Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
userdoc:tt_ipsec_vpn_strongswan [2017/01/14 08:27] droemel |
userdoc:tt_ipsec_vpn_strongswan [2020/12/09 10:35] abelbeck [IPsec VPN (strongSwan) Configuration] |
||
---|---|---|---|
Line 4: | Line 4: | ||
The web interface Network tab, "IPsec Peers" and "IPsec Mobile" | The web interface Network tab, "IPsec Peers" and "IPsec Mobile" | ||
+ | |||
+ | !!Note: | ||
Three key strongSwan features not found in ipsec-tools (racoon): | Three key strongSwan features not found in ipsec-tools (racoon): | ||
Line 13: | Line 15: | ||
How does this apply within AstLinux ... | How does this apply within AstLinux ... | ||
- | * It is clear to the development team that we can't " | + | * A point-and-click web interface like the deprecated |
* strongSwan is needed to support endpoints with changing IP's and dynamic DNS names using IKEv2 MOBIKE, racoon only supports IKEv1. | * strongSwan is needed to support endpoints with changing IP's and dynamic DNS names using IKEv2 MOBIKE, racoon only supports IKEv1. | ||
* strongSwan is needed to interoperate with [[https:// | * strongSwan is needed to interoperate with [[https:// | ||
- | * Either racoon or strongSwan can run at a time, so users can continue to use IPsec Peers / IPsec Mobile or use a new text configuration with IPsec strongSwan, but not both. | ||
- | At this point in time, the "IPsec strongSwan" | + | At this point in time, the "IPsec strongSwan" |
!!Warning ->!! It should go without saying, never use the example pre-shared key values shown below, always use as long as practical, randomly generated shared keys. | !!Warning ->!! It should go without saying, never use the example pre-shared key values shown below, always use as long as practical, randomly generated shared keys. | ||
Line 86: | Line 87: | ||
keyingtries=%forever | keyingtries=%forever | ||
+ | !!Note:!! '' | ||
+ | |||
\\ | \\ | ||
**astlinux.example.tld: | **astlinux.example.tld: |