiest for configuration and mostly used - when a peer has a public static IP address; -* Hostname. This mode is similar to IP address, only you define DNS name instead - of an IP. Could be used when a peer has a public IP address and DNS name, but - an IP address could be changed from time to time; -* Remote ID of the peer. In this mode, there is no predefined remote address - nor DNS name of the peer. This mode is useful when a peer doesn't have a - publicly available IP address (NAT between it and VyOS), or IP address could - be changed. +The peer name must be an alphanumeric and can have hypen or underscore as +special characters. It is purely informational. Each site-to-site peer has the next options: @@ -111,6 +102,11 @@ Each site-to-site peer has the next options: If defined ``any``, then an IP address which configured on interface with default route will be used; +* ``remote-address`` - remote IP address or hostname for IPSec connection. + IPv4 or IPv6 address is used when a peer has a public static IP address. + Hostname is a DNS name which could be used when a peer has a public IP + address and DNS name, but an IP address could be changed from time to time. + * ``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer: |