Update docs
This commit is contained in:
hwdsl2
parent
2077b5a420
commit
e9b38c8a65
@ -189,7 +189,7 @@ https://gitlab.com/hwdsl2/setup-ipsec-vpn/-/raw/master/vpnsetup.sh
|
||||
|
||||
**[配置 IPsec/XAuth ("Cisco IPsec") VPN 客户端](docs/clients-xauth-zh.md)**
|
||||
|
||||
**[下载 VPN 文档的 PDF 版本](https://ko-fi.com/post/PDF-versions-of-Setup-IPsec-VPN-docs-for-easy-shar-E1E4DO69I)**
|
||||
**[下载 VPN 文档的 PDF 版本（支持者）](https://ko-fi.com/post/PDF-versions-of-Setup-IPsec-VPN-docs-for-easy-shar-E1E4DO69I)**
|
||||
|
||||
开始使用自己的专属 VPN! :sparkles::tada::rocket::sparkles:
|
||||
|
||||
|
||||
@ -189,7 +189,7 @@ Get your computer or device to use the VPN. Please refer to:
|
||||
|
||||
**[Configure IPsec/XAuth ("Cisco IPsec") VPN Clients](docs/clients-xauth.md)**
|
||||
|
||||
**[Download PDF versions of VPN documentation](https://ko-fi.com/post/PDF-versions-of-Setup-IPsec-VPN-docs-for-easy-shar-E1E4DO69I)**
|
||||
**[Download PDF versions of VPN docs (supporters)](https://ko-fi.com/post/PDF-versions-of-Setup-IPsec-VPN-docs-for-easy-shar-E1E4DO69I)**
|
||||
|
||||
Enjoy your very own VPN! :sparkles::tada::rocket::sparkles:
|
||||
|
||||
|
||||
@ -16,9 +16,13 @@ IPsec/XAuth 模式也称为 "Cisco IPsec"。该模式通常能够比 IPsec/L2TP
|
||||
* [iOS (iPhone/iPad)](#ios)
|
||||
* [Linux](#linux)
|
||||
|
||||
> 如果你喜欢这个项目，可以表达你的支持或感谢。
|
||||
>
|
||||
> <a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
<details>
|
||||
<summary>
|
||||
如果你喜欢这个项目，可以表达你的支持或感谢。
|
||||
</summary>
|
||||
|
||||
<a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
</details>
|
||||
|
||||
## Windows
|
||||
|
||||
|
||||
@ -16,9 +16,13 @@ IPsec/XAuth mode is also called "Cisco IPsec". This mode is generally **faster t
|
||||
* [iOS (iPhone/iPad)](#ios)
|
||||
* [Linux](#linux)
|
||||
|
||||
> Like this project? You can show your support or appreciation.
|
||||
>
|
||||
> <a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
<details>
|
||||
<summary>
|
||||
Like this project? You can show your support or appreciation.
|
||||
</summary>
|
||||
|
||||
<a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
</details>
|
||||
|
||||
## Windows
|
||||
|
||||
|
||||
@ -16,9 +16,13 @@
|
||||
* [Linux](#linux)
|
||||
* [故障排除](#故障排除)
|
||||
|
||||
> 如果你喜欢这个项目，可以表达你的支持或感谢。
|
||||
>
|
||||
> <a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
<details>
|
||||
<summary>
|
||||
如果你喜欢这个项目，可以表达你的支持或感谢。
|
||||
</summary>
|
||||
|
||||
<a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
</details>
|
||||
|
||||
## Windows
|
||||
|
||||
|
||||
@ -16,9 +16,13 @@ After [setting up your own VPN server](https://github.com/hwdsl2/setup-ipsec-vpn
|
||||
* [Linux](#linux)
|
||||
* [Troubleshooting](#troubleshooting)
|
||||
|
||||
> Like this project? You can show your support or appreciation.
|
||||
>
|
||||
> <a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
<details>
|
||||
<summary>
|
||||
Like this project? You can show your support or appreciation.
