mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-30 08:36:04 +03:00
Code Issues Projects Releases Wiki Activity
1,127 Commits 1 Branch 0 Tags 20 MiB
17864297cb
Commit Graph

1127 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
hwdsl2
e8c738d6af Update docs 2022-03-13 17:10:45 -05:00
hwdsl2
09d4018e2c Update docs 2022-03-13 15:42:04 -05:00
hwdsl2
d182d9651a Improve VPN setup 
- Download the add/delete VPN user helper scripts during setup,
  so users can use them directly without manual download.
 2022-03-13 15:03:28 -05:00
hwdsl2
d3f9f1944f Update docs 2022-03-13 00:16:28 -06:00
hwdsl2
a891b7613c Fix for Alpine Linux 
- Fix IPsec service on Alpine Linux. Fixes #1123.
- Clean up unneeded /etc/rc.local code for this OS.
 2022-03-12 23:55:32 -06:00
hwdsl2
018a9eab1f Update docs 
- Ref: #1124
 2022-03-12 21:44:59 -06:00
UnixUser
84b27a7f49
More detailed instructions for RouterOS (#1124) 2022-03-12 20:14:43 -06:00
hwdsl2
d2321d76af Check VPN subnets 
- Check for custom VPN subnet(s) in the uninstall script. This is for
  the uncommon cases where VPN subnet(s) were customized during setup.
 2022-03-12 17:08:00 -06:00
hwdsl2
f129077b63 Update docs 2022-03-08 22:00:57 -06:00
hwdsl2
beb756f1f2 Remove CentOS 8 
- Remove support for CentOS Linux 8, which is EOL.
  Ref: https://www.centos.org/centos-linux-eol/
 2022-03-08 21:39:19 -06:00
hwdsl2
46a83e4f9f Cleanup 2022-03-08 21:17:16 -06:00
hwdsl2
d2da364e16 Update tests 2022-03-07 21:38:01 -06:00
hwdsl2
e5703d8aaa Cleanup 2022-03-07 21:29:13 -06:00
hwdsl2
17c429b2fb Update tests 2022-03-06 23:34:57 -06:00
hwdsl2
40859c5f7f Improve VPN setup 
- Display a message if IKEv2 is already set up on the VPN server.
 2022-03-06 22:41:29 -06:00
hwdsl2
b6c54c316f Improve VPN setup 
- Skip Libreswan install if it has already been installed recently.
 2022-03-06 22:36:20 -06:00
hwdsl2
bf4f61474b Update docs 2022-03-06 14:32:37 -06:00
hwdsl2
65b3f54ff9 Cleanup 2022-03-06 09:38:38 -06:00
hwdsl2
1b2c251830 Update docs 2022-03-05 14:38:44 -06:00
hwdsl2
1e29c64a48 Update docs 2022-03-05 11:59:43 -06:00
hwdsl2
6c5b79ec7c Update docs 2022-03-03 23:30:33 -06:00
hwdsl2
e6604e18cb Update tests 2022-03-03 22:07:25 -06:00
hwdsl2
6f4080bab4 Improve VPN setup 
- Refactor VPN scripts to move IKEv2 setup inside vpnsetup_*.sh
 2022-03-03 22:05:09 -06:00
hwdsl2
454c89d2b5 Update docs 2022-03-03 00:08:40 -06:00
UnixUser
c906e87493
Update ikev2-howto.md (#1110) 
Mikrotik RouterOS client instructions
 2022-03-02 23:44:47 -06:00
hwdsl2
b2c11f62c3 Update docs 2022-03-02 23:30:49 -06:00
hwdsl2
6773631d26 Update tests 2022-03-02 22:58:54 -06:00
hwdsl2
472ef7df94 Update docs 2022-03-02 22:52:14 -06:00
hwdsl2
f0300e7b56 Update templates 2022-03-02 22:51:41 -06:00
hwdsl2
d99d18b29a Update docs 2022-03-02 22:05:55 -06:00
hwdsl2
74b72b331a Improve VPN setup 
- vpnsetup.sh now automatically sets up IKEv2 as part of the
  IPsec VPN setup, same as quickstart.sh.
