User Tools

Site Tools


documentation:examples:gre_ipsec_and_openvpn

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
documentation:examples:gre_ipsec_and_openvpn [2020/09/14 21:57] – [Router 4] olivierdocumentation:examples:gre_ipsec_and_openvpn [2022/07/08 11:59] – [Tunnel with IKEv2 (strongswan)] olivier
Line 250: Line 250:
 service routing restart service routing restart
 config save config save
 +</code>
 +
 +Take care of avoiding fragmentation, TCP-MSS should be reduced on a gif using inet6, like with this pf.conf example:
 +<code>
 +set skip on lo0
 +scrub on gif1 inet all max-mss 1200
 +scrub on gif1 inet6 all max-mss 1180
 +pass
 </code> </code>
 ==== Router 4 ==== ==== Router 4 ====
Line 689: Line 697:
  
 <code> <code>
-cat > /usr/local/etc/ipsec.conf <<'EOF'+cat > /usr/local/etc/ipsec.conf <<EOF
 config setup config setup
  
Line 707: Line 715:
     rightid=VM4     rightid=VM4
     auto=start     auto=start
-'EOF'+EOF
 </code> </code>
  
Line 713: Line 721:
  
 <code> <code>
-cat > /usr/local/etc/ipsec.secrets <<'EOF'+cat > /usr/local/etc/ipsec.secrets <<EOF
 VM4 VM2 : PSK "This is a strong password" VM4 VM2 : PSK "This is a strong password"
-'EOF'+EOF
 </code> </code>
  
Line 721: Line 729:
  
 <code> <code>
-sysrc strongswan_enable=YES+service strongswan enable
 service strongswan restart service strongswan restart
 </code> </code>
Line 735: Line 743:
  
 <code> <code>
-cat > /usr/local/etc/ipsec.conf <<'EOF'+cat > /usr/local/etc/ipsec.conf <<EOF
 config setup config setup
  
Line 752: Line 760:
     rightid=VM2     rightid=VM2
     auto=route     auto=route
-'EOF'+EOF
 </code> </code>
  
Line 758: Line 766:
  
 <code> <code>
-cat > /usr/local/etc/ipsec.secrets <<'EOF'+cat > /usr/local/etc/ipsec.secrets <<EOF
 VM4 VM2 : PSK "This is a strong password" VM4 VM2 : PSK "This is a strong password"
-'EOF'+EOF
 </code> </code>
  
Line 766: Line 774:
  
 <code> <code>
-sysrc strongswan_enable=YES+service strongswan enable
 service strongswan restart service strongswan restart
 </code> </code>
documentation/examples/gre_ipsec_and_openvpn.txt · Last modified: 2023/07/10 12:40 by olivier

Except where otherwise noted, content on this wiki is licensed under the following license: BSD 2-Clause
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki