starred/docker-ipsec-vpn-server
1
0
Fork 0
mirror of https://github.com/hwdsl2/docker-ipsec-vpn-server.git synced 2026-04-26 10:05:48 +03:00
Code Issues Projects Releases Packages Wiki Activity

[GH-ISSUE #337] 如何查看 IpSec 使用的加密算法、认证算法、完整性算法等参数 #310

New issue
Closed
opened 2026-03-02 08:01:16 +03:00 by kerem · 2 comments
kerem commented 2026-03-02 08:01:16 +03:00
Owner
Copy link

Originally created by @xieyinglin on GitHub (Dec 28, 2022).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/337

请问使用防火墙配置 IPsec VPN 时，加密算法、认证算法、完整性算法、DH 组，还有 IPSec 这些参数怎么才能查找到呢？

image
Originally created by @xieyinglin on GitHub (Dec 28, 2022). Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/337 请问使用防火墙配置 IPsec VPN 时，加密算法、认证算法、完整性算法、DH 组，还有 IPSec 这些参数怎么才能查找到呢？ <img width="974" alt="image" src="https://user-images.githubusercontent.com/41858839/209784629-4863b46c-b02f-41ea-8289-f96bed249896.png">
kerem closed this issue 2026-03-02 08:01:16 +03:00
kerem commented 2026-03-02 08:01:17 +03:00
Author
Owner
Copy link

@hwdsl2 commented on GitHub (Dec 28, 2022):

@xieyinglin 你好！对于你的截图中的选项：IKEv2 本项目必须使用证书连接，如果不使用证书请选择 v1。加密算法选择 AES128 或者 AES256。认证算法 SHA1，完整性算法 SHA1。DH 组选择 5（1536 bits, 安全性较低）。IPsec 参数图中选项应该可以。如果无法连接的话，可以试试 PFS NONE。

<!-- gh-comment-id:1366746081 --> @hwdsl2 commented on GitHub (Dec 28, 2022): @xieyinglin 你好！对于你的截图中的选项：IKEv2 本项目必须使用证书连接，如果不使用证书请选择 v1。加密算法选择 AES128 或者 AES256。认证算法 SHA1，完整性算法 SHA1。DH 组选择 5（1536 bits, [安全性较低](https://www.juniper.net/documentation/us/en/software/junos/vpn-ipsec/topics/ref/statement/security-edit-dh-group.html)）。IPsec 参数图中选项应该可以。如果无法连接的话，可以试试 PFS NONE。
kerem commented 2026-03-02 08:01:17 +03:00
Author
Owner
Copy link

@xieyinglin commented on GitHub (Dec 29, 2022):

非常感谢回复，尝试了下目前还是不行。

image
<!-- gh-comment-id:1367116649 --> @xieyinglin commented on GitHub (Dec 29, 2022): 非常感谢回复，尝试了下目前还是不行。 <img width="939" alt="image" src="https://user-images.githubusercontent.com/41858839/209916435-17a13cb3-a48b-482b-a2b0-fffe768320c5.png">
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
No results found.
Labels
Clear labels   
bug

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question
No labels
bug
pull-request
question
question
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-ipsec-vpn-server#310
No description provided.