From mboxrd@z Thu Jan  1 00:00:00 1970
From: Carlo Fusco <fusco.carlo@gmail.com>
To: documentation@lists.ipfire.org
Subject: Change in IPSec roadwarrior configuration for MacOSX 10.12
Date: Thu, 04 Apr 2019 18:21:29 +0200
Message-ID:
 <CAK9whhxM_kB+mxoRyY-o00Si=aUV=kqUWCfeDoFcRqjH3QwV3A@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7929157394094251451=="
List-Id: <documentation.lists.ipfire.org>

--===============7929157394094251451==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello,

I have MAC OS X Sierra as an IPSec client and when I configured IPSec
server on IPFire I found that it was being disconnected every 480 sec
due to a failed rekey attempt from Mac OS, which happened with the
configuration proposed in the text of the wiki.

According to the apple developers, a change in the ESP grouptype was
required ( http://www.openradar.appspot.com/29821241 ). When I tested
the IPSec suggested configuration everything worked well. Therefore I
changed the text of the wiki to reflect the issue. I also fixed a non
matching parenthesis.

Here is the diff:

https://wiki.ipfire.org/configuration/services/ipsec/example_configuration-_r=
oadwarrior_with_macos?do=3Drevisions

Feel free to revert the change if you believe it is necessary or to
suggest a different wording/place.

Thank you for your time
--
Carlo Fusco

--===============7929157394094251451==--