Coronavirus scare > office says let's WFH for a while > problems setting up VPN server > discover entire office internet routing has been going out through a roundabout path for who knows how long, unexpectedly. Coronavirus: helping discover networking snafus since 2020.
-
Show this thread
-
Meanwhile, IPSec is terrible, and macOS support for IPSec is even more terrible. Apparently with 2048-bit DH they support AES256 (but not AES128) for Phase 1 encryption, but then only support SHA1 (but not SHA256) for Phase 2 authentication. What?! https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/mvpn/ipsec/mvpn_ipsec_ios_vpn_c.html …
9 replies 3 retweets 26 likesShow this thread -
Replying to @marcan42
Similar things happened on Windows 10 as well, for some reason StrongSwan has to provide both weak and strong crypto modes; otherwise some clients may not work at all.
2 replies 0 retweets 2 likes
On Win10 at least you can use some PowerShell commands to configure the detailed settings. On macOS as far as I can tell you're SOL. We were able to make Win10 work with that.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.