Skip to content

Commit 79a3aa0

Browse files
authored
Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst (opnsense#572)
Adjust note about udp transport with ipv6 opnsense/core#6964 (comment)
1 parent fe4f6be commit 79a3aa0

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

source/manual/how-tos/ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,8 @@ The example users are ``John`` and ``Laura``. The example FQDN is ``vpn1.example
2727
Any IPv6 functionality is optional. If you don't want to use IPv4+IPv6 dual stack, just skip all IPv6 addresses/networks and focus on IPv4.
2828

2929
.. Note::
30-
It is currently not possible to use IPv6 as outer tunnel transport address. IPsec requires UDP encapsulation of ESP packets for most mobile clients. UDP encapsulation and decapsulation for IPv6 is currently unsupported by the FreeBSD 13.2 Kernel.
30+
- IPv6 transport with UDP encapsulation of ESP packets is supported by OPNsense 24.7 with the FreeBSD 14 kernel.
31+
- When using OPNsense 24.1 or below it is currently not possible to use IPv6 as outer tunnel transport address. IPsec requires UDP encapsulation of ESP packets for most mobile clients. UDP encapsulation and decapsulation for IPv6 is unsupported by the FreeBSD 13 Kernel.
3132

3233
.. Warning::
3334
- Don't copy security relevant configuration parameters like passwords into your configuration. Create your own!

0 commit comments

Comments
 (0)