mirror of
https://github.com/hwdsl2/docker-ipsec-vpn-server.git
synced 2026-04-26 10:05:48 +03:00
[GH-ISSUE #138] How to modify to use IKEv2 ? #124
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @eggbean on GitHub (Apr 11, 2019).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/138
I would prefer to use IKEv2 for connection from my router and it is required for iOS. How do I modify this docker image to use IKEv2 instead? Would it be difficult? Thanks.
@hwdsl2 commented on GitHub (Apr 11, 2019):
@jason404 Hello! On iOS I think you can also use IPsec/L2TP and Cisco IPsec mode.
To modify your Docker container to use IKEv2, first start a Bash shell in the running container [1], then follow the steps in this IKEv2 tutorial [2].
This method is not ideal, because on container restart, the
/etc/ipsec.confwill be overwritten byrun.shand your IKEv2 config section will not persist. You may get around this by commenting out the relevant sections in/opt/src/run.shfrom inside the container. Also, you may want to backup your IKEv2 configuration (certs, keys, etc.) stored in the "/etc/ipsec.d" folder to a location outside the container, because if you re-create the container you'll lose those configuration.[1] https://github.com/hwdsl2/docker-ipsec-vpn-server#bash-shell-inside-container
[2] https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/ikev2-howto.md