Tip

This is the documentation for the 24.06 version. Looking for the documentation of the latest version? Have a look here.

IPsec

IPsec provides a standards-based VPN implementation compatible with other IPsec implementations. The IPsec subsystem in TNSR is handled by strongSwan.

For site-to-site usage, TNSR supports route-based IPsec, which allows BGP or static routes to send traffic through IPsec.

For remote access IPsec (also known as “Mobile IPsec”), TNSR currently supports IKEv2 with EAP-TLS, EAP-RADIUS, or PSK.

• IPsec Tunnel Types
  • Routed Site-To-Site
  • Remote Access / Mobile IPsec
• Required Information
• IPsec Example
  • Required Information
  • Example Configuration
• IPsec Configuration
  • IPsec Global Options
  • IPsec Tunnel Configuration
  • Enable/Disable IPsec Tunnels
• IPsec Status Information
  • IPsec Status Examples
• IPsec Cryptographic Acceleration
  • Software Cryptographic Acceleration
  • AES-NI cryptographic acceleration
  • QAT cryptographic acceleration