1
0
mirror of synced 2024-11-28 15:56:01 +03:00

- add corresponding documentations.

- minor edits to fix typos.
- add instruction image.
- add copyright email address.
This commit is contained in:
Scottpedia 2023-08-06 09:51:58 +08:00
parent 9cdb60799c
commit 0ecbbc37b1
4 changed files with 37 additions and 7 deletions

View File

@ -39,12 +39,27 @@
要指定一个 AWS 区域,你可以使用导航栏上你的帐户信息右侧的选择器。当你在最后一步中点击 "create stack" 之后,请等待堆栈创建和 VPN 安装完成,可能需要最多 15 分钟。一旦堆栈的部署状态变成 **"CREATE_COMPLETE"** ,你就可以连接到 VPN 服务器了。单击 **Outputs** 选项卡以查看你的 VPN 登录信息,然后继续下一步:[配置 VPN 客户端](../README-zh.md#下一步)。 要指定一个 AWS 区域,你可以使用导航栏上你的帐户信息右侧的选择器。当你在最后一步中点击 "create stack" 之后,请等待堆栈创建和 VPN 安装完成,可能需要最多 15 分钟。一旦堆栈的部署状态变成 **"CREATE_COMPLETE"** ,你就可以连接到 VPN 服务器了。单击 **Outputs** 选项卡以查看你的 VPN 登录信息,然后继续下一步:[配置 VPN 客户端](../README-zh.md#下一步)。
> **注:** IKEv2 模式的客户端配置文件可以在你的 VPN 服务器的 `/root` 目录中找到。要使用 SSH 连接到服务器,请参见下面的 "常见问题" 小节。
> **注:** 如果你删除使用此模板部署的 CloudFormation 堆栈,在部署期间添加的密钥对将不会自动被清理。要管理你的密钥对,请转到 EC2 控制台 -> 密钥对。 > **注:** 如果你删除使用此模板部署的 CloudFormation 堆栈,在部署期间添加的密钥对将不会自动被清理。要管理你的密钥对,请转到 EC2 控制台 -> 密钥对。
## 常见问题 ## 常见问题
<details>
<summary>
如何在部署结束后提取 IKEv2 连接配置文件?
</summary>
部署结束以后,生成的 IKEv2 配置文件已经被上传到了一个预先创建好的 AWS Simple Storage Service(S3) 储存桶。下载配置文件的链接可以在 **Outputs** 页面下找到。
点击下载链接下载名为 `profiles.zip` 的压缩包文件。解压密码为**你之前配置好的 VPN 连接密码。**
值得注意的是,配置文件下载链接将会在**1天内过期**,从堆栈部署完成时算起。如果你将堆栈删除,存放配置文件的储存桶不会被删除。
关于如何在 IKEv2 模式下配置你的客户端,请参见: [IKEv2 VPN 配置和使用指南](/docs/ikev2-howto-zh.md#管理-ikev2-客户端)。
![IKEv2 配置文件](images/credentials.png)
</details>
<details> <details>
<summary> <summary>
部署后如何通过 SSH 连接到服务器? 部署后如何通过 SSH 连接到服务器?
@ -85,4 +100,4 @@ $ ssh -i path/to/your/key-file.pem instance-username@instance-ip-address
## 作者 ## 作者
版权所有 (C) 2020-2023 [S. X. Liang](https://github.com/scottpedia) 版权所有 (C) 2020-2023 [S. X. Liang](https://github.com/scottpedia) <[scottliang3@cmail.carleton.ca](mailto:scottliang3@cmail.carleton.ca)>

View File

@ -39,12 +39,27 @@ Click the icon below to start:
You may choose an AWS region using the selector to the right of your account information on the navigation bar. After you click "create stack" in the final step, please wait for the stack creation and VPN setup to complete, which may take up to 15 minutes. As soon as the stack's status changes to **"CREATE_COMPLETE"**, you are ready to connect to the VPN server. Click the **Outputs** tab to view your VPN login details. Then continue to [Next steps: Configure VPN Clients](../README.md#next-steps). You may choose an AWS region using the selector to the right of your account information on the navigation bar. After you click "create stack" in the final step, please wait for the stack creation and VPN setup to complete, which may take up to 15 minutes. As soon as the stack's status changes to **"CREATE_COMPLETE"**, you are ready to connect to the VPN server. Click the **Outputs** tab to view your VPN login details. Then continue to [Next steps: Configure VPN Clients](../README.md#next-steps).
> **Note:** Client configuration files for IKEv2 mode can be found in the `/root` folder of your VPN server. To connect to the VPN server using SSH, refer to the FAQs section below.
> **Note:** If you delete a CloudFormation stack deployed using this template, the key pair that was added during deployment won't be automatically cleaned up. To manage your key pairs, go to EC2 console -> Key Pairs. > **Note:** If you delete a CloudFormation stack deployed using this template, the key pair that was added during deployment won't be automatically cleaned up. To manage your key pairs, go to EC2 console -> Key Pairs.
## FAQs ## FAQs
<details>
<summary>
How to retrieve the IKEv2 credentials following the deployment?
</summary>
After the deployment completes, connection credentials generated for IKEv2 mode are uploaded to a specific AWS Simple Storage Service(S3) Bucket. The download link is then provided under the **Outputs** tab.
Simply click on the link to download a compressed package named `profiles.zip`. To extract the content from the file, you will be prompted to enter a password. And that password is the **same one used to connect to your VPN server.**
It's important to note that the link provided for downloading the credential package **will expire in 1 day** following the successful deployment of the stack. If you delete the stack, the bucket that stores the crendentials will not be deleted.
To learn more about how to configure your clients using IKEv2 mode, please refer to: [Guide: How to Set Up and Use IKEv2 VPN](/docs/ikev2-howto.md#configure-ikev2-vpn-vlients).
![Credentials](images/credentials.png)
</details>
<details> <details>
<summary> <summary>
How to connect to the server via SSH after deployment? How to connect to the server via SSH after deployment?
@ -85,4 +100,4 @@ $ ssh -i path/to/your/key-file.pem instance-username@instance-ip-address
## Author ## Author
Copyright (C) 2020-2023 [S. X. Liang](https://github.com/scottpedia) Copyright (C) 2020-2023 [S. X. Liang](https://github.com/scottpedia) <[scottliang3@cmail.carleton.ca](mailto:scottliang3@cmail.carleton.ca)>

View File

@ -7,7 +7,7 @@
"", "",
"AWS Cloudformation Template for deploying IPSec VPN Servers on AWS EC2,", "AWS Cloudformation Template for deploying IPSec VPN Servers on AWS EC2,",
"based on the work of Lin Song <linsongui@gmail.com> : https://github.com/hwdsl2/setup-ipsec-vpn", "based on the work of Lin Song <linsongui@gmail.com> : https://github.com/hwdsl2/setup-ipsec-vpn",
"The latest verstion of this template can be found at : https://github.com/hwdsl2/setup-ipsec-vpn/aws", "The latest version of this template can be found at : https://github.com/hwdsl2/setup-ipsec-vpn/aws",
"", "",
"Copyright (C) 2020-2023 Scott X. Liang <scott.liang@pm.me>", "Copyright (C) 2020-2023 Scott X. Liang <scott.liang@pm.me>",
"", "",

BIN
aws/images/credentials.png Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 290 KiB