Component: ipsec

6.44.3 Stable 2019-Apr-23 (7 years ago)

• fixed freshly created identity not taken in action (introduced in v6.44);
• fixed possible configuration corruption after import (introduced in v6.44);

6.45beta31 Testing 2019-Apr-12 (7 years ago)

• added support for RADIUS accounting for "eap-radius" and "pre-shared-key-xauth" authentication methods (CLI only);
• added traffic statistics to "active-peers" menu (CLI only);
• general improvements in policy handling;
• replaced policy SA address parameters with peer setting;
• use tunnel name for dynamic IPsec peer name;

6.45beta27 Testing 2019-Apr-03 (7 years ago)

• fixed possible configuration corruption after import;

6.45beta23 Testing 2019-Apr-01 (7 years ago)

• properly drop already established tunnel when address change detected;

6.45beta22 Testing 2019-Mar-29 (7 years ago)

• added support for RADIUS accounting;
• fixed policies becoming invalid after changing priority;

6.45beta20 Testing 2019-Mar-25 (7 years ago)

• fixed freshly created identity not taken in action;

6.45beta19 Testing 2019-Mar-22 (7 years ago)

• renamed "rsa-signature" authentication method to "digital-signature";

6.45beta16 Testing 2019-Mar-18 (7 years ago)

• added dynamic comment field for "active-peers" menu inherited from identity (CLI only);
• added "ph2-total" counter to "active-peers" menu (CLI only);
• added support for RADIUS accounting;
• added traffic statistics to "active-peers" menu (CLI only);
• do not allow adding identity to a dynamic peer;
• renamed "remote-peers" to "active-peers" (CLI only);

6.44.1 Stable 2019-Mar-13 (7 years ago)

• allow identities with empty XAuth login and password if RADIUS is enabled (introduced in v6.44);
• fixed dynamic L2TP peer and identity configuration missing after reboot (introduced in v6.44);
• use "remote-id=ignore" for dynamic L2TP configuration (introduced in v6.44);

6.43.13 Long-term 2019-Mar-13 (7 years ago)

• fixed all policies not getting installed after startup (introduced in v6.43.8);
• fixed stability issues after changing peer configuration (introduced in v6.43);

6.45beta11 Testing 2019-Mar-08 (7 years ago)

• allow identities with empty XAuth login and password if RADIUS is enabled (introduced in v6.44);

6.45beta6 Testing 2019-Mar-05 (7 years ago)

• fixed dynamic L2TP peer and identity configuration missing after reboot (introduced in v6.44);
• use "remote-id=ignore" for dynamic L2TP configuration (introduced in v6.44);

6.44 Stable 2019-Feb-25 (7 years ago)

• added account log message when user is successfully authenticated;
• added basic pre-shared-key strength checks;
• added new "remote-id" peer matcher;
• allow to specify single address instead of IP pool under "mode-config";
• fixed active connection killing when changing peer configuration;
• fixed all policies not getting installed after startup (introduced in v6.43.8);
• fixed stability issues after changing peer configuration (introduced in v6.43);
• hide empty prefixes on "peer" menu;
• improved invalid policy handling when a valid policy is uninstalled;
• made dynamic "src-nat" rule more specific;
• made peers autosort themselves based on reachability status;
• moved "profile" menu outside "peer" menu;
• properly detect AES-NI extension as hardware AEAD;
• removed limitation that allowed only single "auth-method" with the same "exchange-mode" as responder;
• require write policy for key generation;

6.44rc1 Testing 2019-Feb-15 (7 years ago)

• allow to specify single address instead of IP pool under "mode-config";

6.42.12 Long-term 2019-Feb-12 (7 years ago)

• accept only valid path for "export-pub-key" parameter in "key" menu;

6.44beta75 Testing 2019-Feb-08 (7 years ago)

• require write policy for key generation;

6.43.11 Stable 2019-Feb-04 (7 years ago)

• accept only valid path for "export-pub-key" parameter in "key" menu;

6.44beta61 Testing 2019-Jan-17 (7 years ago)

• accept only valid path for "export-pub-key" parameter in "key" menu;
• added new "remote-id" peer matcher;
• fixed all policies not getting installed after startup (introduced in v6.43.8);
• moved "profile" menu outside "peer" menu;

6.44beta54 Testing 2019-Jan-07 (7 years ago)

• added new "remote-id" peer matcher (CLI only);

6.44beta50 Testing 2018-Dec-17 (7 years ago)

• improved invalid policy handling when a valid policy is uninstalled;

6.43.7 Stable 2018-Nov-30 (7 years ago)

• fixed hw-aead (H) flag presence under Installed SAs on startup;
• improved stability when uninstalling multiple SAs at once;
• properly handle peer profiles on downgrade;
• properly update warnings under peer menu;

6.44beta40 Testing 2018-Nov-28 (7 years ago)

• fixed active connection killing when changing peer configuration;
• made peers autosort themselves based on reachability status;
• moved "profile" menu outside "peer" menu (CLI only);

6.44beta39 Testing 2018-Nov-27 (7 years ago)

• added new "remote-id" peer matcher (CLI only);
• allow to specify single address instead of IP pool under "mode-config";
• hide empty prefixes on "peer" menu;
• made dynamic "src-nat" rule more specific;
• made peers autosort themselves based on reachability status;
• properly detect AES-NI extension as hardware AEAD;
• properly handle peer profiles on downgrade;
• removed limitation that allowed only single "auth-method" with the same "exchange-mode" as responder;

6.42.10 Long-term 2018-Nov-14 (7 years ago)

• fixed hw-aead (H) flag presence under Installed SAs on startup;
• improved stability when uninstalling multiple SAs at once;
• properly update warnings under peer menu;

6.44beta28 Testing 2018-Oct-29 (8 years ago)

• added basic pre-shared-key strength checks;
• fixed hw-aead (H) flag presence under Installed SAs on startup;
• improved stability when uninstalling multiple SAs at once;
• made peers autosort themselves based on reachability status;
• properly update warnings under peer menu;