Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

FireBrick to FireBrick IPsec (Howto): Difference between revisions

FireBrick to FireBrick IPsec (Howto) (view source)

Revision as of 23:59, 14 March 2017

7 bytes added ,  14 March 2017
m
clean up, typos fixed: eg: → e.g.: (4)
(Prettyful colours)
m (clean up, typos fixed: eg: → e.g.: (4))
 
<indicator name="Tunnels">[[File:Menu-IPsec.svg|link=:Category:FireBrick_IPsecFireBrick IPsec|30px|Back up to the FireBrick IPsec Tunnels Category Page]]</indicator>
Here we will use an IPsec tunnel between two FireBricks. We will use IKEv2 and use a preshared-secret password.
 
Do read the official FireBrick manuals for more information - this is just a simple howto covering the basics.
 
==Network Overview:==
 
{| class="wikitable"
</syntaxhighlight>
 
If you firewall WAN to 'Self' (The FireBrick), then a firewall filter may be needed too, ege.g.:
 
<syntaxhighlight lang=xml>
</syntaxhighlight>
 
You will also want to add firewall rules to allow traffic between the two LANs, ege.g., this will allow all traffic to and from Reading and will not NAT the traffic:
 
<syntaxhighlight lang=xml>
</syntaxhighlight>
 
If you firewall WAN to 'Self' (The Firebrick), then a firewall filter may be needed too, ege.g.:
 
<syntaxhighlight lang=xml>
</syntaxhighlight>
 
You will also want to add firewall rules to allow traffic between the two LANs, ege.g., this will allow all traffic to and from London and will not NAT the traffic:
 
<syntaxhighlight lang=xml>
This rule actually allows all traffic from all IPSec connections - so do edit to suit your environment.
 
[[Category:FireBrick_IPsecFireBrick IPsec|FireBrick]]
Reedy
editor
697

edits

Retrieved from ‘http://support.aa.net.uk/Special:MobileDiff/11969’