 2022-03-02 21:58:31 -06:00
hwdsl2
6850aa7f3b Update IKEv2 script 
- Change the warning for parameter "--auto" to an error, in cases
  that IKEv2 is already set up on the server.
 2022-03-02 21:46:15 -06:00
hwdsl2
f5cc2a397b Update docs 2022-03-01 00:03:30 -06:00
hwdsl2
a03f2d556b Update docs 
- Simplify VPN setup: Switch to use the quick start script, which
  automatically sets up IKEv2 as part of the IPsec VPN setup.
  The quick start script was updated and users can specify variables
  similar to vpnsetup.sh. Ref: d37a2fb
- Other minor updates
 2022-02-27 11:00:03 -06:00
hwdsl2
ec089cf800 Update docs 2022-02-26 18:12:47 -06:00
hwdsl2
38ba5f0f7e Update template 
- Remove CentOS 8 from AWS template, which is EOL.
 2022-02-26 18:11:54 -06:00
hwdsl2
d1f15684be Update docs 
- Re-add DigitalOcean deploy button.
  Ref: carlfriess/DigitalOceanVPNSetup#11 617f981
 2022-02-26 00:48:31 -06:00
hwdsl2
8be670c4c8 Update templates 
- Update the AWS and Azure deployment template or script to use
  the VPN quick start script instead of vpnsetup.sh. The quick
  start script sets up IKEv2 automatically, so users don't need
  to manually set up IKEv2.
 2022-02-25 23:50:55 -06:00
hwdsl2
d37a2fb811 Improve quick start script 
- The VPN quick start script now supports most of the environment
  variables (such as VPN_DNS_SRV1) that are currently supported by
  vpnsetup.sh and ikev2.sh. This change enables customization by
  advanced users when running the quick start script.
 2022-02-25 23:41:49 -06:00
hwdsl2
f7c5ecf504 Update IKEv2 script 
- Create a client config README file under certain circumstances,
  such as when setting up IKEv2 automatically and users might not
  see the script's output.
 2022-02-25 23:25:34 -06:00
hwdsl2
32a55ec06a Update IKEv2 script 
- Make IKEv2 client address pool customizable using VPN_XAUTH_POOL,
  similar to vpnsetup.sh. This is for advanced users only.
 2022-02-25 21:17:09 -06:00
hwdsl2
79a344ec46 Cleanup 2022-02-24 09:18:39 -06:00
hwdsl2
3d6b685e0b Update docs 2022-02-23 00:13:29 -06:00
hwdsl2
a4e452e9df Cleanup 2022-02-23 00:08:45 -06:00
hwdsl2
06c5e27080 Fix for GCP MTU size 
- This fix is specifically for Google Cloud Platform (GCP) VMs.
  The default MTU size on GCP, 1460 bytes, could cause network issues
  such as "cannot open websites" with IKEv2 VPN clients.
  This issue was brought up multiple times in this repo, e.g. #1000.
- The fix changes the MTU to 1500 (the default that is widely used),
  and updates dhclient.conf so that it is not reverted to 1460 by DHCP.
- Refs: https://cloud.google.com/vpc/docs/vpc#mtu
        https://cloud.google.com/compute/docs/instances/detect-compute-engine
        https://linuxhint.com/how-to-change-mtu-size-in-linux/
        https://git.io/ikev2#cannot-open-websites-after-connecting-to-ikev2
 2022-02-23 00:07:33 -06:00
hwdsl2
4020e0d8e1 Update docs 2022-02-21 23:32:34 -06:00
hwdsl2
98537d02ac Update docs 
- Add a troubleshooting section for "Cannot open websites after
  connecting to IKEv2". Ref: #1000.
 2022-02-21 18:33:35 -06:00
hwdsl2
4035d086ce Update docs 2022-02-21 12:07:53 -06:00
hwdsl2
898496fc04 Update tests 2022-02-20 21:50:52 -06:00
hwdsl2
88c86c0191 Update IKEv2 script 
- Show the option to protect IKEv2 client config files only during
  IKEv2 setup, not when adding or exporting a client.
- Cleanup
 2022-02-20 21:45:11 -06:00