OCI - Setting up a VPN connection with on premise pfsense firewall

[@hayatmohammadkhan6703]

Sir, You have solved my confusion of using Site-to-Site VPN connection. I studied many, but this one is very explanatory and with clear example.

[@newsnetworkz]

Fantastic video, I couldn't find such a clear demo anywhere for OCI VPN sett

[@comosaycomosah]

Would love to see a hub and spoke network setup guide with pfsense firewall or even the Oracle network firewall I cant figure out the cost of running Paolo alto or fortinet or Cisco

[@aduarte034]

Hi guys, what are the ciphers that OCI uses for phase 1 and 2? Where can I see them? Do we have all the possible ciphers available and used when the remote side initiates the connection? Thanks in advance.

[@Tom_Azin]

Thank you for the super video. Very easy to follow along. Is there any way to set this up if a pfSense box has a dynamic public IP, or is it mandatory to have a static public IP? Thank you.

[@MakerDad]

Session is initiated from on-premise, so from that perspective it is fine that the IP changes. You just need to change to a different identifier in the configuration, not to use the IP as identifier.

[@Tom_Azin]

@@MakerDad Do you mean that you can just specify a dyndns hostname when setting up CPE? In the video at 13:05 the field only says IP Address. I have a dynamic public IP and I have dyndns set up via cloudflare on the pfsense. So can I just put the hostname instead of the IP here? Thanks.

[@kabandajamir9844]

The world's best teacher

[@lillyr562]

I'm not sure how active this still is, but I followed your tutorial, and it was so clear and perfect! Thank you!! I can ping to and from my local network without issue. I can SSH in and everything works fine. My issue is that whenever I run a command like top in a ssh session, it all freezes. The same happens with a vnc/rdp session to the OCI machine from local. I am able to do all of this from the public IP so I know the issues is somewhere between OCI and my network. My pfSense is behind a nat so I am wondering if there are any ports I need to forward, or check are available?

[@lillyr562]

For anyone else that comes looking, I had to set the MTU down to 1350 from the default 1400 in advanced settings on my pfSense.

[@oraclecloudblog]

thanks. I do not have this issue, but I am not behind NAT, that might be causing this issue.

[@francescoreggiani1190]

Thanks so much, any idea for tunnels in down even if i configured all?

[@if0else0]

Straight to the point! Thank you, man.

[@maybeageek]

Old video, yet it helped me making it work :-)

[@HardikShah10]

Hey Richard Awesome demo.... tx for sharing .. Tx

[@victoryepez3779]

I followed this video step by step and it works, my tunnel is up but i am not able to ping or communicate with my oci compute instances. Don't you have any firewall rule or static route configured?

[@MakerDad]

Victor Yepez did you add a route for your VCN on the OCI side to route on-prem ip range to the DRG?

[@victoryepez3779]

@@MakerDad Yes Sir!!

[@kasunmagedaragama8762]

Really worth every minute! Thanks a lot!

[@gersonccandido]

Great Richard!!!! thank you for sharing your knowledge

[@nlahmi]

Great tutorial, thanks! (the menus have changed since the video was released but everything works pretty much the same)

[@JavierBarria-h7f]

Thanks your step by step its very explain!

[@itsme12994]

Such a wonderful post please promote more video on Oracle oci

[@HarugeriAndy]

Could you please tell me whether pfsense is installed in a Virtual environment or its pfsense physical firewall you are refering to in this video ?. I am trying to establish IPSec tunneling between OCI and PFsense but somehow I am not able to achieve the same. I installed in pfSense in virtualbox and my entire home network is behind my IPS router/firewall which provides me the internet connection. I opened required ports in my home router/firewall especially UDP 4500 and 500 but still no luck. Any help is highly appreciated.

[@bunty12357]

Hi anandkumar are able to setup IPsec connection?

[@mmaller0319]

Excellent demonstration

[@notwithoutit]

Thank you so much for this grate video, covering Site to Site VPN connection to Oracle VM which works now as long as we are at our office. However, how about the Point to Site VPN connection (if we will work outside the office, from home or Internet café for instance)? It seems that Oracle does not have any Point to Site VPN solution. Please someone advise us, how to create a Pint to Site VPN connection to our VM (Windows Server 2019) in Oracle cloud environment?

[@surajramesh]

Damn good demo. Thanks Richard.

[@ashsalah1]

How to connect Oracle Analytics cloud OAC on public network to same cloud tenancy database on private network

[@VladMZ]

Excellent!

[@mrtraitor]

Thanks . one question i can ping oracle local network but i can't ping back to our on premise network. Any idea ?

[@MakerDad]

Check your firewall if it allows icpm and make sure on both sides you have a correct route

[@mrtraitor]

@@MakerDad thanks i got it working. How do i setup the branch office to connect to the VCN ? Create a new VCN and new tunnel ?

[@kabandajamir9844]

so nice explanation sir may God reward you great super nice

[@cezaralopes]

Awesome! Thank you so much for sharing

[@bunty12357]

Hi Richard, I followed your video still it's not working for me kindly help

[@MakerDad]

I responded to your email

[@zarneaung8484]

very helpful for me. Thanks.

[@noam5651]

God bless you

[@alexcgb275]

Thank you friend, your tutorial helped me a lot.

[@Jippeke]

Very useful ,thank you

[@ronanbnu]

many thanks, you help me a lot

[@MaestroDJDaniello]

Awesome, I need learn it and split with my mt router

[@tiagodbcore4952]

Great video....

[@lavarajs]

Very helpful..

[@flavioalves9641]

Great! Thaks!

[@amjiddader]

Hello, Thanks for tourtial it helped lot of people. but i still need help. i have oracle cloud account. i tried all possible ways to connect to my VM but public ip is not responding SSH & PING shows ip dead 100% loss. i dont know what i am missing. can you help me with setup? if yes leav your working email id so i can send you details or leave your Facebook so i can message you . Regards

[@oraclecloudblog]

you can mail me at [e-mail]