From 7f65ee217c53caa1d27b2f13f3fc2c36824f14eb Mon Sep 17 00:00:00 2001 From: hwdsl2 Date: Sat, 19 Mar 2022 10:19:48 -0500 Subject: [PATCH] Update docs --- docs/ikev2-howto-zh.md | 10 +++++----- docs/ikev2-howto.md | 12 ++++++------ 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/docs/ikev2-howto-zh.md b/docs/ikev2-howto-zh.md index f73eacb..0f5cb43 100644 --- a/docs/ikev2-howto-zh.md +++ b/docs/ikev2-howto-zh.md @@ -507,7 +507,7 @@ sudo chmod 600 ikev2vpnca.cer vpnclient.cer vpnclient.key ### 列出已有的客户端 -如果要列出已有的 IKEv2 客户端的名称，运行 [辅助脚本](#使用辅助脚本配置-ikev2) 并添加 `--listclients` 选项。使用参数 `-h` 显示使用信息。 +要列出已有的 IKEv2 客户端的名称，运行辅助脚本并添加 `--listclients` 选项。使用参数 `-h` 显示使用信息。 ```bash sudo ikev2.sh --listclients @@ -515,7 +515,7 @@ sudo ikev2.sh --listclients ### 添加客户端证书 -如果要为更多的 IKEv2 客户端生成证书，只需重新运行 [辅助脚本](#使用辅助脚本配置-ikev2)。要自定义客户端证书选项，可以在不添加参数的情况下运行脚本。 +要为更多的 IKEv2 客户端添加证书，运行辅助脚本并添加 `--addclient` 选项。要自定义客户端选项，可以在不添加参数的情况下运行脚本。 ```bash sudo ikev2.sh --addclient [client name] @@ -525,7 +525,7 @@ sudo ikev2.sh --addclient [client name] ### 导出已有的客户端的配置 -在默认情况下，IKEv2 [辅助脚本](#使用辅助脚本配置-ikev2) 在运行后会导出客户端配置。如果之后你想要为一个已有的客户端导出配置，可以运行： +在默认情况下，IKEv2 辅助脚本在运行后会导出客户端配置。如果之后你想要导出一个已有的客户端，可以运行： ```bash sudo ikev2.sh --exportclient [client name] @@ -573,7 +573,7 @@ sudo ikev2.sh --exportclient [client name] ### 吊销客户端证书 -在某些情况下，你可能需要吊销一个之前生成的 VPN 客户端证书。要吊销证书，重新运行辅助脚本并选择适当的选项。或者你也可以运行： +在某些情况下，你可能需要吊销一个之前生成的 VPN 客户端证书。要吊销证书，可以运行辅助脚本。 ```bash sudo ikev2.sh --revokeclient [client name] @@ -972,7 +972,7 @@ chmod +x /opt/src/ikev2.sh && ln -s /opt/src/ikev2.sh /usr/bin 2>/dev/null ## 移除 IKEv2 -如果你想要从 VPN 服务器移除 IKEv2，但是保留 [IPsec/L2TP](clients-zh.md) 和 [IPsec/XAuth ("Cisco IPsec")](clients-xauth-zh.md) 模式（如果已安装），请重新运行 [辅助脚本](#使用辅助脚本配置-ikev2) 并选择适当的选项。**警告：** 这将**永久删除**所有的 IKEv2 配置（包括证书和密钥），并且**不可撤销**！ +如果你想要从 VPN 服务器移除 IKEv2，但是保留 [IPsec/L2TP](clients-zh.md) 和 [IPsec/XAuth ("Cisco IPsec")](clients-xauth-zh.md) 模式（如果已安装），可以运行辅助脚本。**警告：** 这将**永久删除**所有的 IKEv2 配置（包括证书和密钥），并且**不可撤销**！ ```bash sudo ikev2.sh --removeikev2 diff --git a/docs/ikev2-howto.md b/docs/ikev2-howto.md index 63ee84c..5a91d24 100644 --- a/docs/ikev2-howto.md +++ b/docs/ikev2-howto.md @@ -122,7 +122,7 @@ To customize IKEv2 or client options, run this script without arguments. *Read this in other languages: [English](ikev2-howto.md#configure-ikev2-vpn-clients), [简体中文](ikev2-howto-zh.md#配置-ikev2-vpn-客户端).* -**Note:** To add or export IKEv2 client(s), run `sudo ikev2.sh`. Use `-h` to show usage information. IKEv2 client config files can be safely deleted after import. +**Note:** To add or export IKEv2 client(s), run `sudo ikev2.sh`. Use `-h` to show usage. IKEv2 client config files can be safely deleted after import. * [Windows 7, 8, 10 and 11](#windows-7-8-10-and-11) * [OS X (macOS)](#os-x-macos) @@ -509,7 +509,7 @@ for the entire network, or use `192.168.0.10` for just one device, and so on. ### List existing clients -If you want to list the names of existing IKEv2 clients, run the [helper script](#set-up-ikev2-using-helper-script) with the `--listclients` option. Use option `-h` to show usage information. +To list the names of existing IKEv2 clients, run the helper script with the `--listclients` option. Use option `-h` to show usage. ```bash sudo ikev2.sh --listclients @@ -517,7 +517,7 @@ sudo ikev2.sh --listclients ### Add a client certificate -To generate certificates for additional IKEv2 clients, just run the [helper script](#set-up-ikev2-using-helper-script) again. To customize client certificate options, run the script without arguments. +To add certificates for additional IKEv2 clients, run the helper script with the `--addclient` option. To customize client options, run the script without arguments. ```bash sudo ikev2.sh --addclient [client name] @@ -527,7 +527,7 @@ Alternatively, you may manually add a client certificate. Refer to step 4 in [th ### Export configuration for an existing client -By default, the IKEv2 [helper script](#set-up-ikev2-using-helper-script) exports client configuration after running. If later you want to export configuration for an existing client, you may use: +By default, the IKEv2 helper script exports client configuration after running. If later you want to export an existing client, you may use: ```bash sudo ikev2.sh --exportclient [client name] @@ -575,7 +575,7 @@ To delete a client certificate: ### Revoke a client certificate -In certain circumstances, you may need to revoke a previously generated VPN client certificate. To revoke a certificate, run the helper script again and select the appropriate option. Or you may run: +In certain circumstances, you may need to revoke a previously generated VPN client certificate. To revoke a certificate, run the helper script. ```bash sudo ikev2.sh --revokeclient [client name] @@ -974,7 +974,7 @@ Before continuing, you **must** restart the IPsec service. The IKEv2 setup on th ## Remove IKEv2 -If you want to remove IKEv2 from the VPN server, but keep the [IPsec/L2TP](clients.md) and [IPsec/XAuth ("Cisco IPsec")](clients-xauth.md) modes (if installed), run the [helper script](#set-up-ikev2-using-helper-script) again and select the appropriate option. **Warning:** All IKEv2 configuration including certificates and keys will be **permanently deleted**. This **cannot be undone**! +If you want to remove IKEv2 from the VPN server, but keep the [IPsec/L2TP](clients.md) and [IPsec/XAuth ("Cisco IPsec")](clients-xauth.md) modes (if installed), run the helper script. **Warning:** All IKEv2 configuration including certificates and keys will be **permanently deleted**. This **cannot be undone**! ```bash sudo ikev2.sh --removeikev2