netdev - IPsec Remote Access VPN Phase 1 and Phase 2 Settings

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <arI5CzCvQQFUbKihE827uOSWKhHpM9TzyZQqEu64NWM509-MAwl5GflVBC7Tv4nmW_2hJmJDeDfmCIArhlcBNJe6VGTBh48zTfHkQIPSsD8=@protonmail.com>
Date: Sat, 24 Jan 2026 04:54:32 +0000
From: Turritopsis Dohrnii Teo En Ming <teo.en.ming@...tonmail.com>
To: Linux Networking <netdev@...r.kernel.org>
Cc: "ceo@...-en-ming-corp.com" <ceo@...-en-ming-corp.com>
Subject: IPsec Remote Access VPN Phase 1 and Phase 2 Settings

Subject: IPsec Remote Access VPN Phase 1 and Phase 2 Settings

Good day from Singapore,

config vpn ipsec phase1-interface
    edit "IPsec VPN"
        set type dynamic
        set interface "wan1"
        set ike-version 2
        set peertype any
        set net-device disable
        set mode-cfg enable
        set proposal aes128-sha256 aes256-sha256
        set comments "VPN: IPsec VPN (Created by VPN wizard)"
        set dhgrp 14
        set eap enable
        set eap-identity send-request
        set authusrgrp "VPN_Users"
        set ipv4-start-ip 10.10.10.1
        set ipv4-end-ip 10.10.10.254
        set dns-mode auto
        set ipv4-split-include "IPsec VPN_split"
        set save-password enable
        set psksecret ENC ---snipped---
    next
end
config vpn ipsec phase2-interface
    edit "IPsec VPN"
        set phase1name "IPsec VPN"
        set proposal aes128-sha1 aes256-sha1
        set dhgrp 14
        set comments "VPN: IPsec VPN (Created by VPN wizard)"
    next
end

IPsec VPN troubleshooting CLI commands:

diagnose debug reset
diagnose debug application ike -1
diagnose debug enable

show vpn ipsec phase1-interface "IPsec VPN"

diagnose vpn ike gateway list
diagnose vpn tunnel list
diagnose vpn ike log-filter clear
diagnose vpn ike log-filter dst-addr4 x.x.x.x
diagnose debug application ike -1
diagnose debug enable

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Extremely Democratic People's Republic of Singapore
24 Jan 2026 Saturday 12.54 pm Singapore Time