Ipsec ikev2 more than 20 simultan connections
-
Hello,
I have the following problem. On the pfsense is an ipsec server with strongswan. Here I exclusively use ikev2. If more than 20 VPN clients promise to build the tunnel, this is evaluated as a DOS attack. To prevent this, certain declarations can be entered into the strongswan.conf. Since these are constantly reassembled by script, these values are lost, of course. So my question. Where can I store values for the strongswan.conf so that they are included in the assembly? Or more precisely: Where is the script, which builds the strongswan.conf?
Many Thanks!Best regards
Tino Kurth -
Hi,
I have found out what file the strongswan.conf is assembled. It is the /etc/inc/vpn.inc.
Best regards
Tino