diff --git a/docs/ikev2-howto-zh.md b/docs/ikev2-howto-zh.md index 0f5cb43..423adce 100644 --- a/docs/ikev2-howto-zh.md +++ b/docs/ikev2-howto-zh.md @@ -122,7 +122,7 @@ To customize IKEv2 or client options, run this script without arguments. *其他语言版本: [English](ikev2-howto.md#configure-ikev2-vpn-clients), [简体中文](ikev2-howto-zh.md#配置-ikev2-vpn-客户端)。* -**注:** 如果要添加或者导出 IKEv2 客户端,运行 `sudo ikev2.sh`。使用 `-h` 显示使用信息。IKEv2 客户端配置文件可以在导入后安全删除。 +**注:** 如果要添加或者导出 IKEv2 客户端,运行 `sudo ikev2.sh`。使用 `-h` 显示使用信息。客户端配置文件可以在导入后安全删除。 * [Windows 7, 8, 10 和 11](#windows-7-8-10-和-11) * [OS X (macOS)](#os-x-macos) @@ -135,7 +135,7 @@ To customize IKEv2 or client options, run this script without arguments. #### 自动导入配置 -**Windows 8, 10 和 11** 用户可以自动导入 IKEv2 配置: +**Windows 8, 10 和 11** 用户可以自动导入 IKEv2 配置: 1. 将生成的 `.p12` 文件安全地传送到你的计算机。 1. 右键单击 [ikev2_config_import.cmd](https://github.com/hwdsl2/vpn-extras/releases/latest/download/ikev2_config_import.cmd) 并保存这个辅助脚本到与 `.p12` 文件 **相同的文件夹**。 @@ -146,7 +146,7 @@ To customize IKEv2 or client options, run this script without arguments. #### 手动导入配置 -或者,**Windows 7, 8, 10 和 11** 用户可以手动导入 IKEv2 配置: +或者,**Windows 7, 8, 10 和 11** 用户可以手动导入 IKEv2 配置: 1. 将生成的 `.p12` 文件安全地传送到你的计算机,然后导入到证书存储。 @@ -163,7 +163,7 @@ To customize IKEv2 or client options, run this script without arguments. 1. 在 Windows 计算机上添加一个新的 IKEv2 VPN 连接。 - 对于 **Windows 8, 10 和 11**,推荐从命令提示符运行以下命令创建 VPN 连接,以达到更佳的安全性和性能。 + 对于 **Windows 8, 10 和 11**,推荐从命令提示符运行以下命令创建 VPN 连接,以达到更佳的安全性和性能。 ```console # 创建 VPN 连接(将服务器地址换成你自己的值) @@ -172,7 +172,7 @@ To customize IKEv2 or client options, run this script without arguments. powershell -command "Set-VpnConnectionIPsecConfiguration -ConnectionName 'My IKEv2 VPN' -AuthenticationTransformConstants GCMAES128 -CipherTransformConstants GCMAES128 -EncryptionMethod AES256 -IntegrityCheckMethod SHA256 -PfsGroup None -DHGroup Group14 -PassThru -Force" ``` - **Windows 7** 不支持这些命令,你可以 [手动创建 VPN 连接](https://wiki.strongswan.org/projects/strongswan/wiki/Win7Config)。 + **Windows 7** 不支持这些命令,你可以 [手动创建 VPN 连接](https://wiki.strongswan.org/projects/strongswan/wiki/Win7Config)。 **注:** 你输入的服务器地址必须与 IKEv2 辅助脚本输出中的服务器地址 **完全一致**。例如,如果你在配置 IKEv2 时指定了服务器的域名,则必须在 **Internet地址** 字段中输入该域名。 @@ -190,11 +190,9 @@ To customize IKEv2 or client options, run this script without arguments. 如果在连接过程中遇到错误,请参见 [故障排除](#故障排除)。 -#### 删除 IKEv2 VPN 连接 -
-了解如何删除 IKEv2 VPN 连接。单击查看详情。 +删除 IKEv2 VPN 连接 通过以下的步骤,可以删除添加的 VPN 连接,并将计算机恢复到导入 IKEv2 配置之前的状态(可选)。 @@ -264,6 +262,14 @@ To customize IKEv2 or client options, run this script without arguments. 如果在连接过程中遇到错误,请参见 [故障排除](#故障排除)。 +
+ +删除 IKEv2 VPN 连接 + + +要删除 IKEv2 VPN 连接,打开系统偏好设置 -> 描述文件并移除你添加的 IKEv2 VPN 描述文件。 +
+ ### iOS 首先,将生成的 `.mobileconfig` 文件安全地传送到你的 iOS 设备,并且导入为 iOS 配置描述文件。要传送文件,你可以使用: @@ -314,6 +320,14 @@ To customize IKEv2 or client options, run this script without arguments. 如果在连接过程中遇到错误,请参见 [故障排除](#故障排除)。 +
+ +删除 IKEv2 VPN 连接 + + +要删除 IKEv2 VPN 连接,打开设置 -> 通用 -> VPN 与设备管理(或者描述文件)并移除你添加的 IKEv2 VPN 描述文件。 +
+ ### Android 1. 将生成的 `.sswan` 文件安全地传送到你的 Android 设备。 diff --git a/docs/ikev2-howto.md b/docs/ikev2-howto.md index 5a91d24..6bd1120 100644 --- a/docs/ikev2-howto.md +++ b/docs/ikev2-howto.md @@ -122,7 +122,7 @@ To customize IKEv2 or client options, run this script without arguments. *Read this in other languages: [English](ikev2-howto.md#configure-ikev2-vpn-clients), [简体中文](ikev2-howto-zh.md#配置-ikev2-vpn-客户端).* -**Note:** To add or export IKEv2 client(s), run `sudo ikev2.sh`. Use `-h` to show usage. IKEv2 client config files can be safely deleted after import. +**Note:** To add or export IKEv2 clients, run `sudo ikev2.sh`. Use `-h` to show usage. Client config files can be safely deleted after import. * [Windows 7, 8, 10 and 11](#windows-7-8-10-and-11) * [OS X (macOS)](#os-x-macos) @@ -135,7 +135,7 @@ To customize IKEv2 or client options, run this script without arguments. #### Auto-import configuration -**Windows 8, 10 and 11** users can automatically import IKEv2 configuration: +**Windows 8, 10 and 11** users can automatically import IKEv2 configuration: 1. Securely transfer the generated `.p12` file to your computer. 