* Update wireguard-client.rst - Add MTU and MSS hints
* Update wireguard-s2s.rst - Add MTU and MSS hints
* Update wireguard-s2s.rst - changed mss values
* Update wireguard-s2s.rst - Reworked How-To completely
* Update wireguard-client.rst - adjusted mss value
* Update wireguard-client.rst - Different mss values for IPv4 and IPv6
* Update wireguard-s2s.rst - Improved some aspects
* Update wireguard-client.rst - Improved some aspects
Normalization rules should have different MSS values for either IPv4, or IPv4+IPv6.
Changed the protocol back to any, since I'm unsure if selecting TCP only means IPv4 TCP, since there is also only IPv6 selectable.
* Update wireguard-s2s.rst
- Omitted Source Port in Firewall rules
- Added tip and note about dynamic WAN IP
* Update wireguard-s2s.rst - Terminology changes 23.7.6
- Changed Local to Instance
- Changed Endpoint to Peer
- Added information about CARP vhid tracking to mitigate HA problems.
- Added note about Keepalive for NATed sites.
* created ipsec-swanctl-rw-ikev2-eap-mschapv2.rst
* Update vpnet.rst
Changed the position of Legacy and New > 23.1
Added how-tos/ipsec-swanctl-rw-ikev2-eap-mschapv2 to doctree in New > 23.1
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst
General structure of How-To added
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst
Populated Prerequisites
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst
Populated IPsec connection settings for roadwarriors
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst
Fixed IP address formatting in pools
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst
* ipsec-swst Version completedanctl-rw-ikev2-eap-mschapv2.rst - Fir
* Update vpnet.rst - Switched Positions for client config
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst - Version 1.0
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst
- Added DNS configuration payload information to pools and clients https://github.com/opnsense/core/pull/6864
- Added hint that ncp client is not affiliated with Deciso B.V.
* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst - Added Routing
hint for Windows RAS Client in Split Tunneling mode.
* Update nat_reflection.rst
- Fixed typo (asynchronous should be asymmetrical traffic)
- Added note about "reply-to" in specific setups with VPN WAN
* Update nat_reflection.rst
- Fixed VTI NAT description, referenced the tunables to make it work
Better blocklist support exists in Unbound and since Bind can run as
standalone there is no need to transform the faulty advanced options
to the file-based override that Unbound still supports.
* Some warnings and an example for clarity
Added a warning about overlapping networks for the LAN and Wireguard interfaces, as doing so will cause the clients not to be able to communicate with each other properly. Added an example to request another PD from your ISP, as ATT only hands out /64s and one will not be enough to subnet the networks properly.
* Clarification and briefness
Tried to add just enough information to clarify that it is a completely separated network that requires routing to reach the LAN interface.
commit e0670007e940a0af4d37fc687bd5203d833c53aa
Author: Ad Schellevis <ad@opnsense.org>
Date: Mon May 23 16:33:31 2022 +0200
Interfaces / Setup guides - minor cleanups for https://github.com/opnsense/docs/pull/404 and add to index
commit ebcf61dfb51ad60d0e67ac684952a3501aa1ea4f
Author: Ad Schellevis <ad@opnsense.org>
Date: Mon May 23 14:43:50 2022 +0200
OPNcentral - Multi tenancy using host groups for BE 22.4.1
commit 2012c773c9
Author: Jascha Kirchhoff <jakieu@users.noreply.github.com>
Date: Sat May 21 12:08:17 2022 +0200
Update dt_ger_iptv_07.png
Edit to remove personal information
commit 7eba7806b1
Author: Jascha Kirchhoff <jakieu@users.noreply.github.com>
Date: Sat May 21 12:04:00 2022 +0200
Added DT IPTV setup
Setup guide for Deutsche Telekom Germany Magenta TV IPTV