diff options
| author | Jeleel Muibi <jeleel-muibi@users.noreply.github.com> | 2026-07-09 20:21:55 +0100 |
|---|---|---|
| committer | Mergify <37929162+mergify[bot]@users.noreply.github.com> | 2026-09-04 08:59:24 +0000 |
| commit | 15223ed5dbc700f4f5ea70ee56f22432ab5c7c85 (patch) | |
| tree | 30b4cd63b99aa5fcbe1d91ee87677aa8ace7e3d3 /docs/configexamples | |
| parent | e4859ad3e1c5251fdfa0805c925c687b085c2ca1 (diff) | |
| download | vyos-documentation-15223ed5dbc700f4f5ea70ee56f22432ab5c7c85.tar.gz vyos-documentation-15223ed5dbc700f4f5ea70ee56f22432ab5c7c85.zip | |
docs: refine Google Cloud VPN example
(cherry picked from commit 367585ea4de297f375c30424b78dd9dedab09874)
Diffstat (limited to 'docs/configexamples')
| -rw-r--r-- | docs/configexamples/gcp-ha-vpn-bgp.md | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/docs/configexamples/gcp-ha-vpn-bgp.md b/docs/configexamples/gcp-ha-vpn-bgp.md index f9f792a3..e0941ce0 100644 --- a/docs/configexamples/gcp-ha-vpn-bgp.md +++ b/docs/configexamples/gcp-ha-vpn-bgp.md @@ -72,6 +72,8 @@ adjust the export policy for the other peer. On the Google Cloud side, create an HA VPN gateway, a Cloud Router, an external peer VPN gateway resource, and two VPN tunnels: +- This example follows the topology for two separate peer VPN gateways, + each with one interface and one public IP address. - Tunnel 0 connects HA VPN interface 0 to VyOS edge 1. - Tunnel 1 connects HA VPN interface 1 to VyOS edge 2. - The Cloud Router interface for tunnel 0 uses `169.254.10.2/30` and peers @@ -94,7 +96,6 @@ set vpn ipsec esp-group GCP-ESP proposal 10 hash 'sha256' set vpn ipsec ike-group GCP-IKE dead-peer-detection action 'restart' set vpn ipsec ike-group GCP-IKE dead-peer-detection interval '30' -set vpn ipsec ike-group GCP-IKE dead-peer-detection timeout '120' set vpn ipsec ike-group GCP-IKE key-exchange 'ikev2' set vpn ipsec ike-group GCP-IKE lifetime '36000' set vpn ipsec ike-group GCP-IKE proposal 10 dh-group '14' @@ -181,7 +182,6 @@ set vpn ipsec esp-group GCP-ESP proposal 10 hash 'sha256' set vpn ipsec ike-group GCP-IKE dead-peer-detection action 'restart' set vpn ipsec ike-group GCP-IKE dead-peer-detection interval '30' -set vpn ipsec ike-group GCP-IKE dead-peer-detection timeout '120' set vpn ipsec ike-group GCP-IKE key-exchange 'ikev2' set vpn ipsec ike-group GCP-IKE lifetime '36000' set vpn ipsec ike-group GCP-IKE proposal 10 dh-group '14' @@ -272,9 +272,11 @@ show ip route bgp % stop_vyoslinter - [Google Cloud: create an HA VPN gateway to a peer VPN gateway] +- [Google Cloud: HA VPN topologies] - [Google Cloud: supported IKE ciphers] [Google Cloud: create an HA VPN gateway to a peer VPN gateway]: https://docs.cloud.google.com/network-connectivity/docs/vpn/how-to/creating-ha-vpn +[Google Cloud: HA VPN topologies]: https://docs.cloud.google.com/network-connectivity/docs/vpn/concepts/topologies [Google Cloud: supported IKE ciphers]: https://docs.cloud.google.com/network-connectivity/docs/vpn/concepts/supported-ike-ciphers % start_vyoslinter |