Carlo,
Just to confirm, have you put this text into the ipsec.user.conf file and restarted IPSec?
conn CONNECTION_NAME leftsendcert=always leftallowany=yes rightdns=10.100.2.1 rekey=no reauth=no
Specifically, the rekey and reauth portions.
I assume yes, but want to double-check.
Tom
On 04/04/2019 12:21 PM, Carlo Fusco wrote:
Hello,
I have MAC OS X Sierra as an IPSec client and when I configured IPSec server on IPFire I found that it was being disconnected every 480 sec due to a failed rekey attempt from Mac OS, which happened with the configuration proposed in the text of the wiki.
According to the apple developers, a change in the ESP grouptype was required ( http://www.openradar.appspot.com/29821241 ). When I tested the IPSec suggested configuration everything worked well. Therefore I changed the text of the wiki to reflect the issue. I also fixed a non matching parenthesis.
Here is the diff:
https://wiki.ipfire.org/configuration/services/ipsec/example_configuration-_...
Feel free to revert the change if you believe it is necessary or to suggest a different wording/place.
Thank you for your time
Carlo Fusco _______________________________________________ Documentation mailing list Documentation@lists.ipfire.org https://lists.ipfire.org/mailman/listinfo/documentation