summaryrefslogtreecommitdiff
path: root/docs/configuration/vpn
AgeCommit message (Collapse)Author
2024-05-10sstp: T4393: Add support to configure host-name (SNI)Nataliia Solomko
2024-04-30Fixed examples in accel-ppp services in IPv6 sectionaapostoliuk
Fixed examples in accel-ppp services in IPv6 section
2024-03-05Merge pull request #1300 from aapostoliuk/sstp-circinusRobert Göhler
Rewritten the SSTP server documentation
2024-03-05Merge pull request #1301 from aapostoliuk/pptp-circinusRobert Göhler
Rewritten the PPTP server documentation
2024-03-05Merge pull request #1306 from srividya0208/ipseceditRobert Göhler
addition of missing parameter
2024-03-05addition of missing parametersrividya0208
2024-03-05Rewritten the SSTP server documentationaapostoliuk
Fully rewritten SSTP server documentation.
2024-03-05Rewritten the PPTP server documentationaapostoliuk
Fully rewritten PPTP server documentation.
2024-02-27ipsec: add IKEv2 road-warrior documentationChristian Breunig
2024-02-22Rewritten the L2TP documentationaapostoliuk
Rewritten the L2TP documentation Added the example 'PPPoE over L2TP' to blueprints
2024-02-05T5971: Added PPP options documentationaapostoliuk
Added PPP options documentation
2024-01-19Merge pull request #1249 from aapostoliuk/T4658-T5953-circinusRobert Göhler
Updated DPD and close-action values in IPSEC
2024-01-19Changed IPv6 pool documentation in accel-ppp servicesaapostoliuk
Changed IPv6 pool documentation in accel-ppp services to named IPv6 pools. https://vyos.dev/T5865
2024-01-19Updated DPD and close-action values in IPSECaapostoliuk
Changed from 'hold' to 'trap' and from 'restart' to 'start' in close-action. Changed from 'hold' to 'trap' in DPD action.
2023-12-27ocserv: add http-security-headers documentationfett0
2023-12-11Merge pull request #1178 from aapostoliuk/T5688-2-circinusRobert Göhler
sstp: T5688: Fixed 'client-ip-pool' configuration in the example
2023-12-08sstp: T5688: Fixed 'client-ip-pool' configuration in the exampleaapostoliuk
Fixed 'client-ip-pool' configuration in the example
2023-12-05accel-ppp: T5688: Changing CLI to create client address poolaapostoliuk
Changing CLI to create client address pool
2023-12-02vpn: update site2site VTI exampleChristian Breunig
2023-11-24ipsec: gre: use dummy interface in example over loopbackChristian Breunig
2023-11-16Nat updategreenpsi
Update some nat commands to new syntax
2023-11-09Merge pull request #1146 from srividya0208/minor_errorsDaniil Baturin
correction of typos
2023-11-09correction of typossrividya0208
2023-10-26Merge pull request #1126 from srividya0208/ipsec_vipsRobert Göhler
Added config example of vpn ipsec site-to-site
2023-10-26Added config example of vpn ipsec site-to-sitesrividya0208
2023-10-19Merge pull request #1119 from aslanvyos/patch-8Robert Göhler
Update dmvpn.rst
2023-10-18Update dmvpn.rstaslanvyos
When we put this command we got an error like: set interfaces tunnel tun100 local-ip '192.0.2.1' Configuration path: interfaces tunnel tun100 [local-ip] is not valid Set failed
2023-10-18Update site2site_ipsec.rstaslanvyos
To make easily understandable the Site-to-Site VPN ikev2 configuration for users (especially if the user is new to VyOS) made the following changes: - Added dummy interface to both routers for testing purposes - Added static route for both routers for dummy interface - Added this line of command: set vpn ipsec option disable-route-autoinstall Because when we write this line after the commit action we got an error like: WARNING: It's recommended to use ipsec vti with the next command - corrected this line: set vpn ipsec site-to-site peer OFFICE-B local-address '192.168.0.10' to this: set vpn ipsec site-to-site peer OFFICE-B local-address '172.18.201.10'
2023-09-28Added details about ipsec remote-accesssrividya0208
2023-09-04correction of ipsec compression syntax and added a referencesrividya0208
for changes done for zone based firewall
2023-06-13corrected the l2tp op commandsrividya0208
2023-05-20Update openconnect.rst correct code-blockRobert Göhler
2023-05-19ocserv: fix: indent of warning section text overflowing outside the warning boxJamie Austin
2023-05-17T3896: ocserv: openconnect: document identity based configurationJamie Austin
2023-02-26tunnel: T5034: migrate "multicast enable" CLI node to enable-multicastChristian Breunig
2023-02-05Change IPsec authentication PSK and examplesViacheslav Hletenko
2023-01-31fix build warnings and errorsrebortg
2023-01-29T4958: ocserv: openconnect: document RADIUS accountingJamie Austin
2023-01-19ipsec: T4925: Added PRF information in IPSEC documentationaapostoliuk
Added Pseudo-Random Functions (PRF) information in IPSEC documentation.
2023-01-03fix closeaction imagerebortg
2023-01-02close-action: image reference is modified from image to figuresrividya0208
2022-12-27close-action: added an image to the details.srividya0208
There was a typo in the reference for the image added in the previous commit, corrected that.
2022-12-26ipsec_closeaction: added recommendation for closeaction optionssrividya0208
Added VPN IPSec connection-type recommendation for the close-action and dpd settings. For example close-action restart should not be added on both peers
2022-12-11T4792: add initial documentation for SSTP clientChristian Poessinger
2022-11-08Modified the documentation as per the new format/syntaxsrividya0208
2022-09-29ipsec: T4118: Change IPSec syntaxViacheslav Hletenko
Migration and Change boolean nodes "enable/disable" to disable-xxxx, enable-xxxx and just xxx for VPN IPsec configurations - IKE changes: - replace 'ipsec ike-group <tag> mobike disable' => 'ipsec ike-group <tag> disable-mobike' - replace 'ipsec ike-group <tag> ikev2-reauth yes|no' => 'ipsec ike-group <tag> ikev2-reauth' - ESP changes: - replace 'ipsec esp-group <tag> compression enable' => 'ipsec esp-group <tag> compression' - PEER changes: - replace: 'peer <tag> id xxx' => 'peer <tag> local-id xxx' - replace: 'peer <tag> force-encapsulation enable' => 'peer <tag> force-udp-encapsulation' - add option: 'peer <tag> remote-address x.x.x.x' If peer name is IPv4 or IPv6 address add remote-address via migration script
2022-09-08ipsec-interface: syntax correctionsrividya0208
The command to set the vpn interface is changed in the rolling release which is not modified in many configuration examples, corrected syntax in all pages where it is mentioned
2022-08-05openconnect: Fixed gramma mistake in commandsaapostoliuk
Fixed gramma mistake in commands
2022-08-01Update sstp.rstKav7
The command path: set vpn sstp ssl key-file <file> Does not appear to exist anymore, as per https://github.com/vyos/vyos-1x/pull/1038 Can the doc be updated with instructions on SSTP setup with new command structure?
2022-07-19Add missing param to encrypt tunnelEshenko Dmitriy