Re: Change in IPSec roadwarrior configuration for MacOSX 10.12

[Tom Rymes <trymes@rymes.com>]

[-- Attachment #1: Type: text/plain, Size: 1478 bytes --]

Carlo,

Just to confirm, have you put this text into the ipsec.user.conf file 
and restarted IPSec?

conn CONNECTION_NAME
       leftsendcert=always
       leftallowany=yes
       rightdns=10.100.2.1
       rekey=no
       reauth=no

Specifically, the rekey and reauth portions.

I assume yes, but want to double-check.

Tom

On 04/04/2019 12:21 PM, Carlo Fusco wrote:
> Hello,
> 
> I have MAC OS X Sierra as an IPSec client and when I configured IPSec
> server on IPFire I found that it was being disconnected every 480 sec
> due to a failed rekey attempt from Mac OS, which happened with the
> configuration proposed in the text of the wiki.
> 
> According to the apple developers, a change in the ESP grouptype was
> required ( http://www.openradar.appspot.com/29821241 ). When I tested
> the IPSec suggested configuration everything worked well. Therefore I
> changed the text of the wiki to reflect the issue. I also fixed a non
> matching parenthesis.
> 
> Here is the diff:
> 
> https://wiki.ipfire.org/configuration/services/ipsec/example_configuration-_roadwarrior_with_macos?do=revisions
> 
> Feel free to revert the change if you believe it is necessary or to
> suggest a different wording/place.
> 
> Thank you for your time
> --
> Carlo Fusco
> _______________________________________________
> Documentation mailing list
> Documentation(a)lists.ipfire.org
> https://lists.ipfire.org/mailman/listinfo/documentation
>