mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-30 00:26:04 +03:00
Code Issues Projects Releases Wiki Activity
1,065 Commits 1 Branch 0 Tags 20 MiB
a52a02cf92
Commit Graph

1065 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
hwdsl2
e5703d8aaa Cleanup 2022-03-07 21:29:13 -06:00
hwdsl2
17c429b2fb Update tests 2022-03-06 23:34:57 -06:00
hwdsl2
40859c5f7f Improve VPN setup 
- Display a message if IKEv2 is already set up on the VPN server.
 2022-03-06 22:41:29 -06:00
hwdsl2
b6c54c316f Improve VPN setup 
- Skip Libreswan install if it has already been installed recently.
 2022-03-06 22:36:20 -06:00
hwdsl2
bf4f61474b Update docs 2022-03-06 14:32:37 -06:00
hwdsl2
65b3f54ff9 Cleanup 2022-03-06 09:38:38 -06:00
hwdsl2
1b2c251830 Update docs 2022-03-05 14:38:44 -06:00
hwdsl2
1e29c64a48 Update docs 2022-03-05 11:59:43 -06:00
hwdsl2
6c5b79ec7c Update docs 2022-03-03 23:30:33 -06:00
hwdsl2
e6604e18cb Update tests 2022-03-03 22:07:25 -06:00
hwdsl2
6f4080bab4 Improve VPN setup 
- Refactor VPN scripts to move IKEv2 setup inside vpnsetup_*.sh
 2022-03-03 22:05:09 -06:00
hwdsl2
454c89d2b5 Update docs 2022-03-03 00:08:40 -06:00
UnixUser
c906e87493
Update ikev2-howto.md (#1110) 
Mikrotik RouterOS client instructions
 2022-03-02 23:44:47 -06:00
hwdsl2
b2c11f62c3 Update docs 2022-03-02 23:30:49 -06:00
hwdsl2
6773631d26 Update tests 2022-03-02 22:58:54 -06:00
hwdsl2
472ef7df94 Update docs 2022-03-02 22:52:14 -06:00
hwdsl2
f0300e7b56 Update templates 2022-03-02 22:51:41 -06:00
hwdsl2
d99d18b29a Update docs 2022-03-02 22:05:55 -06:00
hwdsl2
74b72b331a Improve VPN setup 
- vpnsetup.sh now automatically sets up IKEv2 as part of the
  IPsec VPN setup, same as quickstart.sh.
 2022-03-02 21:58:31 -06:00
hwdsl2
6850aa7f3b Update IKEv2 script 
- Change the warning for parameter "--auto" to an error, in cases
  that IKEv2 is already set up on the server.
 2022-03-02 21:46:15 -06:00
hwdsl2
f5cc2a397b Update docs 2022-03-01 00:03:30 -06:00
hwdsl2
a03f2d556b Update docs 
- Simplify VPN setup: Switch to use the quick start script, which
  automatically sets up IKEv2 as part of the IPsec VPN setup.
  The quick start script was updated and users can specify variables
  similar to vpnsetup.sh. Ref: d37a2fb
- Other minor updates
 2022-02-27 11:00:03 -06:00
hwdsl2
ec089cf800 Update docs 2022-02-26 18:12:47 -06:00
hwdsl2
38ba5f0f7e Update template 
- Remove CentOS 8 from AWS template, which is EOL.
 2022-02-26 18:11:54 -06:00
hwdsl2
d1f15684be Update docs 
- Re-add DigitalOcean deploy button.
  Ref: carlfriess/DigitalOceanVPNSetup#11 617f981
 2022-02-26 00:48:31 -06:00
hwdsl2
8be670c4c8 Update templates 
- Update the AWS and Azure deployment template or script to use
  the VPN quick start script instead of vpnsetup.sh. The quick
  start script sets up IKEv2 automatically, so users don't need
  to manually set up IKEv2.
 2022-02-25 23:50:55 -06:00
hwdsl2
d37a2fb811 Improve quick start script 
- The VPN quick start script now supports most of the environment
  variables (such as VPN_DNS_SRV1) that are currently supported by
  vpnsetup.sh and ikev2.sh. This change enables customization by
  advanced users when running the quick start script.
