Page MenuHomeVyOS Platform
Create Task
Maniphest T1210

About IKEv2 IPSec VPN remote access
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Hi

Does VyOS support remote access vpn with IKEv2 IPsec VPN. And that support IOS or MacOS IKEv2 connected.

If that support how to set Vyos.

thanks

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)

Related Objects
Search...

StatusSubtypeAssignedTask
ResolvedsarthurdevT2816 Rewrite IPsec scripts with the new XML/Python approach
ResolvedFEATURE REQUESTc-poT1210 About IKEv2 IPSec VPN remote access

Event Timeline

bjtangseng created this task.Jan 28 2019, 2:53 PM
syncer triaged this task as Low priority.Feb 5 2019, 2:24 PM
syncer edited projects, added VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.
pasik subscribed.Feb 5 2019, 7:43 PM
dmbaturin added a parent task: T2816: Rewrite IPsec scripts with the new XML/Python approach.Aug 20 2020, 3:49 PM
haakon.nore subscribed.Mar 18 2021, 7:52 AM
haakon.nore unsubscribed.
c-po subscribed.May 30 2021, 12:21 PM

Also mentioned here: https://forum.vyos.io/t/roadwarrior-config-with-ikev2-and-different-user-groups/2457

c-po merged a task: T1251: IKEv2 Agile VPN Support.Jul 3 2021, 5:20 PM
c-po edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
c-po set Is it a breaking change? to Unspecified (possibly destroys the router).
c-po added subscribers: TriJetScud, Alfa80, dongjunbo, syncer.
c-po claimed this task.Jul 3 2021, 5:22 PM
c-po mentioned this in rVYOSONEX405954522b8e: ipsec: T1210: T1251: add dependency on libcharon-extauth-plugins.Jul 3 2021, 5:58 PM
c-po added a comment.Jul 4 2021, 10:00 AM

https://github.com/vyos/vyos-1x/pull/908

Restricted Repository Identity mentioned this in rVYOSONEXcaed454a1d15: Merge pull request #908 from c-po/ipsec-ikev2-remote-access.Jul 4 2021, 7:19 PM
c-po mentioned this in rVYOSONEX1c727bd25ef2: ipsec: T1210: T1251: add "local" traffic-selector include definition.Jul 4 2021, 7:19 PM
c-po mentioned this in rVYOSONEXc8bf1deec9ce: ipsec: T1210: T1251: add remote-access "name-server" definition to pool config.
c-po mentioned this in rVYOSONEX79f1c891f3ae: ipsec: T1210: T1251: extend ra config with address pools/traffic selectors.
c-po mentioned this in rVYOSONEXb2bf1592189f: ipsec: T1210: T1251: IKEv2 road-warrior support.
Restricted Repository Identity mentioned this in rVYOSONEX511253635a9b: Merge pull request #911 from sarthurdev/pki_san.Jul 6 2021, 10:22 AM
Restricted Repository Identity mentioned this in rVYOSONEX0b93fce06526: ipsec: T1210: T1251: Add more features to remote-access connections.Jul 6 2021, 10:22 AM
c-po changed the task status from Open to Needs testing.Jul 11 2021, 1:12 PM
c-po moved this task from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po mentioned this in rVYOSONEX48c768abbf53: ipsec: T1210: remote-access pools can not hold both IPv4 and IPv6 prefixes.Jul 18 2021, 7:36 PM
c-po mentioned this in rVYOSONEX9556d78b1d54: ipsec: T1210: split out pool from remote-access configuration.Jul 19 2021, 5:23 PM
c-po mentioned this in rVYOSONEX02043297db68: ipsec: T1210: add "unique" option to specify how to handle multiple connections.
c-po mentioned this in rVYOSONEX69614d7d5018: ipsec: T1210: add op-mode command for macOS and iOS profile generation.Jul 20 2021, 6:59 PM
c-po mentioned this in rVYOSONEX936b36fdf180: ipsec: T1210: create uuid from empty string in ios profile.Jul 20 2021, 7:03 PM
c-po mentioned this in rVYOSONEX861945045ca0: ipsec: T1210: move DHCP server configuration unter remote-access node.Jul 24 2021, 10:15 PM
c-po mentioned this in rVYOSONEX794fa2206659: ipsec: T1210: add RADIUS authentication for remote-access IKEv2 VPN.
c-po mentioned this in rVYOSONEXc31488f0e320: ipsec: T1210: extend support for iOS profile generation.Jul 26 2021, 7:56 PM
c-po mentioned this in rVYOSONEX1d876af9e5d7: ipsec: T1210: remote-access connections only work with IKEv2.Jul 26 2021, 8:07 PM
c-po mentioned this in rVYOSONEX65765fe95a34: ipsec: T1210: add op-mode command to print Windows connection profile.Jul 29 2021, 4:48 PM
c-po closed this task as Resolved.Jul 30 2021, 6:12 PM
Restricted Repository Identity mentioned this in rVYOSONEX2278785d4327: ipsec: T1210: add missing if clause around unique key.Aug 20 2021, 11:57 AM
c-po mentioned this in rVYOSONEX9ca60f94bf16: ipsec: T1210: op-mode command for Windows has no "profile" option.Aug 22 2021, 10:01 AM
c-po mentioned this in rVYOSONEX618f30225e8c: ipsec: T1210: use ConfigTreeQuery() instead of Config() from op-mode.Aug 23 2021, 1:36 PM
c-po mentioned this in rVYOSONEX9471a9bac452: ipsec: T1210: support road-warrior IP assignment via RADIUS Framed-IP-Address.Aug 26 2021, 4:21 PM
c-po mentioned this in rVYOSONEXcfd4d283ff02: ipsec: T1210: Jinj2 template did not honor inactivity/timeout setting.Aug 27 2021, 9:05 AM
c-po moved this task from In Progress to Finished on the VyOS 1.4 Sagitta board.Sep 19 2021, 7:05 AM
c-po mentioned this in rVYOSONEX9ad4cb12ebfc: xml: ipsec: T1210: add valueHelp and constraint for remote-access connection….Sep 20 2022, 6:43 PM
Restricted Repository Identity mentioned this in rVYOSONEX6ba91d40b54a: Merge pull request #2722 from c-po/t1210-ipsec-smoketest.Dec 30 2023, 11:54 AM
c-po mentioned this in rVYOSONEX1a84c4d0e6ff: ipsec: T1210: add smoketest for remote-access (road-warrior) users.Dec 30 2023, 11:54 AM
Restricted Repository Identity mentioned this in rVYOSONEXf9207ed4a0a5: ipsec: T1210: add smoketest for remote-access (road-warrior) users.Dec 30 2023, 11:58 AM
c-po mentioned this in rVYOSONEX1e46cd606d9d: ipsec: T1210: extend remote-access smoketest with IP pool configuration.Dec 30 2023, 12:14 PM
c-po mentioned this in rVYOSONEXc70195779b41: ipsec: T1210: extend remote-access smoketest with IP pool configuration.
Restricted Repository Identity mentioned this in rVYOSONEX74e749be2e4b: Merge pull request #2723 from vyos/mergify/bp/sagitta/pr-2722.Dec 30 2023, 12:20 PM