Tip

This is the documentation for the 23.11 version. Looking for the documentation of the latest version? Have a look here.

IPsec

IPsec provides a standards-based VPN implementation compatible with other IPsec implementations. The IPsec subsystem in TNSR is handled by strongSwan.

For site-to-site usage, TNSR supports route-based IPsec, which allows BGP or static routes to send traffic through IPsec.

For remote access IPsec (also known as “Mobile IPsec”), TNSR currently supports IKEv2 with EAP-TLS or PSK.

• Required Information
• IPsec Example
  • Required Information
  • Example Configuration
• IPsec Configuration
  • IPsec Endpoints
  • IPsec Keys
  • Security Associations
  • Configuring the IPsec Interface
  • IPsec Routes
  • Enable/Disable IPsec Tunnels
• IPsec Status Information
  • IPsec Status Examples
• IPsec Cryptographic Acceleration
  • Software Cryptographic Acceleration
  • AES-NI cryptographic acceleration
  • QAT cryptographic acceleration