seen from Argentina
seen from Spain
seen from United States
seen from Japan
seen from Hong Kong SAR China
seen from Canada
seen from Germany
seen from Germany
seen from China
seen from United States
seen from United States
seen from Malaysia
seen from United States
seen from T1
seen from Malaysia
seen from United States
seen from China
seen from United States
seen from United States
seen from Türkiye
AT&T to Acquire Vyatta Software Technology from Brocade
http://about.att.com/story/att_to_acquire_vyatta_software_technology_from_brocade.html
https://www.sdxcentral.com/articles/news/att-buys-brocades-vyatta-assets-including-vrouter/2017/06/
(ASAMAP 開発秘話から)
Vyatta Launches Community Edition 4
Vyatta Launches Community Edition 4
by clickykbd
Vyatta Launches Community Edition 4
Vyatta (meaning ‘open’ in ancient Sanskrit), which took the networking world by storm through its introduction of the first commercially supported, open-source router and firewall solution a few years ago, is back in the news once again, this time with its robust and innovative network operating system, Vyatta Community Edition 4 (VC4).
Vyatta,…
View On WordPress
IPsec Site-to-site VPN RouterOS <-> StrongSwan (VyOS,Vyatta) with x509 Certificates
When doing IPsec Site-to-site VPN between Mikrotik RouterOS and StrongSwan (e.g. VyOS, Vyatta, linux distro) there is problem that StrongSwan some time ago changed default value of leftsendcert=always to leftsendcert=ifasked, which results in failed IKE negotiation.
Log:
pluto[21004]: "peer-A.B.C.D-tunnel-0" #123: we have a cert but are not sending it without request pluto[21004]: "peer-A.B.C.D-tunnel-0" #123: sent MR3, ISAKMP SA established pluto[21004]: "peer-A.B.C.D-tunnel-0" #123: retransmitting in response to duplicate packet; already STATE_MAIN_R3 pluto[21004]: "peer-A.B.C.D-tunnel-0" #123: discarding duplicate packet -- exhausted retransmission; already STATE_MAIN_R3
I found two practical solutions:
Modify RouterOS Configuration - Specify Remote Certificate in Peer configuration (Remote certificate needs to be imported)
Modify StongSwan Configuration - Add leftsendcert=always to /etc/ipsec.conf in related peer section
Tested on RouterOS 6.25 and StrongSwan 4.5.2-1.1.
VyOS is a community fork of Vyatta, a Linux-based network operating system that provides software-based network routing, firewall, and VPN functionality.
Runs on both physical and virtual platforms.
Supports paravirtual drivers and integration packages for virtual platforms.
Completely free and open source.
vyatta-sslh - This package provides Vyatta/VyOS sslh configuration, templates and scripts.