|
||||
</summary>
|
||||
|
||||
<a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
</details>
|
||||
|
||||
## Windows
|
||||
|
||||
|
||||
@ -35,14 +35,20 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来
|
||||
* [Linux](#linux)
|
||||
* [Mikrotik RouterOS](#routeros)
|
||||
|
||||
> 如果你喜欢这个项目，可以表达你的支持或感谢。
|
||||
>
|
||||
> <a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
<details>
|
||||
<summary>
|
||||
如果你喜欢这个项目，可以表达你的支持或感谢。
|
||||
</summary>
|
||||
|
||||
<a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
</details>
|
||||
|
||||
### Windows 7, 8, 10 和 11
|
||||
|
||||
#### 自动导入配置
|
||||
|
||||
[**屏幕录影：** 自动导入 IKEv2 配置（支持者）](https://ko-fi.com/post/IKEv2-Auto-Import-Configuration-on-Windows-8-10-a-K3K1DQCHW)
|
||||
|
||||
**Windows 8, 10 和 11** 用户可以自动导入 IKEv2 配置：
|
||||
|
||||
1. 将生成的 `.p12` 文件安全地传送到你的计算机。
|
||||
@ -56,6 +62,8 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来
|
||||
|
||||
#### 手动导入配置
|
||||
|
||||
[**屏幕录影：** 手动导入 IKEv2 配置（支持者）](https://ko-fi.com/post/Video-IKEv2-Manually-Import-Configuration-H2H1DS8SV)
|
||||
|
||||
或者，**Windows 7, 8, 10 和 11** 用户可以手动导入 IKEv2 配置：
|
||||
|
||||
1. 将生成的 `.p12` 文件安全地传送到你的计算机，然后导入到证书存储。
|
||||
@ -77,14 +85,14 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来
|
||||
|
||||
```console
|
||||
# 创建 VPN 连接（将服务器地址换成你自己的值）
|
||||
powershell -command "Add-VpnConnection -ServerAddress '你的 VPN 服务器 IP（或者域名）' ^
|
||||
powershell -command ^"Add-VpnConnection -ServerAddress '你的 VPN 服务器 IP（或者域名）' ^
|
||||
-Name 'My IKEv2 VPN' -TunnelType IKEv2 -AuthenticationMethod MachineCertificate ^
|
||||
-EncryptionLevel Required -PassThru"
|
||||
-EncryptionLevel Required -PassThru^"
|
||||
# 设置 IPsec 参数
|
||||
powershell -command "Set-VpnConnectionIPsecConfiguration -ConnectionName 'My IKEv2 VPN' ^
|
||||
powershell -command ^"Set-VpnConnectionIPsecConfiguration -ConnectionName 'My IKEv2 VPN' ^
|
||||
-AuthenticationTransformConstants GCMAES128 -CipherTransformConstants GCMAES128 ^
|
||||
-EncryptionMethod AES256 -IntegrityCheckMethod SHA256 -PfsGroup None ^
|
||||
-DHGroup Group14 -PassThru -Force"
|
||||
-DHGroup Group14 -PassThru -Force^"
|
||||
```
|
||||
|
||||
**Windows 7** 不支持这些命令，你可以 [手动创建 VPN 连接](https://wiki.strongswan.org/projects/strongswan/wiki/Win7Config)。
|
||||
|
||||
@ -35,14 +35,20 @@ By default, IKEv2 is automatically set up when running the VPN setup script. If
|
||||
* [Linux](#linux)
|
||||
* [Mikrotik RouterOS](#routeros)
|
||||
|
||||
> Like this project? You can show your support or appreciation.
|
||||
>
|
||||
> <a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
<details>
|
||||
<summary>
|
||||
Like this project? You can show your support or appreciation.
|
||||
</summary>
|
||||
|
||||
<a href="https://ko-fi.com/hwdsl2" target="_blank"><img height="36" width="187" src="images/kofi2.png" border="0" alt="Buy Me a Coffee at ko-fi.com" /></a> <a href="https://coindrop.to/hwdsl2" target="_blank"><img src="images/embed-button.png" height="36" width="145" border="0" alt="Coindrop.to me" /></a>
|
||||
</details>
|
||||
|
||||
### Windows 7, 8, 10 and 11
|
||||
|
||||
#### Auto-import configuration
|
||||
|
||||
[**Screencast:** IKEv2 Auto Import Configuration (supporters)](https://ko-fi.com/post/IKEv2-Auto-Import-Configuration-on-Windows-8-10-a-K3K1DQCHW)
|
||||
|
||||
**Windows 8, 10 and 11** users can automatically import IKEv2 configuration:
|
||||
|
||||
1. Securely transfer the generated `.p12` file to your computer.
|
||||
@ -56,6 +62,8 @@ If you get an error when trying to connect, see [Troubleshooting](#troubleshooti
|
||||
|
||||
#### Manually import configuration
|
||||
|
||||
[**Screencast:** IKEv2 Manually Import Configuration (supporters)](https://ko-fi.com/post/Video-IKEv2-Manually-Import-Configuration-H2H1DS8SV)
|
||||
|
||||
Alternatively, **Windows 7, 8, 10 and 11** users can manually import IKEv2 configuration:
|
||||
|
||||
1. Securely transfer the generated `.p12` file to your computer, then import it into the certificate store.
|
||||
@ -77,14 +85,14 @@ Alternatively, **Windows 7, 8, 10 and 11** users can manually import IKEv2 confi
|
||||
|
||||
```console
|
||||
# Create VPN connection (replace server address with your own value)
|
||||
powershell -command "Add-VpnConnection -ServerAddress 'Your VPN Server IP (or DNS name)' ^
|
||||
powershell -command ^"Add-VpnConnection -ServerAddress 'Your VPN Server IP (or DNS name)' ^
|
||||
-Name 'My IKEv2 VPN' -TunnelType IKEv2 -AuthenticationMethod MachineCertificate ^
|
||||
-EncryptionLevel Required -PassThru"
|
||||
-EncryptionLevel Required -PassThru^"
|
||||
# Set IPsec configuration
|
||||
powershell -command "Set-VpnConnectionIPsecConfiguration -ConnectionName 'My IKEv2 VPN' ^
|
||||
powershell -command ^"Set-VpnConnectionIPsecConfiguration -ConnectionName 'My IKEv2 VPN' ^
|
||||
-AuthenticationTransformConstants GCMAES128 -CipherTransformConstants GCMAES128 ^
|
||||
-EncryptionMethod AES256 -IntegrityCheckMethod SHA256 -PfsGroup None ^
|
||||
-DHGroup Group14 -PassThru -Force"
|
||||
-DHGroup Group14 -PassThru -Force^"
|
||||
```
|
||||
|
||||
**Windows 7** does not support these commands, you can [manually create the VPN connection](https://wiki.strongswan.org/projects/strongswan/wiki/Win7Config).
|
||||
|
||||
Loading…
Reference in New Issue
Block a user