Issues creating VPN Remote-access

General questions
1

Hi guys,

I have issues when creating VPN remote access, I use this command:

Configuration of the ESP group

set vpn ipsec esp-group ESP-RW lifetime ‘3600’
set vpn ipsec esp-group ESP-RW pfs ‘disable’
set vpn ipsec esp-group ESP-RW proposal 10 encryption ‘aes128gcm128’
set vpn ipsec esp-group ESP-RW proposal 10 hash ‘sha256’

Configuration of the IKE group

set vpn ipsec ike-group IKE-RW key-exchange ‘ikev2’
set vpn ipsec ike-group IKE-RW lifetime ‘7200’
set vpn ipsec ike-group IKE-RW proposal 10 dh-group ‘14’
set vpn ipsec ike-group IKE-RW proposal 10 encryption ‘aes128gcm128’
set vpn ipsec ike-group IKE-RW proposal 10 hash ‘sha256’

Configuration of the IPv4 address pool

set vpn ipsec remote-access pool ra-rw-ipv4 name-server ‘8.8.8.8’
set vpn ipsec remote-access pool ra-rw-ipv4 prefix ‘10.90.90.0/24’

Configuration of the remote access tunnel

set vpn ipsec remote-access connection rw authentication local-id ‘word1’
set vpn ipsec remote-access connection rw esp-group ‘ESP-RW’
set vpn ipsec remote-access connection rw ike-group ‘IKE-RW’
set vpn ipsec remote-access connection rw local-address ‘10.90.90.1’
set vpn ipsec remote-access connection rw pool ‘ra-rw-ipv4’

Configuration of local user authentication

set vpn ipsec remote-access connection rw authentication client-mode ‘eap-mschapv2’
set vpn ipsec remote-access connection rw authentication local-users username user1 password ‘userpassq’

Apply changes

commit

I get this error:

VyOS-Main# commit

Missing x509 settings on rw remote-access config

Something is wrong?

PS:
internet → eth0 ( Zone WAN)
LAN-> eth1 (Zone LAN)

Thanks
Jose

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.