Page MenuHomeVyOS Platform

abferm (Alex Ferm)
User

Projects

User does not belong to any projects.

User Details

User Since
May 24 2016, 8:14 PM (412 w, 2 d)

Recent Activity

May 26 2016

abferm added a comment to T71: Add virtual IP and route installation policy options for IPsec.

I've found examples of people setting accept_unencrypted_mainmode_messages, cisco_unity, ikesa_table_segments, ikesa_table_size, and init_limit_half_open.

May 26 2016, 6:52 PM · Restricted Project, VyOS 1.4 Sagitta
abferm added a comment to T71: Add virtual IP and route installation policy options for IPsec.

The full list of options is available here https://wiki.strongswan.org/projects/strongswan/wiki/StrongswanConf

May 26 2016, 2:03 PM · Restricted Project, VyOS 1.4 Sagitta

May 24 2016

abferm added a comment to T71: Add virtual IP and route installation policy options for IPsec.

install_routes sets a default route in table 220. If this happens on both ends of the tunnel you end up with a circular route.
install_virtual_ip attempts to install an address on the local interface for the ip used in the tunnel

May 24 2016, 8:37 PM · Restricted Project, VyOS 1.4 Sagitta
abferm created T72: Key/Mark not being added to vti interface in 1.2.x.
May 24 2016, 8:24 PM · Invalid
abferm created T71: Add virtual IP and route installation policy options for IPsec.
May 24 2016, 8:19 PM · Restricted Project, VyOS 1.4 Sagitta