IPSEC site to site VPN

configure
edit vpn ipsec

# Fase 1
set ike-group unifi key-exchange ikev2
set ike-group unifi lifetime 14400
set ike-group unifi proposal 1 dh-group 14
set ike-group unifi proposal 1 encryption aes128
set ike-group unifi proposal 1 hash sha1

# Fase 2
set esp-group unifi compression disable
set esp-group unifi lifetime 14400
set esp-group unifi mode tunnel
set esp-group unifi pfs dh-group14
set esp-group unifi proposal 1 encryption aes128
set esp-group unifi proposal 1 hash sha1

# IPSEC VPN
# ToDo

Unifi on FreeBSD

Install

pkg install unifi5

Edit /etc/rc.conf

unifi_enable="YES"

Keep in mind that Unifi uses the mongodb package, but run it by it's own, on a different port. So you don't have to start mongodb at boot time.

Links

• https://freetime.mikeconnelly.com/archives/6373

• https://robpickering.com/working-around-incomplete-ubiquiti-unifi-security-gateway-dns-service/

CategoryNetwork