mathdatech/Compose-Examples
1
0
Fork 0
mirror of https://github.com/Haxxnet/Compose-Examples synced 2024-10-06 12:59:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
a2eb902b42
Compose-Examples/examples/ipsec-vpn-server
History
LRVT a2eb902b42
Update README.md 
add notes
2023-04-04 23:54:27 +02:00
..
docker-compose.yml Update docker-compose.yml 2023-02-26 16:11:30 +01:00
README.md Update README.md 2023-04-04 23:54:27 +02:00

README.md

References

Notes

# copy IKEv2 VPN profile from docker container onto host
docker cp ipsec-vpn-server:/etc/ipsec.d/vpnclient.p12 ./

# elevated powershell; import the VPN profile into Windows
certutil.exe -f -importpfx .\vpnclient.p12 NoExport

# manually add the new IKEv2 VPN connection
powershell -command "Add-VpnConnection -ServerAddress 'vpn.example.com' -Name 'IKEVPN' -TunnelType IKEv2 -AuthenticationMethod MachineCertificate -EncryptionLevel Required -PassThru"

powershell -command "Set-VpnConnectionIPsecConfiguration -ConnectionName 'IKEVPN' -AuthenticationTransformConstants GCMAES128 -CipherTransformConstants GCMAES128 -EncryptionMethod AES256 -IntegrityCheckMethod SHA256 -PfsGroup None -DHGroup Group14 -PassThru -Force"

# set additional reg key to harden IKEv2 key exchange
REG ADD HKLM\SYSTEM\CurrentControlSet\Services\RasMan\Parameters /v NegotiateDH2048_AES256 /t REG_DWORD /d 0x1 /f