summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2025-11-25 12:54:01 +0100
committerGitHub <noreply@github.com>2025-11-25 11:54:01 +0000
commit8c0c0bfe1c041fb6cd48402db033351f094c0e0c (patch)
treeabe0e8bbc3ae4bf91c7e2cec32dfbae653892add /docs
parente233231e35b3c0990240638f16b6f0b5937e0d6c (diff)
downloadvyos-documentation-8c0c0bfe1c041fb6cd48402db033351f094c0e0c.tar.gz
vyos-documentation-8c0c0bfe1c041fb6cd48402db033351f094c0e0c.zip
ipsec: T8027: voluntarily send its certificate, even if it wasn't requested (#1712)
Diffstat (limited to 'docs')
-rw-r--r--docs/configuration/vpn/ipsec/remoteaccess_ipsec.rst8
1 files changed, 8 insertions, 0 deletions
diff --git a/docs/configuration/vpn/ipsec/remoteaccess_ipsec.rst b/docs/configuration/vpn/ipsec/remoteaccess_ipsec.rst
index 481f1f7e..1a41d987 100644
--- a/docs/configuration/vpn/ipsec/remoteaccess_ipsec.rst
+++ b/docs/configuration/vpn/ipsec/remoteaccess_ipsec.rst
@@ -133,6 +133,14 @@ following commands.
set vpn ipsec remote-access connection rw authentication client-mode 'eap-mschapv2'
set vpn ipsec remote-access connection rw authentication local-users username vyos password 'vyos'
+Some client operating systems like to see the servers certificate. The following
+option causes the server to voluntarily send its certificate, even if it wasn't
+requested.
+
+.. code-block:: none
+
+ set vpn ipsec remote-access connection rw authentication always-send-cert
+
Client Configuration
^^^^^^^^^^^^^^^^^^^^