You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -133,28 +133,28 @@ sh vpn.sh
133
133
134
134
<details>
135
135
<summary>
136
-
Advanced users can customize IKEv2 options.
136
+
Advanced users can optionally customize IKEv2 options.
137
137
</summary>
138
138
139
-
Advanced users can optionally specify a DNS name to be used as the VPN server address for IKEv2 mode. The DNS name must be a fully qualified domain name (FQDN). It will be included in the generated server certificate. Example:
139
+
Advanced users can optionally specify a DNS name for the IKEv2 server address. The DNS name must be a fully qualified domain name (FQDN). Example:
140
140
141
141
```bash
142
142
sudo VPN_DNS_NAME='vpn.example.com' sh vpn.sh
143
143
```
144
144
145
-
Similarly, you may optionally specify a name for the first IKEv2 client. The default is `vpnclient` if not specified.
145
+
Similarly, you may specify a name for the first IKEv2 client. The default is `vpnclient` if not specified.
146
146
147
147
```bash
148
148
sudo VPN_CLIENT_NAME='your_client_name' sh vpn.sh
149
149
```
150
150
151
-
By default, clients are set to use [Google Public DNS](https://developers.google.com/speed/public-dns/) when the VPN is active. Advanced users may optionally specify custom DNS server(s) for all VPN modes. Example:
151
+
By default, clients are set to use [Google Public DNS](https://developers.google.com/speed/public-dns/) when the VPN is active. You may specify custom DNS server(s) for all VPN modes. Example:
152
152
153
153
```bash
154
154
sudo VPN_DNS_SRV1=1.1.1.1 VPN_DNS_SRV2=1.0.0.1 sh vpn.sh
155
155
```
156
156
157
-
By default, no password is required when importing IKEv2 client configuration. You may optionally choose to protect client config files using a random password. Example:
157
+
By default, no password is required when importing IKEv2 client configuration. You can choose to protect client config files using a random password. Example:
Copy file name to clipboardExpand all lines: docs/advanced-usage.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,13 +28,13 @@ In certain circumstances, you may want VPN clients to use the specified DNS serv
28
28
29
29
For [IPsec/L2TP](clients.md) and [IPsec/XAuth ("Cisco IPsec")](clients-xauth.md) modes, you may use a DNS name (e.g. `vpn.example.com`) instead of an IP address to connect to the VPN server, without additional configuration. In addition, the VPN should generally continue to work after server IP changes, such as after restoring a snapshot to a new server with a different IP, although a reboot may be required.
30
30
31
-
For [IKEv2](ikev2-howto.md) mode, if you want the VPN to continue to work after server IP changes, read [this section](ikev2-howto.md#change-ikev2-server-address). Alternatively, you may specify a DNS name to be used as the VPN server's address when [setting up IKEv2](ikev2-howto.md#set-up-ikev2-using-helper-script). The DNS name must be a fully qualified domain name (FQDN). It will be included in the generated server certificate. Example:
31
+
For [IKEv2](ikev2-howto.md) mode, if you want the VPN to continue to work after server IP changes, read [this section](ikev2-howto.md#change-ikev2-server-address). Alternatively, you may specify a DNS name for the IKEv2 server address when [setting up IKEv2](ikev2-howto.md#set-up-ikev2-using-helper-script). The DNS name must be a fully qualified domain name (FQDN). Example:
Alternatively, you may customize IKEv2 setup options by running the [helper script](ikev2-howto.md#set-up-ikev2-using-helper-script) without the `--auto` parameter.
37
+
Alternatively, you may customize IKEv2 options by running the [helper script](ikev2-howto.md#set-up-ikev2-using-helper-script) without the `--auto` parameter.
Copy file name to clipboardExpand all lines: docs/ikev2-howto.md
+6-4Lines changed: 6 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -66,25 +66,25 @@ Then run the script using the instructions above.
66
66
You may optionally specify a DNS name, client name and/or custom DNS servers.
67
67
</summary>
68
68
69
-
When running IKEv2 setup in auto mode, advanced users can optionally specify a DNS name to be used as the VPN server's address. The DNS name must be a fully qualified domain name (FQDN). It will be included in the generated server certificate. Example:
69
+
When running IKEv2 setup in auto mode, advanced users can optionally specify a DNS name for the IKEv2 server address. The DNS name must be a fully qualified domain name (FQDN). Example:
By default, IKEv2 clients are set to use [Google Public DNS](https://developers.google.com/speed/public-dns/) when the VPN is active. When running IKEv2 setup in auto mode, you may optionally specify custom DNS server(s). Example:
81
+
By default, IKEv2 clients are set to use [Google Public DNS](https://developers.google.com/speed/public-dns/) when the VPN is active. You may specify custom DNS server(s) for IKEv2. Example:
By default, no password is required when importing IKEv2 client configuration. You may optionally choose to protect client config files using a random password. Example:
87
+
By default, no password is required when importing IKEv2 client configuration. You can choose to protect client config files using a random password. Example:
88
88
89
89
```bash
90
90
sudo VPN_PROTECT_CONFIG=yes ikev2.sh --auto
@@ -921,6 +921,8 @@ If you want to remove IKEv2 from the VPN server, but keep the [IPsec/L2TP](clien
921
921
sudo ikev2.sh --removeikev2
922
922
```
923
923
924
+
After removing IKEv2, if you want to set it up again, refer to [this section](#set-up-ikev2-using-helper-script).
925
+
924
926
<details>
925
927
<summary>
926
928
Alternatively, you can manually remove IKEv2. Click here for instructions.
0 commit comments