mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-25 06:16:07 +03:00
Code Issues Projects Releases Wiki Activity

Update docs

Browse Source 
- Update troubleshooting sections with info on fixing MTU/MSS
  issues of some Linux VPN clients
- Closes #1444
This commit is contained in:
hwdsl2 2023-08-16 00:10:50 -05:00
parent 7e85c81ddb
commit f084bcb046
4 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/clients-zh.md
View File

@ -591,7 +591,7 @@ Windows 8, 10 和 11 默认使用 "smart multi-homed name resolution" （智能
### Android MTU/MSS 问题
某些 Android 设备有 MTU/MSS 问题，表现为使用 IPsec/XAuth ("Cisco IPsec") 模式可以连接到 VPN 但是无法打开网站。如果你遇到该问题，尝试在 VPN 服务器上运行以下命令。如果成功解决，你可以将这些命令添加到 `/etc/rc.local` 以使它们重启后继续有效。
某些 Android 设备和 Linux 系统有 MTU/MSS 问题，表现为使用 IPsec/XAuth ("Cisco IPsec") 或者 IKEv2 模式可以连接到 VPN 但是无法打开网站。如果你遇到该问题，尝试在 VPN 服务器上运行以下命令。如果成功解决，你可以将这些命令添加到 `/etc/rc.local` 以使它们重启后继续有效。
```
iptables -t mangle -A FORWARD -m policy --pol ipsec --dir in \

2
docs/clients.md
View File

@ -589,7 +589,7 @@ In addition, if your computer has IPv6 enabled, all IPv6 traffic (including DNS
### Android MTU/MSS issues
Some Android devices have MTU/MSS issues, that they are able to connect to the VPN using IPsec/XAuth ("Cisco IPsec") mode, but cannot open websites. If you encounter this problem, try running the following commands on the VPN server. If successful, you may add these commands to `/etc/rc.local` to persist after reboot.
Some Android devices and Linux systems have MTU/MSS issues, that they are able to connect to the VPN using IPsec/XAuth ("Cisco IPsec") or IKEv2 mode, but cannot open websites. If you encounter this problem, try running the following commands on the VPN server. If successful, you may add these commands to `/etc/rc.local` to persist after reboot.
```
iptables -t mangle -A FORWARD -m policy --pol ipsec --dir in \

2
docs/ikev2-howto-zh.md
View File

@ -597,7 +597,7 @@ REG ADD HKLM\SYSTEM\CurrentControlSet\Services\RasMan\Parameters /v NegotiateDH2
此设置 **不会** 在重启后保持。要永久更改 MTU 大小，请参阅网络上的相关文章。
1. 如果更改 MTU 大小无法解决问题，请尝试 [Android MTU/MSS 问题](clients-zh.md#android-mtumss-问题) 中的解决方案。
1. 如果你的 Android 或 Linux VPN 客户端可以连接到 IKEv2 但是无法打开网站，请尝试 [Android MTU/MSS 问题](clients-zh.md#android-mtumss-问题) 中的解决方案。
1. 在某些情况下，Windows 在连接后不使用 IKEv2 指定的 DNS 服务器。要解决此问题，可以在网络连接属性 -> TCP/IPv4 中手动输入 DNS 服务器，例如 Google Public DNS (8.8.8.8, 8.8.4.4)。

2
docs/ikev2-howto.md
View File

@ -599,7 +599,7 @@ If your VPN client device cannot open websites after successfully connecting to
This setting **does not** persist after a reboot. To change the MTU size permanently, refer to relevant articles on the web.
1. If changing the MTU size does not fix the issue, try the fix in [Android MTU/MSS issues](clients.md#android-mtumss-issues).
1. If your Android or Linux VPN client can connect using IKEv2 mode, but cannot open websites, try the fix in [Android MTU/MSS issues](clients.md#android-mtumss-issues).
1. In certain circumstances, Windows does not use the DNS servers specified by IKEv2 after connecting. This can be fixed by manually entering DNS servers such as Google Public DNS (8.8.8.8, 8.8.4.4) in network interface properties -> TCP/IPv4.