Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
userdoc:tt_ipsec_vpn_strongswan [2020/12/04 14:05] abelbeck [IPsec VPN (strongSwan) Configuration] |
userdoc:tt_ipsec_vpn_strongswan [2020/12/09 10:35] abelbeck [IPsec VPN (strongSwan) Configuration] |
||
---|---|---|---|
Line 15: | Line 15: | ||
How does this apply within AstLinux ... | How does this apply within AstLinux ... | ||
- | * It is clear to the development team that we can't " | + | * A point-and-click web interface like the deprecated |
* strongSwan is needed to support endpoints with changing IP's and dynamic DNS names using IKEv2 MOBIKE, racoon only supports IKEv1. | * strongSwan is needed to support endpoints with changing IP's and dynamic DNS names using IKEv2 MOBIKE, racoon only supports IKEv1. | ||
* strongSwan is needed to interoperate with [[https:// | * strongSwan is needed to interoperate with [[https:// | ||
- | * Either racoon or strongSwan can run at a time, so users can continue to use IPsec Peers / IPsec Mobile or use a new text configuration with IPsec strongSwan, but not both. | ||
- | At this point in time, the "IPsec strongSwan" | + | At this point in time, the "IPsec strongSwan" |
!!Warning ->!! It should go without saying, never use the example pre-shared key values shown below, always use as long as practical, randomly generated shared keys. | !!Warning ->!! It should go without saying, never use the example pre-shared key values shown below, always use as long as practical, randomly generated shared keys. |