topic Re: Difference between R80.40 and R81.10 regarding VPN in General Topics

Difference between R80.40 and R81.10 regarding VPN

Fraol14 — Wed, 06 Sep 2023 14:02:50 GMT

We need to know the difference r81.10 has regarding IPSEC VPNs. Can anyone please elaborate it?

Especially with having many encryption domains with a single interoperable device or having one peer IP and multiple encryption domains.

Re: Difference between R80.40 and R81.10 regarding VPN

the_rock — Wed, 06 Sep 2023 14:29:04 GMT

The only major thing I am aware of is if you have made some modifications in user.def file, its slightly different. If say mgmt is R81.10 and gateways are R80.40, you need to be aware of below.

Andy

# cd $FWDIR/conf

# cp user.def.FW1 user.def.R8040CMP

By the way, I always found that in R81.10 and R81.20, VPN tunnels seem more stable than before. Thats based on all the testing I did in the lab.

Re: Difference between R80.40 and R81.10 regarding VPN

Ruan_Kotze — Wed, 06 Sep 2023 16:44:22 GMT

One thing that comes to mind is the "Encryption domain per community" feature. This is a while back but if I recall it was not in the initial R80.40 releases, but added via Jumbo hotfix package.

Re: Difference between R80.40 and R81.10 regarding VPN

the_rock — Wed, 06 Sep 2023 16:53:45 GMT

Cant recall if that was present in R80.40, good point.

Re: Difference between R80.40 and R81.10 regarding VPN

PhoneBoy — Thu, 07 Sep 2023 00:22:08 GMT

The only "major" change I can think of is re-adding support for ClusterXL Load Sharing with VPNs in R81.
There is also a checkbox for excluding the gateway's IP addresses from the encryption domain automatically in R81.20.
Otherwise, VPN functionality has largely remained unchanged.