Category:FireBrick IPsec Road Warrior

From AAISP Support Site
Revision as of 15:40, 30 July 2015 by AA-Andrew (talk | contribs)


The FireBrick manual goes into some detail on configuring IPsec. This page contains specific examples for a simple scenario where you have one or more clients devices - iPhones iPads, Android phones/tablets or Windows machines, and a FireBrick in your home or office, and you would like to VPN (using IPsec) to the FireBrick and have an IP address on your LAN.

In this example we are assuming you can allocate some IP addresses on you LAN. You do this by picking a range of addresses and setting up a roaming-pool (see below). You need to ensure the IP range does not clash with devices on the LAN and is not in the DHCP ranges that could allocate to the LAN. You also need to set proxy-arp on the LAN interface settings to allow communications to other devices on your LAN. Alternatively you could set private IP addresses in the pool and set the nat setting. You should probably also consider firewalling rules for traffic to/from IPsec connections.

First, create certificates and the FireBrick config, then look at the pages for the device you are wanting to configure

Menu-Certificate.svg

Certificates

First: Create the required Certificates

Menu-FireBrick.svg

FireBrick config

Second: Configure the FireBrick

Third: Configure your device:

Menu-Apple.svg

iPhone & iPad

Apple iPhones and Apple iPads

Menu-Android.svg

Android

Android, eg phones and tablets

Menu-Windows.svg

Windows

Windows 7 and Windows 10

Menu-Apple.svg

Apple OSX

Apple OSX, eg Macbook laptops etc