kricud commented on pull request #4953: URL: https://github.com/apache/cloudstack/pull/4953#issuecomment-826837671
@Pearl1594 Case3 and Case4 will not work by design. VPN settings on both sides must be identical/mach. Only exclusion is DPD it must be enabled or disabled on both sides but in 99% of cases it can have different timers. Ikev1 and Ikev2 are incompatible. These scenarios will work: VPN customer gateway 1 - ike(ikev2) + split connection = false VPN customer gateway 2 - ike(ikev2) + split connection = false VPN customer gateway 1 - ike(ikev2) + split connection = true VPN customer gateway 2 - ike(ikev2) + split connection = true VPN customer gateway 1 - ike(ikev1) + split connection = false VPN customer gateway 2 - ike(ikev1) + split connection = false VPN customer gateway 1 - ike(ike) + split connection = false pasive = true VPN customer gateway 2 - ike(ikev1) + split connection = false VPN customer gateway 1 - ike(ike) + split connection = false VPN customer gateway 2 - ike(ikev2) + split connection = false VPN customer gateway 1 - ike(ike) + split connection = false VPN customer gateway 2 - ike(ike) + split connection = false VPN customer gateway 1 - ike(ike) + split connection = true VPN customer gateway 2 - ike(ike) + split connection = true -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
