Differences between revisions 1 and 5 (spanning 4 versions)
Revision 1 as of 2019-10-23 12:12:05
Size: 143
Editor: Sciuro
Comment:
Revision 5 as of 2019-12-16 13:58:00
Size: 908
Editor: Sciuro
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
#acl All:read
#lang en

<<TableOfContents()>>

= IPSEC site to site VPN =
{{{
configure
edit vpn ipsec

# Fase 1
set ike-group unifi key-exchange ikev2
set ike-group unifi lifetime 14400
set ike-group unifi proposal 1 dh-group 14
set ike-group unifi proposal 1 encryption aes128
set ike-group unifi proposal 1 hash sha1

# Fase 2
set esp-group unifi compression disable
set esp-group unifi lifetime 14400
set esp-group unifi mode tunnel
set esp-group unifi pfs dh-group14
set esp-group unifi proposal 1 encryption aes128
set esp-group unifi proposal 1 hash sha1

# IPSEC VPN
# ToDo
}}}
Line 9: Line 38:
mongod_enable="YES"
Line 12: Line 40:

Keep in mind that Unifi uses the mongodb package, but run it by it's own, on a different port. So you don't have to start mongodb at boot time.
----
CategoryNetwork

IPSEC site to site VPN

configure
edit vpn ipsec

# Fase 1
set ike-group unifi key-exchange ikev2
set ike-group unifi lifetime 14400
set ike-group unifi proposal 1 dh-group 14
set ike-group unifi proposal 1 encryption aes128
set ike-group unifi proposal 1 hash sha1

# Fase 2
set esp-group unifi compression disable
set esp-group unifi lifetime 14400
set esp-group unifi mode tunnel
set esp-group unifi pfs dh-group14
set esp-group unifi proposal 1 encryption aes128
set esp-group unifi proposal 1 hash sha1

# IPSEC VPN
# ToDo

Unifi on FreeBSD

Install

pkg install unifi5

Edit /etc/rc.conf

unifi_enable="YES"

Keep in mind that Unifi uses the mongodb package, but run it by it's own, on a different port. So you don't have to start mongodb at boot time.


CategoryNetwork

Howto/Unifi (last edited 2020-03-10 20:24:22 by Sciuro)