 2022-02-25 23:41:49 -06:00
hwdsl2
f7c5ecf504 Update IKEv2 script 
- Create a client config README file under certain circumstances,
  such as when setting up IKEv2 automatically and users might not
  see the script's output.
 2022-02-25 23:25:34 -06:00
hwdsl2
32a55ec06a Update IKEv2 script 
- Make IKEv2 client address pool customizable using VPN_XAUTH_POOL,
  similar to vpnsetup.sh. This is for advanced users only.
 2022-02-25 21:17:09 -06:00
hwdsl2
79a344ec46 Cleanup 2022-02-24 09:18:39 -06:00
hwdsl2
3d6b685e0b Update docs 2022-02-23 00:13:29 -06:00
hwdsl2
a4e452e9df Cleanup 2022-02-23 00:08:45 -06:00
hwdsl2
06c5e27080 Fix for GCP MTU size 
- This fix is specifically for Google Cloud Platform (GCP) VMs.
  The default MTU size on GCP, 1460 bytes, could cause network issues
  such as "cannot open websites" with IKEv2 VPN clients.
  This issue was brought up multiple times in this repo, e.g. #1000.
- The fix changes the MTU to 1500 (the default that is widely used),
  and updates dhclient.conf so that it is not reverted to 1460 by DHCP.
- Refs: https://cloud.google.com/vpc/docs/vpc#mtu
        https://cloud.google.com/compute/docs/instances/detect-compute-engine
        https://linuxhint.com/how-to-change-mtu-size-in-linux/
        https://git.io/ikev2#cannot-open-websites-after-connecting-to-ikev2
 2022-02-23 00:07:33 -06:00
hwdsl2
4020e0d8e1 Update docs 2022-02-21 23:32:34 -06:00
hwdsl2
98537d02ac Update docs 
- Add a troubleshooting section for "Cannot open websites after
  connecting to IKEv2". Ref: #1000.
 2022-02-21 18:33:35 -06:00
hwdsl2
4035d086ce Update docs 2022-02-21 12:07:53 -06:00
hwdsl2
898496fc04 Update tests 2022-02-20 21:50:52 -06:00
hwdsl2
88c86c0191 Update IKEv2 script 
- Show the option to protect IKEv2 client config files only during
  IKEv2 setup, not when adding or exporting a client.
- Cleanup
 2022-02-20 21:45:11 -06:00
hwdsl2
55c91c7202 Update docs 2022-02-19 22:06:20 -06:00
hwdsl2
42c8d288e2 Cleanup 
- Improve backup of VPN config files
 2022-02-18 21:42:37 -06:00
hwdsl2
6ff28097db Update docs 2022-02-17 21:40:15 -06:00
hwdsl2
55aaeaf5f8 Update docs 2022-02-17 21:37:18 -06:00
hwdsl2
58e82552ae Update IKEv2 script 
- Minor improvements and cleanup
 2022-02-17 21:36:19 -06:00
hwdsl2
7361cec2db Update docs 2022-02-15 22:16:58 -06:00
hwdsl2
3d817c7fd4 Update IKEv2 script 
- Cleanup
 2022-02-15 21:17:47 -06:00
hwdsl2
4bc8fba344 Update IKEv2 script 
- Display a note if no password is required when importing client
  config files.
- Advanced users can now define VPN_PROTECT_CONFIG=yes when setting up
  IKEv2, if they want to protect client config files with a password.
 2022-02-15 21:15:08 -06:00
hwdsl2
a1dc396883 Update docs 2022-02-15 00:31:34 -06:00
hwdsl2
354c512d86 Update tests 2022-02-14 23:55:13 -06:00
hwdsl2
f072e8312a Update IKEv2 script 
- Cleanup
 2022-02-14 23:45:13 -06:00
hwdsl2
7c0d08442e Update IKEv2 script 
- Improve backward compatibility: Protect IKEv2 client config files
  using a password if one was previously generated.
- Ref: dbc3527
 2022-02-14 03:46:06 -06:00