Project

General

Profile

IKEv2 Configuration Examples » History » Version 40

Andreas Steffen, 07.07.2021 03:58

1 8 Andreas Steffen
h1. IKEv2 Configuration Examples
2 1 Martin Willi
3 1 Martin Willi
h2. Remote Access
4 1 Martin Willi
5 40 Andreas Steffen
|RSA authentication with X.509 certificates      |{{tc(ikev2/rw-cert,IPv4)}}               |{{tc(ipv6/rw-ikev2,IPv6)}}    |{{tc(ikev2/nat-rw,NAT)}} |
6 40 Andreas Steffen
|PSK authentication with pre-shared keys (IP)    |{{tc(ikev2/rw-psk-ipv4,IPv4)}}           |{{tc(ipv6/rw-psk-ikev2,IPv6)}}|{{tc(ikev2/nat-rw-psk,NAT)}}|
7 39 Andreas Steffen
|PSK authentication with pre-shared keys (FQDN)  |{{tc(ikev2/rw-psk-fqdn,IPv4)}}           | | |
8 39 Andreas Steffen
|EAP_AKA authentication                          |{{tc(ikev2/rw-eap-aka-rsa,IPv4)}}        | | |
9 39 Andreas Steffen
|EAP_AKA authentication with EAP identity        |{{tc(ikev2/rw-eap-aka-id-rsa,IPv4)}}     | | |
10 39 Andreas Steffen
|EAP_SIM authentication                          |{{tc(ikev2/rw-eap-sim-rsa,IPv4)}}        | |{{tc(ikev2/rw-eap-sim-radius,RADIUS)}} |
11 39 Andreas Steffen
|EAP_SIM authentication with EAP identity        |                                         | |{{tc(ikev2/rw-eap-sim-id-radius,RADIUS)}} |
12 39 Andreas Steffen
|EAP_SIM only authentication                     |                                         | |{{tc(ikev2/rw-eap-sim-only-radius,RADIUS)}} |
13 39 Andreas Steffen
|EAP_MSCHAPv2 authentication with EAP identity   |{{tc(ikev2/rw-eap-mschapv2-id-rsa,IPv4)}}| | |
14 39 Andreas Steffen
|EAP_MD5 authentication                          |{{tc(ikev2/rw-eap-md5-rsa,IPv4)}}        | |{{tc(ikev2/rw-eap-md5-radius,RADIUS)}} |
15 39 Andreas Steffen
|EAP_MD5 authentication with EAP identity        |{{tc(ikev2/rw-eap-md5-id-rsa,IPv4)}}     | |{{tc(ikev2/rw-eap-md5-id-radius,RADIUS)}} |
16 39 Andreas Steffen
|EAP_TLS authentication                          |{{tc(ikev2/rw-eap-tls-only,IPv4)}}       | |{{tc(ikev2/rw-eap-tls-radius,RADIUS)}} |
17 39 Andreas Steffen
|EAP_TTLS with EAP_MD5 client authentication     |{{tc(ikev2/rw-eap-ttls-only,IPv4)}}      | |{{tc(ikev2/rw-eap-ttls-radius,RADIUS)}} |
18 39 Andreas Steffen
|EAP_PEAP with EAP_MD5 client authentication     |{{tc(ikev2/rw-eap-peap-md5,IPv4)}}       | |{{tc(ikev2/rw-eap-peap-radius,RADIUS)}} |
19 39 Andreas Steffen
|EAP_PEAP with EAP_MSCHAPv2 client authentication|{{tc(ikev2/rw-eap-peap-mschapv2,IPv4)}}  | ||
20 8 Andreas Steffen
21 8 Andreas Steffen
h2. Remote Access with Virtual IP Adresses
22 16 Andreas Steffen
23 39 Andreas Steffen
| RAM-based server-side virtual IP pool      |{{tc(ikev2/ip-pool,IPv4)}}        |
24 39 Andreas Steffen
| DB-based server-side virtual IP pool       |{{tc(ikev2/ip-pool-db,IPv4)}}     |
25 39 Andreas Steffen
| Static server-side virtual IP addresses    |{{tc(ikev2/config-payload,IPv4)}} |
26 39 Andreas Steffen
| Two RAM-based server-side virtual IP pools |{{tc(ikev2/ip-two-pools,IPv4)}}   |
27 39 Andreas Steffen
| Two DB-based server-side virtual IP pools  |{{tc(ikev2/ip-two-pools-db,IPv4)}}|
28 16 Andreas Steffen
29 16 Andreas Steffen
h2. Site-to-Site
30 8 Andreas Steffen
31 39 Andreas Steffen
|RSA authentication with X.509 certificates       |{{tc(ikev2/net2net-cert,IPv4)}}  |{{tc(ipv6/net2net-ikev2,IPv6)}} |
32 39 Andreas Steffen
|PSK authentication with pre-shared keys          |{{tc(ikev2/net2net-psk,IPv4)}}   | |
33 39 Andreas Steffen
|Connection setup automatically started by daemon |{{tc(ikev2/net2net-start,IPv4)}} | |
34 39 Andreas Steffen
|Connection setup triggered by data to be tunneled|{{tc(ikev2/net2net-route,IPv4)}} | |
35 8 Andreas Steffen
36 8 Andreas Steffen
h2. Host-to-Host
37 16 Andreas Steffen
38 39 Andreas Steffen
|IPsec tunnel mode with X.509 certificates    |{{tc(ikev2/host2host-cert,IPv4)}}      |{{tc(ipv6/host2host-ikev2,IPv6)}} |
39 39 Andreas Steffen
|IPsec transport mode with X.509 certificates |{{tc(ikev2/host2host-transport,IPv4)}} |{{tc(ipv6/transport-ikev2,IPv6)}} |
40 36 Andreas Steffen
41 36 Andreas Steffen
h2. IP Protocol and Port Policies
42 36 Andreas Steffen
43 39 Andreas Steffen
|IPsec tunnel restricted to ICMP and ssh protocols |{{tc(ikev2/protoport-dual,IPv4)}} |
44 36 Andreas Steffen
45 1 Martin Willi
46 1 Martin Willi
h2. Complete List
47 1 Martin Willi
48 39 Andreas Steffen
{{tc(ikev2,All IKEv2 test scenarios)}}