Differences between revisions 3 and 6 (spanning 3 versions)
Revision 3 as of 2019-12-10 11:40:14
Size: 220
Editor: Sciuro
Comment:
Revision 6 as of 2019-12-19 14:26:29
Size: 977
Editor: Sciuro
Comment:
Deletions are marked like this. Additions are marked like this.
Line 5: Line 5:

= IPSEC site to site VPN =
{{{
configure
edit vpn ipsec

# Fase 1
set ike-group unifi key-exchange ikev2
set ike-group unifi lifetime 14400
set ike-group unifi proposal 1 dh-group 14
set ike-group unifi proposal 1 encryption aes128
set ike-group unifi proposal 1 hash sha1

# Fase 2
set esp-group unifi compression disable
set esp-group unifi lifetime 14400
set esp-group unifi mode tunnel
set esp-group unifi pfs dh-group14
set esp-group unifi proposal 1 encryption aes128
set esp-group unifi proposal 1 hash sha1

# IPSEC VPN
# ToDo
}}}
Line 14: Line 38:
mongod_enable="YES"
Line 18: Line 41:
Keep in mind that Unifi uses the mongodb package, but run it by it's own, on a different port. So you don't have to start mongodb at boot time.

= Links =
 * [[https://freetime.mikeconnelly.com/archives/6373]]

IPSEC site to site VPN

configure
edit vpn ipsec

# Fase 1
set ike-group unifi key-exchange ikev2
set ike-group unifi lifetime 14400
set ike-group unifi proposal 1 dh-group 14
set ike-group unifi proposal 1 encryption aes128
set ike-group unifi proposal 1 hash sha1

# Fase 2
set esp-group unifi compression disable
set esp-group unifi lifetime 14400
set esp-group unifi mode tunnel
set esp-group unifi pfs dh-group14
set esp-group unifi proposal 1 encryption aes128
set esp-group unifi proposal 1 hash sha1

# IPSEC VPN
# ToDo

Unifi on FreeBSD

Install

pkg install unifi5

Edit /etc/rc.conf

unifi_enable="YES"

Keep in mind that Unifi uses the mongodb package, but run it by it's own, on a different port. So you don't have to start mongodb at boot time.

Links


CategoryNetwork

Howto/Unifi (last edited 2020-03-10 20:24:22 by Sciuro)