ipsec site to site

[opnsensef8]

Hello,

sorry for maybe bothering you.

We do have an OPNsense connected directly to the internet (site a)  and another OPNsense, connected to a router that is not under our control (buliding is used by many companies with the internet access over a "LAN cable" and a private network: site b). They both have DNS names registered to the public IP (site b using a dyndns service).

site a and site b should be connected to each other. OpenVPN connects, but we have performance issues and packet sizes down to 0 with interruptions of larger file transfers. There was no solution for this (MSS, MTU...DF bit en/dis and so on).

So how can we setup ipsec between site a and site b.

[Julissa]

Hello,

Regarding your issue, I need to know if there is a way to monitoring the IPSec. Sometimes goes down. I need monitoring the status for the IP Sec.

Thank you in advance if someone has some option.

[mrpsycho]

Julissa,

you have to set site A as responder, and side B as initiator.