search

hwdsl2 / setup-ipsec-vpn

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
Other
24.9k stars 6.28k forks source link

Increase maximum no of simultansous connections using same ikev2 file #1543

Closed saadabbasi9d closed 5 months ago

saadabbasi9d commented 5 months ago

How to increase maximum no of simultansous connections using same ikev2 file. Is it good to use same file for multiple users . where should i set this limit or change it .

hwdsl2 commented 5 months ago

@saadabbasi9d Hello! For VPN clients behind the same NAT (e.g. home router), it is recommended to create a unique IKEv2 certificate for each client device. Otherwise, clients may not be able to connect simultaneously. It is not currently supported to increase the number of simultaneous connections using the same IKEv2 certificate, for devices behind the same NAT.

saadabbasi9d commented 5 months ago

What if the NAT is different. Can same config file work for that ? and what is the limit for simultaneous connections using same config file .Thankyou

hwdsl2 commented 5 months ago

@saadabbasi9d For devices not behind the same NAT, using the same IKEv2 certificate would usually work, and there is no limit in the configuration. However, it is still recommended to generate a unique IKEv2 certificate for each device for this use case.

saadabbasi263 commented 5 months ago

The Ipses Configuration i.e Username ,password and PSK . Is this Ipsec Only protocol or it's combination of Ipsec & Ikev2 protocols. Thanks For Previous responses as it helped me alot .

hwdsl2 commented 5 months ago

@saadabbasi263 The IPsec/L2TP and IPsec/XAuth ("Cisco IPsec") modes, which use a combination of username, password and pre-shared key (PSK), are both IKEv1 protocols. Internet Key Exchange (IKE, versioned as IKEv1 and IKEv2) is the protocol used to set up a security association (SA) in IPsec. In this project, IKEv2 mode uses certificate-based authentication.