1. Right-click on [ikev2_config_import.cmd](https://github.com/hwdsl2/vpn-extras/releases/latest/download/ikev2_config_import.cmd) and save this helper script to the **same folder** as the `.p12` file. @@ -146,7 +146,7 @@ If you get an error when trying to connect, see [Troubleshooting](#troubleshooti #### Manually import configuration -Alternatively, **Windows 7, 8, 10 and 11** users can manually import IKEv2 configuration: +Alternatively, **Windows 7, 8, 10 and 11** users can manually import IKEv2 configuration: 1. Securely transfer the generated `.p12` file to your computer, then import it into the certificate store. @@ -163,7 +163,7 @@ Alternatively, **Windows 7, 8, 10 and 11** users can manually import 1. On the Windows computer, add a new IKEv2 VPN connection. - For **Windows 8, 10 and 11**, it is recommended to create the VPN connection using the following commands from a command prompt, for improved security and performance. + For **Windows 8, 10 and 11**, it is recommended to create the VPN connection using the following commands from a command prompt, for improved security and performance. ```console # Create VPN connection (replace server address with your own value) @@ -172,7 +172,7 @@ Alternatively, **Windows 7, 8, 10 and 11** users can manually import powershell -command "Set-VpnConnectionIPsecConfiguration -ConnectionName 'My IKEv2 VPN' -AuthenticationTransformConstants GCMAES128 -CipherTransformConstants GCMAES128 -EncryptionMethod AES256 -IntegrityCheckMethod SHA256 -PfsGroup None -DHGroup Group14 -PassThru -Force" ``` - **Windows 7** does not support these commands, you can [manually create the VPN connection](https://wiki.strongswan.org/projects/strongswan/wiki/Win7Config). + **Windows 7** does not support these commands, you can [manually create the VPN connection](https://wiki.strongswan.org/projects/strongswan/wiki/Win7Config). **Note:** The server address you specify must **exactly match** the server address in the output of the IKEv2 helper script. For example, if you specified the server's DNS name during IKEv2 setup, you must enter the DNS name in the **Internet address** field. @@ -190,11 +190,9 @@ To connect to the VPN: Click on the wireless/network icon in your system tray, s If you get an error when trying to connect, see [Troubleshooting](#troubleshooting). -#### Remove the IKEv2 VPN connection -
-Learn how to remove the IKEv2 VPN connection. Click for details. +Remove the IKEv2 VPN connection Using the following steps, you can remove the VPN connection and optionally restore the computer to the status before IKEv2 configuration import. @@ -264,6 +262,14 @@ Once successfully connected, you can verify that your traffic is being routed pr If you get an error when trying to connect, see [Troubleshooting](#troubleshooting). +
+ +Remove the IKEv2 VPN connection + + +To remove the IKEv2 VPN connection, open System Preferences -> Profiles and remove the IKEv2 VPN profile you added. +
+ ### iOS First, securely transfer the generated `.mobileconfig` file to your iOS device, then import it as an iOS profile. To transfer the file, you may use: @@ -314,6 +320,14 @@ Once successfully connected, you can verify that your traffic is being routed pr If you get an error when trying to connect, see [Troubleshooting](#troubleshooting). +
+ +Remove the IKEv2 VPN connection + + +To remove the IKEv2 VPN connection, open Settings -> General -> VPN & Device Management or Profile(s) and remove the IKEv2 VPN profile you added. +
+ ### Android 1. Securely transfer the generated `.sswan` file to your Android device.