rhtyd commented on pull request #4953:
URL: https://github.com/apache/cloudstack/pull/4953#issuecomment-826620573


   Comment by @kricud from 
https://github.com/apache/cloudstack/pull/4904#issuecomment-824850119
   
   ```
   Did testing and found following things.
   
   Problems:
   
   Add VPN Customer Gateway > IKE Version > set:ikev2 > press:ok
   GW is created and IKE Version is set to: ike
   Workaround: edit VPN Customer Gateway > IKE Version > type:ikev2
   
   Add VPN Customer Gateway > IKE Version > set:ikev1 > press:ok
   GW is created and IKE Version is set to: ike
   Workaround: edit VPN Customer Gateway > IKE Version > type:ikev1
   
   Add VPN Customer Gateway > Edit VPN Customer Gateway > CIDR list > Command 
failed due to Internal Server Error
   Workaround: Delete VPN Customer Gateway and create again with correct 
settings.
   
   Suggestions:
   
   Edit help text for Split Connections: Only for IKEv2, whether to split 
multiple right subnet CIDRs into multiple connection statements.
   
Source:https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#Multiple-subnets-per-SA
   Essence: If you use IKEv1, you need to be a roadwarrior and use the UNITY 
extension.
   
   Add help text for IKE Version : Connections marked with ike will use IKEv2 
when initiating, but accept any protocol version when responding.
   Source:https://wiki.strongswan.org/projects/strongswan/wiki/connsection
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to