blob: 0b5269492d5da9ee96022ebf0afafac858bc0613 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
---
# docs.vyos.io/en/1.5/configexamples/azure-vpn-bgp.html
ipsec_route_based_peers:
- name: 203.0.113.2
description: AZURE PRIMARY TUNNEL
psk_name: azure
psk: ch00s3-4-s3cur3-psk
local_address: 10.10.0.5 # private IP; the device is behind NAT
local_id: 198.51.100.3 # public IP
remote_address: 203.0.113.2
connection_type: initiate
ikev2_reauth: inherit
esp_group_on_vti: true
vti: {interface: vti1, address: 10.10.1.5/32, description: Azure Tunnel, adjust_mss: "1350"}
ipsec_route_based_ike_group:
name: AZURE
key_exchange: ikev2
ikev2_reauth: true
lifetime: 28800
proposal_id: 1
dh_group: 2
encryption: aes256
hash: sha1
dead_peer_detection: {action: restart, interval: 15, timeout: 30}
ipsec_route_based_esp_group:
name: AZURE
lifetime: 3600
mode: tunnel
pfs: dh-group2
proposal_id: 1
encryption: aes256
hash: sha1
ipsec_route_based_interfaces: [eth0]
ipsec_route_based_disable_route_autoinstall: false # the page does not set it
ipsec_route_based_interface_routes:
- {dest: 10.0.0.4/32, interface: vti1}
ipsec_route_based_bgp:
asn: 64499
neighbors:
- address: 10.0.0.4
remote_as: 65540
holdtime: 30
keepalive: 10
disable_connected_check: true
soft_reconfiguration_inbound: true
|
