Change IPSec ESP mode from tunnel to transport to fix issue when Spok…

…es behind a NAT
vyos · Nov 30, 2020 · 904bc5c · 904bc5c
1 parent 7710c7e
commit 904bc5c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/docs/vpn/dmvpn.rst b/docs/vpn/dmvpn.rst
@@ -199,7 +199,7 @@ Hub
 
   set vpn ipsec esp-group ESP-HUB compression 'disable'
   set vpn ipsec esp-group ESP-HUB lifetime '1800'
-  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
+  set vpn ipsec esp-group ESP-HUB mode 'transport'
   set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
   set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
   set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'
@@ -307,7 +307,7 @@ VyOS can also run in DMVPN spoke mode.
 
   set vpn ipsec esp-group ESP-HUB compression 'disable'
   set vpn ipsec esp-group ESP-HUB lifetime '1800'
-  set vpn ipsec esp-group ESP-HUB mode 'tunnel'
+  set vpn ipsec esp-group ESP-HUB mode 'transport'
   set vpn ipsec esp-group ESP-HUB pfs 'dh-group2'
   set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256'
   set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1'