OPNsense Forum

Archive => 16.7 Legacy Series => Topic started by: luto on August 04, 2016, 11:56:24 pm

Title: Is there any way to manualy key peers in IPsec?
Post by: luto on August 04, 2016, 11:56:24 pm

Hi there,

so far I was using a HERMES PRO/X (http://www.multidata.de/uploads/attachments/hproxp_v2.0_A5.pdf) router from Multidata as internet gateway. It was connected to an external DSL modem and allowed the connection to our branch site via IPsec. Additionally it was possible to use a homework office via IPsec. The router has a dynamically assigned IP address from our provider and updated this IP when it had changed.

Now I set up an opnsense firewall which should do the same. I am struggling with the branch site which was connected via IPsec using a manual keyed peer. I have a peername, some "Security Parameter Index" (SPI) with the value 0x200 and a "Shared Secret". Is it possible to establish such a connection with OPNSense? If so, how do I start?

Thanks for your help,

Thomas