Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Changing ipsec ik/esp params through web interface
  •  
jpa

Messages: 2
Karma: 0
Send a private message to this user
Hello,
is it possible to change the ike and esp parameters through the web interface ? (like the shift-click to get ssh access)
Going through ssh is a bit annoying since the file is not meant to be updated manually (you have to keep a backup and update with changes done through the interface)
Thanks
  •  
Brian Carmichael (Kerio)

Messages: 602
Karma: 61
Send a private message to this user
What parameters are you needing to update through the configuration and for what reason? I assume you are needing to manually set some ciphers based on this KB http://kb.kerio.com/product/kerio-control/vpn/configuring-ip sec-vpn-tunnel-kerio-control-and-another%09device-1390.html so that you can create an IPsec tunnel with a particular gateway.
As an alternative, you can update the Kerio Control configuration using an executable with parameters. Instructions are in this KB http://kb.kerio.com/product/kerio-control/server-configurati on-kerio-control/modifying-parameters-in-kerio-control-confi guration-1745.html

[Updated on: Mon, 01 June 2015 16:37]


Brian Carmichael
Senior Technical Marketing Engineer | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
jpa

Messages: 2
Karma: 0
Send a private message to this user
We need to setup the ike and esp parameters to match with other vpn servers (Cisco or Juniper) that we do not manage. With the default value we always have "None of the proposed crypto suites was acceptable".
We have found how to change the configuration manually, but it was always overwritten when a new vpn is added or changed.
Thanks for the second article you linked, we will give it a try.
But having these fields right on the UI would be nicer.
Thanks you
  •  
Brian Carmichael (Kerio)

Messages: 602
Karma: 61
Send a private message to this user
Thanks for the quick response. It is a valid request, we will add it to the backlog.

Brian Carmichael
Senior Technical Marketing Engineer | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
Previous Topic: Replacing damaged or broken nic without loosing traffic rules
Next Topic: Connectivity problem
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Feb 23 17:31:12 CET 2017

Total time taken to generate the page: 0.00961 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.