Component: ipsec

6.47beta60 Testing 2020-Apr-24 (6 years ago)

• allow specifying two peers for a single policy for failover (CLI only);

6.46.5 Stable 2020-Apr-07 (6 years ago)

• improved system stability when handling fragmented packets;

6.47beta53 Testing 2020-Apr-03 (6 years ago)

• improved system stability when handling fragmented packets;

6.47beta49 Testing 2020-Mar-20 (6 years ago)

• control CRL validation with global "use-crl" setting;
• do full certificate validation for identities with explicit certificate;

6.47beta35 Testing 2020-Feb-17 (6 years ago)

• added "use-responder-dns" parameter support (CLI only);

6.47beta32 Testing 2020-Feb-10 (6 years ago)

• added "split-dns" parameter support for mode configuration (CLI only);
• fixed minor spelling mistake in logs;
• improved IPsec service stability when receiving bogus packets;

6.45.8 Long-term 2020-Jan-23 (6 years ago)

• improved system stability when processing decrypted packet on unregistered interface;

6.46.1 Stable 2019-Dec-13 (6 years ago)

• improved system stability when processing decrypted packet on unregistered interface;

6.47beta8 Testing 2019-Dec-10 (6 years ago)

• improved system stability when processing decrypted packet on unregistred interface;

7.0beta4 Development 2019-Dec-06 (6 years ago)

• fixed action=none policies;

6.46 Stable 2019-Dec-02 (6 years ago)

• added "error" topic for identity check failure logging messages;
• fixed DNS resolving when domain has only AAAA entries;
• fixed policy "sa-src-address" detection from "local-address" (introduced in v6.45);

6.46rc1 Testing 2019-Nov-26 (6 years ago)

• fixed IPsec policy checking on RB4011 (introduced in v6.46beta68);

6.46beta68 Testing 2019-Nov-21 (6 years ago)

• fixed policy "sa-src-address" detection from "local-address" (introduced in v6.45);

6.44.6 Long-term 2019-Oct-24 (7 years ago)

• allow inline "passphrase" parameter when importing keys;
• fixed minor spelling mistakes in logs;

6.45.5 Stable 2019-Aug-26 (7 years ago)

• allow inline "passphrase" parameter when importing keys;
• fixed "eap-radius" authentication method (introduced in v6.45);
• fixed minor spelling mistakes in logs;

6.46beta34 Testing 2019-Aug-22 (7 years ago)

• fixed DNS resolving when domain has only AAAA entries;
• fixed "eap-radius" authentication method (introduced in v6.45);
• fixed minor spelling mistakes in logs;

6.46beta28 Testing 2019-Aug-08 (7 years ago)

• allow inline "passphrase" parameter when importing keys;

6.46beta16 Testing 2019-Jul-23 (7 years ago)

• added "error" topic for identity check failure logging messages;

6.45.2 Stable 2019-Jul-17 (7 years ago)

• added "connection-mark" parameter for mode-config initiator;
• allow peer argument only for "encrypt" policies (introduced in v6.45);
• fixed peer configuration migration from versions older than v6.43 (introduced in v6.45);
• improved stability for peer initialization (introduced in v6.45);
• show warning for policies with "unknown" peer;

6.46beta9 Testing 2019-Jul-11 (7 years ago)

• added "connection-mark" parameter for mode-config initiator;
• allow peer argument only for "encrypt" policies (introduced in v6.45);
• fixed peer configuration migration from versions older than v6.43 (introduced in v6.45);
• show warning for policies with "unknown" peer;

6.46beta6 Testing 2019-Jul-04 (7 years ago)

• improved stability for peer initialization (introduced in v6.45);

6.45.1 Stable 2019-Jun-27 (7 years ago)

• renamed "remote-peers" to "active-peers";
• renamed "rsa-signature" authentication method to "digital-signature";
• replaced policy SA address parameters with peer setting;
• use tunnel name for dynamic IPsec peer name;
• added dynamic comment field for "active-peers" menu inherited from identity;
• added "ph2-total" counter to "active-peers" menu;
• added support for RADIUS accounting for "eap-radius" and "pre-shared-key-xauth" authentication methods;
• added traffic statistics to "active-peers" menu;
• disallow setting "src-address" and "dst-address" for transport mode policies;
• do not allow adding identity to a dynamic peer;
• fixed policies becoming invalid after changing priority;
• general improvements in policy handling;
• properly drop already established tunnel when address change detected;

6.45beta62 Testing 2019-Jun-13 (7 years ago)

• added dynamic comment field for "active-peers" menu inherited from identity;
• added "ph2-total" counter to "active-peers" menu;
• added support for RADIUS accounting for "eap-radius" and "pre-shared-key-xauth" authentication methods;
• added traffic statistics to "active-peers" menu;
• disallow setting "src-address" and "dst-address" for transport mode policies;
• renamed "remote-peers" to "active-peers";

6.45beta42 Testing 2019-May-08 (7 years ago)

• added support for RADIUS accounting for "eap-radius" and "pre-shared-key-xauth" authentication methods (CLI only);

6.45beta37 Testing 2019-Apr-25 (7 years ago)

• general improvements in policy handling;