Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| docs:guide-user:services:vpn:strongswan:configuration [2021/06/28 20:41] – Missed some 5.9.2-12 updates on the configs philipp | docs:guide-user:services:vpn:strongswan:configuration [2022/12/12 00:25] – Fix examples: 'keyingtries' -> 'keyingretries' pcrump | ||
|---|---|---|---|
| Line 2: | Line 2: | ||
| Linux Charon IPsec daemon can be configured through ''/ | Linux Charon IPsec daemon can be configured through ''/ | ||
| - | **Note**: this has been updated to the '' | + | **Note**: this has been updated to the '' |
| ===== Sections ===== | ===== Sections ===== | ||
| Line 29: | Line 29: | ||
| |dpddelay|interval|no|30s|Liveness interval for IKE| | |dpddelay|interval|no|30s|Liveness interval for IKE| | ||
| |inactivity|interval|no|(none)|Interval before closing an inactive CHILD_SA| | |inactivity|interval|no|(none)|Interval before closing an inactive CHILD_SA| | ||
| - | |keyexchange|string|no|ikev2|Version of IKE to negotiation (" | ||
| |fragmentation|string|no|yes|Use IKE fragmentation (maybe " | |fragmentation|string|no|yes|Use IKE fragmentation (maybe " | ||
| |mobike|string|no|yes|Enable MOBIKE on IKEv2| | |mobike|string|no|yes|Enable MOBIKE on IKEv2| | ||
| Line 37: | Line 36: | ||
| |rekeytime|interval|no|(none)|IKEv2 interval to refresh keying material; also used to compute lifetime| | |rekeytime|interval|no|(none)|IKEv2 interval to refresh keying material; also used to compute lifetime| | ||
| |overtime|interval|no|(none)|Limit on time to complete rekeying/ | |overtime|interval|no|(none)|Limit on time to complete rekeying/ | ||
| + | |keyexchange|string|no|ikev2|Version of IKE to negotiation (" | ||
| ==== crypto_proposal ==== | ==== crypto_proposal ==== | ||
| Line 78: | Line 78: | ||
| option ' | option ' | ||
| # address of wan device | # address of wan device | ||
| - | option 'left_ip' ' | + | option 'local_ip' ' |
| # peer has routable DHCP'd address which changes | # peer has routable DHCP'd address which changes | ||
| option ' | option ' | ||
| Line 88: | Line 88: | ||
| option ' | option ' | ||
| option ' | option ' | ||
| - | option 'keyingtries' ' | + | option 'keyingretries' ' |
| option ' | option ' | ||
| option ' | option ' | ||
| Line 235: | Line 235: | ||
| option ' | option ' | ||
| option ' | option ' | ||
| - | option 'keyingtries' ' | + | option 'keyingretries' ' |
| option ' | option ' | ||
| list ' | list ' | ||
| Line 253: | Line 253: | ||
| option ' | option ' | ||
| option ' | option ' | ||
| + | option ' | ||
| list ' | list ' | ||