This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
technical:ipsec:pfsense [2024/05/12 09:39] – created jc | technical:ipsec:pfsense [2024/06/19 21:11] (current) – jc | ||
---|---|---|---|
Line 1: | Line 1: | ||
< | < | ||
- | # RouterOS | + | # pfSense |
## Topology | ## Topology | ||
Line 6: | Line 6: | ||
## Configuration | ## Configuration | ||
- | 1. Create Phase 1 Tunnel | + | ### Create Phase 1 Tunnel |
- | a. Navigate to VPN IPSec and click + Add P1 | + | 1. Navigate to VPN > IPSec and click + Add P1 |
- | b. Enter a description | + | 2. Enter a description |
- | c. Key Exchange Version: IKEv2 | + | 3. Key Exchange Version: IKEv2 |
- | d. Interface: WAN | + | 4. Interface: WAN |
- | e. Remote Gateway: 172.16.1.10 | + | 5. Remote Gateway: 172.16.1.10 |
- | f. Authentication Method: Mutual PSK | + | 6. Authentication Method: Mutual PSK |
- | g. Pre-Shared Key: Secret | + | 7. Pre-Shared Key: Secret |
- | h. Encryption Algorithm: Alogorithm: AES, Key length: 256 bits, Hash: SHA256, DH Group: 14(2048bit) | + | 8. Encryption Algorithm: Alogorithm: AES, Key length: 256 bits, Hash: SHA256, DH Group: 14(2048bit) |
- | i. Life Time: 86400 | + | 9. Life Time: 86400 |
- | j. Click Save | + | 10. Click Save |
- | 2. Create Phase 2 Tunnel | + | ### Create Phase 2 Tunnel |
- | a. Click + Add P2 | + | 1. Click + Add P2 |
- | b. Enter a description. | + | 2. Enter a description. |
- | c. Mode: Tunnel IPv4 | + | 3. Mode: Tunnel IPv4 |
- | d. Local Network: Type: MPU5 | + | 4. Local Network: Type: MPU5 |
- | e. Remote Network: Type: Network, Address: 192.168.1.0/ | + | 5. Remote Network: Type: Network, Address: 192.168.1.0/ |
- | f. Protocol: ESP | + | 6. Protocol: ESP |
+ | |||
+ | 7. Encryption Algorithms: AES 256 bits | ||
+ | |||
+ | 8. Hash Algorithsm: SHA256 | ||
+ | |||
+ | 9. PFS key group: 14 (2048 bit) | ||
+ | |||
+ | 10. Life Time: 1800 | ||
+ | |||
+ | 11. Automatically ping host: 192.168.1.1 | ||
</ | </ |