summaryrefslogtreecommitdiff
path: root/docs/configuration/vpn/ipsec.rst
AgeCommit message (Collapse)Author
2024-02-27ipsec: add IKEv2 road-warrior documentationChristian Breunig
(cherry picked from commit deb4e15e51e2b5f5b281f0e17961a5c10d036bfe)
2024-01-22Updated DPD and close-action values in IPSECaapostoliuk
Changed from 'hold' to 'trap' and from 'restart' to 'start' in close-action. Changed from 'hold' to 'trap' in DPD action. (cherry picked from commit cfb7e8186d83e45092f361f9717c9542bfad053b)
2023-11-24ipsec: gre: use dummy interface in example over loopbackChristian Breunig
(cherry picked from commit 5953d6f69748c82cbd9eafbe662163924ae719e6)
2023-09-04correction of ipsec compression syntax and added a referencesrividya0208
for changes done for zone based firewall
2023-02-05Change IPsec authentication PSK and examplesViacheslav Hletenko
2023-01-19ipsec: T4925: Added PRF information in IPSEC documentationaapostoliuk
Added Pseudo-Random Functions (PRF) information in IPSEC documentation.
2022-11-08Modified the documentation as per the new format/syntaxsrividya0208
2022-09-08ipsec-interface: syntax correctionsrividya0208
The command to set the vpn interface is changed in the rolling release which is not modified in many configuration examples, corrected syntax in all pages where it is mentioned
2022-02-23Update ipsec.rstmkorobeinikov
2022-02-23Add cisco_flexvpn and install_virtualip_on optionsmkorobeinikov
Ability to set Cisco FlexVPN vendor ID payload: charon.cisco_flexvpn = yes charon.install_virtual_ip_on = tunX swanctl.connections.<conn>.vips = x.x.x.x, z.z.z.z
2022-02-23Ability to set SA life bytes and packetsmkorobeinikov
https://phabricator.vyos.net/T1856 https://github.com/vyos/vyos-1x/pull/1230
2022-02-15vpn-gre:incorrect syntax: local-ip and remote-ip changed to source-address ↵srividya0208
and remote vyos@vyos# set int tunnel tun0 Possible completions: remote Tunnel remote address source-address Source IP address used to initiate connection
2021-12-07ESP group parametersgoodNETnick
2021-11-26IKE group parametersgoodNETnick
2021-11-18VPN IPsec: Added a note related to rsa keysrividya0208
A private key is also needed to finish the ipsec setup which is not mentioned in the section "Source tunnel from loopbacks/Setting up IPSec". I have added for reference.
2021-10-19IPsec key-pair new synthaxgoodNETnick
2020-12-25RSA Keys: Added information related to RSA keyssrividya0208
RSA-Keys page was blank, so added the steps to generate and add the keys to the VPN IPSec config. Also corrected the IPSec/GRE page where authentication parameter was missing before remote-id.
2020-12-06arrange examplesrebortg