mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-29 08:06:04 +03:00
Code Issues Projects Releases Wiki Activity

Update IKEv2 docs

Browse Source 
- Change 'mobike' from 'yes' to 'no' by default, because it is not
  available on Ubuntu and can prevent the IKEv2 config from loading
This commit is contained in:
hwdsl2 2018-11-02 01:30:11 -05:00
parent e797493a17
commit ce895e7116
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/ikev2-howto-zh.md
View File

@ -73,10 +73,12 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来
$ cat >> /etc/ipsec.conf <<EOF $ cat >> /etc/ipsec.conf <<EOF
modecfgdns="8.8.8.8, 8.8.4.4" modecfgdns="8.8.8.8, 8.8.4.4"
encapsulation=yes encapsulation=yes
mobike=yes mobike=no
EOF EOF
``` ```
**注：** 如果你的服务器运行 Debian 或者 CentOS，并且你想要启用 MOBIKE 支持，可以将上面命令中的 `mobike=no` 换成 `mobike=yes`。**不要**在 Ubuntu 系统上启用该选项。
如果是 Libreswan 3.19-3.22： 如果是 Libreswan 3.19-3.22：
```bash ```bash

4
docs/ikev2-howto.md
View File

@ -73,10 +73,12 @@ Before continuing, make sure you have successfully <a href="https://github.com/h
$ cat >> /etc/ipsec.conf <<EOF $ cat >> /etc/ipsec.conf <<EOF
modecfgdns="8.8.8.8, 8.8.4.4" modecfgdns="8.8.8.8, 8.8.4.4"
encapsulation=yes encapsulation=yes
mobike=yes mobike=no
EOF EOF
``` ```
**Note:** If your server runs Debian or CentOS and you wish to enable MOBIKE support, replace `mobike=no` with `mobike=yes` in the command above. DO NOT enable this option on Ubuntu systems.
For Libreswan 3.19-3.22: For Libreswan 3.19-3.22:
```bash ```bash