FireBrick to FireBrick IPsec (Howto): Difference between revisions
Content deleted Content added
| Line 32: | Line 32: | ||
<rule name="IPsec from London FB" protocol="50" action="accept" source-ip="198.51.100.1"/> |
<rule name="IPsec from London FB" protocol="50" action="accept" source-ip="198.51.100.1"/> |
||
==FireBrick |
==FireBrick Reading Config== |
||
<ipsec-ike comment="toLondon"> |
<ipsec-ike comment="toLondon"> |
||
<connection name="toLondon" local-ip="198.51.100.1" peer-ips="203.0.113.1" graph="LondonIPsec" routes="192.168.0.0/24"local-ID="1" peer-ID="1" auth-method="Secret" secret="mySecretPassword" mode="Immediate" blackhole="true"/> |
<connection name="toLondon" local-ip="198.51.100.1" peer-ips="203.0.113.1" graph="LondonIPsec" routes="192.168.0.0/24" local-ID="1" peer-ID="1" auth-method="Secret" secret="mySecretPassword" mode="Immediate" blackhole="true"/> |
||
</ipsec-ike> |
</ipsec-ike> |
||
If you firewall WAN to 'Self' (The Firebrick, then a firewall filter may be needed too, eg: |
If you firewall WAN to 'Self' (The Firebrick), then a firewall filter may be needed too, eg: |
||
<rule name="IPsec from Reading FB" protocol="50" action="accept" source-ip="203.0.113.1"/> |
<rule name="IPsec from Reading FB" protocol="50" action="accept" source-ip="203.0.113.1"/> |
||