Project

General

Profile

Actions
Copy link

Correction #11096

closed

Feedback on pfSense Configuration Recipes — IPsec Site-to-Site VPN Example with Pre-Shared Keys

Added by Jared Dillard over 3 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jim Pingle
Category:
IPsec
Target version:
-
Start date:
11/24/2020
Due date:
% Done:

0%

Estimated time:

Description

Page: https://docs.netgate.com/pfsense/en/latest/recipes/ipsec-s2s-psk.html

Feedback: (from twitter:) Your example is in dire need of updated cryptography settings because both sides have equally outdated and insecure settings.

DH group 2 is no longer recommended and screenshots are quite old. The current GUI even contains a warning against using DH group2. There will need a couple of wording changes since group 14 is now the default for DH at P1 and PFS at P2. Updated screenshots attached.

Files

Download all files
Screenshot_2020-11-24 244dev stevew lan - VPN IPsec Tunnels Edit Phase 2.png (166 KB) Screenshot_2020-11-24 244dev stevew lan - VPN IPsec Tunnels Edit Phase 2.png Jared Dillard, 11/24/2020 10:41 AM
Screenshot_2020-11-24 244dev stevew lan - VPN IPsec Tunnels Edit Phase 1.png (245 KB) Screenshot_2020-11-24 244dev stevew lan - VPN IPsec Tunnels Edit Phase 1.png Jared Dillard, 11/24/2020 10:41 AM
Actions
Copy link

Also available in: Atom PDF