Difference between R80.40 and R81.10 regarding VPN

[Fraol14]

We need to know the difference  r81.10 has regarding IPSEC VPNs. Can anyone please elaborate it? 

Especially with having many encryption domains with a single interoperable device or having one peer IP and multiple encryption domains.

[the_rock]

The only major thing I am aware of is if you have made some modifications in user.def file, its slightly different. If say mgmt is R81.10 and gateways are R80.40, you need to be aware of below.

Andy

# cd $FWDIR/conf

# cp user.def.FW1 user.def.R8040CMP

By the way, I always found that in R81.10 and R81.20, VPN tunnels seem more stable than before. Thats based on all the testing I did in the lab.

[Ruan_Kotze]

One thing that comes to mind is the "Encryption domain per community" feature.  This is a while back but if I recall it was not in the initial R80.40 releases, but added via Jumbo hotfix package.

[the_rock]

Cant recall if that was present in R80.40, good point.

[PhoneBoy]

The only "major" change I can think of is re-adding support for ClusterXL Load Sharing with VPNs in R81.
There is also a checkbox for excluding the gateway's IP addresses from the encryption domain automatically in R81.20.
Otherwise, VPN functionality has largely remained unchanged.