documentation:examples:gre_ipsec_and_openvpn
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
| documentation:examples:gre_ipsec_and_openvpn [2020/06/29 16:47] – [VM4: OpenVPN client] olivier | documentation:examples:gre_ipsec_and_openvpn [2022/07/08 12:33] – [VPN with GRE, GIF, IPSec, OpenVPN and Wireguard] olivier | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== VPN with GRE, GIF, IPSec, OpenVPN and Wireguard ====== | ====== VPN with GRE, GIF, IPSec, OpenVPN and Wireguard ====== | ||
| - | This lab shows some VPN examples with BSDRP 1.97. | + | This lab shows some VPN examples with BSDRP 1.991. |
| ===== Presentation ===== | ===== Presentation ===== | ||
| Line 238: | Line 238: | ||
| If you have previous gre configuration from the gre example: remove them. | If you have previous gre configuration from the gre example: remove them. | ||
| - | |||
| - | Here is the line to ADD to / | ||
| < | < | ||
| Line 252: | Line 250: | ||
| service routing restart | service routing restart | ||
| config save | config save | ||
| + | </ | ||
| + | |||
| + | Take care of avoiding fragmentation, | ||
| + | < | ||
| + | set skip on lo0 | ||
| + | scrub on gif1 inet all max-mss 1200 | ||
| + | scrub on gif1 inet6 all max-mss 1180 | ||
| + | pass | ||
| </ | </ | ||
| ==== Router 4 ==== | ==== Router 4 ==== | ||
| Line 257: | Line 263: | ||
| Configure the 2 gif tunnel using VM2 addresses as end-point. | Configure the 2 gif tunnel using VM2 addresses as end-point. | ||
| - | Here are the changes to apply to rc file: | ||
| < | < | ||
| sysrc cloned_interfaces=" | sysrc cloned_interfaces=" | ||
| Line 692: | Line 697: | ||
| < | < | ||
| - | cat > / | + | cat > / |
| config setup | config setup | ||
| Line 710: | Line 715: | ||
| rightid=VM4 | rightid=VM4 | ||
| auto=start | auto=start | ||
| - | 'EOF' | + | EOF |
| </ | </ | ||
| Line 716: | Line 721: | ||
| < | < | ||
| - | cat > / | + | cat > / |
| VM4 VM2 : PSK "This is a strong password" | VM4 VM2 : PSK "This is a strong password" | ||
| - | 'EOF' | + | EOF |
| </ | </ | ||
| Line 724: | Line 729: | ||
| < | < | ||
| - | sysrc strongswan_enable=YES | + | service strongswan enable |
| service strongswan restart | service strongswan restart | ||
| </ | </ | ||
| Line 738: | Line 743: | ||
| < | < | ||
| - | cat > / | + | cat > / |
| config setup | config setup | ||
| Line 755: | Line 760: | ||
| rightid=VM2 | rightid=VM2 | ||
| auto=route | auto=route | ||
| - | 'EOF' | + | EOF |
| </ | </ | ||
| Line 761: | Line 766: | ||
| < | < | ||
| - | cat > / | + | cat > / |
| VM4 VM2 : PSK "This is a strong password" | VM4 VM2 : PSK "This is a strong password" | ||
| - | 'EOF' | + | EOF |
| </ | </ | ||
| Line 769: | Line 774: | ||
| < | < | ||
| - | sysrc strongswan_enable=YES | + | service strongswan enable |
| service strongswan restart | service strongswan restart | ||
| </ | </ | ||
| Line 1058: | Line 1063: | ||
| < | < | ||
| - | echo '< | + | cat > / |
| + | client | ||
| + | dev tun | ||
| + | remote 10.0.23.2 | ||
| + | < | ||
| + | ' | ||
| cat / | cat / | ||
| echo '</ | echo '</ | ||
documentation/examples/gre_ipsec_and_openvpn.txt · Last modified: 2023/07/10 12:40 by olivier