37
edits
Changes
IPsec RUTOS configuration example (view source)
Revision as of 14:22, 15 February 2024
, 15 Februaryno edit summary
***'''Host''' - hostname or IP address to which ICMP packets will be sent to. Best to use a hostname/IP address belonging to the opposite instance's LAN. For this example we just use the other router's LAN IP address
***'''Host''' - hostname or IP address to which ICMP packets will be sent to. Best to use a hostname/IP address belonging to the opposite instance's LAN. For this example we just use the other router's LAN IP address
***'''Ping period (sec)''' - the period (in seconds) at which ICMP packets will be sent to the specified host
***'''Ping period (sec)''' - the period (in seconds) at which ICMP packets will be sent to the specified host
**'''XAUTH''' - this option is only available when IKEv1 is selected. When enabled, it can be used for additional authentication.
**'''XAUTH''' - note that option, available only if you choose IKEv1, when checked, allows is used to edit and display the authorization information used in connecting to the X server.
**'''IKEv2 vs IKEv1''' - use IKEv2 for better security, speed, and flexibility, especially in dynamic environments. IKEv1 is older but still widely supported in legacy systems. Choose based on specific requirements and compatibility.
**'''IKEv2 vs IKEv1''' - use IKEv2 for better security, speed, and flexibility, especially in dynamic environments. IKEv1 is older but still widely supported in legacy systems. Choose based on specific requirements and compatibility.
**'''Local&Remote identifiers''' - there is two types, IP Adress type - which could describe certain subnet gateway like 192.168.1.1 or whole subnet like 192.168.1.0/24. Hostname type - is when IP address is subject to change, providing more flexibility, and look like - " vpngatewayname.yourdomain ".
**'''Local&Remote identifiers''' - there are two types, IP address type - which could describe certain subnet gateways like 192.168.1.1 or whole subnet like 192.168.1.0/24. Hostname type - is when an IP address is subject to change, providing more flexibility, and looks like - " vpngatewayname.yourdomain ".
'''NOTE''': remember to replace certain parameter values (like IP addresses) with your own relevant data.
'''NOTE''': remember to replace certain parameter values (like IP addresses) with your own relevant data.
