Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| docs:guide-user:services:vpn:strongswan:configuration [2021/06/28 20:39] – Update to 5.9.2-12 philipp | docs:guide-user:services:vpn:strongswan:configuration [2022/12/12 00:25] – Fix examples: 'keyingtries' -> 'keyingretries' pcrump | ||
|---|---|---|---|
| Line 2: | Line 2: | ||
| Linux Charon IPsec daemon can be configured through ''/ | Linux Charon IPsec daemon can be configured through ''/ | ||
| - | **Note**: this has been updated to the '' | + | **Note**: this has been updated to the '' |
| ===== Sections ===== | ===== Sections ===== | ||
| Line 29: | Line 29: | ||
| |dpddelay|interval|no|30s|Liveness interval for IKE| | |dpddelay|interval|no|30s|Liveness interval for IKE| | ||
| |inactivity|interval|no|(none)|Interval before closing an inactive CHILD_SA| | |inactivity|interval|no|(none)|Interval before closing an inactive CHILD_SA| | ||
| - | |keyexchange|string|no|ikev2|Version of IKE to negotiation (" | ||
| |fragmentation|string|no|yes|Use IKE fragmentation (maybe " | |fragmentation|string|no|yes|Use IKE fragmentation (maybe " | ||
| |mobike|string|no|yes|Enable MOBIKE on IKEv2| | |mobike|string|no|yes|Enable MOBIKE on IKEv2| | ||
| Line 37: | Line 36: | ||
| |rekeytime|interval|no|(none)|IKEv2 interval to refresh keying material; also used to compute lifetime| | |rekeytime|interval|no|(none)|IKEv2 interval to refresh keying material; also used to compute lifetime| | ||
| |overtime|interval|no|(none)|Limit on time to complete rekeying/ | |overtime|interval|no|(none)|Limit on time to complete rekeying/ | ||
| + | |keyexchange|string|no|ikev2|Version of IKE to negotiation (" | ||
| ==== crypto_proposal ==== | ==== crypto_proposal ==== | ||
| Line 78: | Line 78: | ||
| option ' | option ' | ||
| # address of wan device | # address of wan device | ||
| - | option 'left_ip' ' | + | option 'local_ip' ' |
| # peer has routable DHCP'd address which changes | # peer has routable DHCP'd address which changes | ||
| option ' | option ' | ||
| Line 88: | Line 88: | ||
| option ' | option ' | ||
| option ' | option ' | ||
| - | option 'keyingtries' ' | + | option 'keyingretries' ' |
| option ' | option ' | ||
| option ' | option ' | ||
| Line 102: | Line 102: | ||
| # we don't specify subnets because we're going to use XFRM-interfaced based routes instead | # we don't specify subnets because we're going to use XFRM-interfaced based routes instead | ||
| config ' | config ' | ||
| - | | + | |
| - | | + | |
| option ' | option ' | ||
| option ' | option ' | ||
| Line 225: | Line 225: | ||
| config ' | config ' | ||
| option ' | option ' | ||
| - | option 'local_leftip' ' | + | option 'local_ip' ' |
| option ' | option ' | ||
| option ' | option ' | ||
| Line 235: | Line 235: | ||
| option ' | option ' | ||
| option ' | option ' | ||
| - | option 'keyingtries' ' | + | option 'keyingretries' ' |
| option ' | option ' | ||
| list ' | list ' | ||
| Line 247: | Line 247: | ||
| | | ||
| config tunnel ' | config tunnel ' | ||
| - | | + | |
| - | | + | |
| option ' | option ' | ||
| option ' | option ' | ||
| option ' | option ' | ||
| option ' | option ' | ||
| + | option ' | ||
| list ' | list ' | ||