pfSense 2.7.0 New! | OpenVPN Quick & Easy | Site-to-Site VPN (Peer-to-Peer Shared Key)

#stayinandexploreitkb #openvpn #pfsense #opnsense #nmam #firewall #virtualfirewall #opensourse #network #netgate #pf #site-to-siteVPN #vpn #remotecontrol #interconnected #deprecated
In this video, I am going to demonstrate to you how to configure Site-to-Site VPN between 2 sites, or interconnection between your head office and branches.
These are 3 parts of the mastering video series.
1- Peer-to-Peer Shared Key
2- SSL/TLS,
3- IPsec VPN Tunnel.
We are using the latest pfSense 2.7.0 community edition and also the same applies to pfSense Plus software.
Part-1 • pfSense 2.7.0 New! | O...
We will configure Site-to-Site VPN with a peer-to-peer shared key VPN tunnel, as this is deprecated due to refusal with today's security standard but you can still configure it with some technical congestions, in the future release of pfSense CE peer-to-peer shared key option will be removed finally.
Part-2 • pfSense 2.7.0 New! | C...
We will convert this non-security standard VPN tunnel to a “peer-to-peer SSL/TLS VPN tunnel” which is recommended in all situations, and this is the most secure and meets today's security standard.
And then in the final.
Part-3 • pfSense 2.7.0 New! | C...
We will also see how to configure an “IPsec VPN Tunnel” and interconnect your offices. Since you cannot convert your existing “peer-to-peer Shared Key” and “peer-to-peer SSL/TLS VPN tunnels” to a new “IPsec VPN Tunnel” as this is a completely different configuration so we will see in action and configure it from scratch.
Why Site-to-Site VPN?
Site-to-Site allows you to configure only gateways in remote subnets, and you do not need to configure the network nodes themselves. In simple terms, the Site-to-Site method connects two offices to a single network, and the Point-to-Site method connects remote employees to the office. In this video lecture, we will consider an example of connecting two existing networks - physical and virtual.
You can configure your Site-to-Site VPN over the Peer-to-Peer (Shared Key), Peer-to-Peer (SSL/TLS), and IPsec VPN Tunnel.
Please Note:
OpenVPN has deprecated the “Peer-to-Peer (Shared Key)” mode as it does not meet recent security standards. The shared key mode will be removed from future versions. So, you should convert any existing “Peer-to-Peer (Shared Key)” VPNs to SSL/TLS and avoid configuring any new “Shared Key” OpenVPN instances.
But in our later videos, we will see in action how to convert the existing peer-to-peer shared key into SSL/TLS and configure IPsec VPN Tunnel from scratch.
Setting up your pfSense network and satisfying all the prerequisites are fairly very straight, if you really wanted to know how to install and configure the pfSense firewall in your network then watch my related video created earlier.
Please note: all the traffic should forward through the pfSense firewall in order to establish a successful routing.
In the local area network, all the Servers and Desktops should set the IP address of your pfSense Firewall in their individual LAN gateway.
Download
www.pfsense.org/download/
Blog
www.netgate.com/blog

[@CoDRaZieL]

Thanks for this, I'd been bashing my head on 2 pfSense instances for quite a while to get this going but for some reason your tutorial worked like a charm. Something was going wrong with my routing in previous configurations so it helped to just have someone walk me through it.

[@itkb]

Glad I could help!

[@nomanaziz1285]

Man o man loved your explanation worked like charm

[@itkb]

Glad it helped

[@stephenfosu2386]

Great 👍

[@itkb]

Thanks for the visit

[@nomanaziz1285]

Hey man I wanted to ask a specific question regarding a specific scenario I have two machines working as servers and one as client where two VPNs are configured. Now I want to route different traffic over different tunnel. Like if I access google it should go through tunnel 1 and if I access yahoo it should go from the second tunnel. VPNs are configured and working fine.

[@itkb]

Thank you for your question, i will definitely cover this is my upcoming video's.

[@MdMozammelHossain]

Thanks for your tutorial. I've install pfSense on a cloud to specifically serve the site to site vpn tunnel, but can you help me how to setup the domian and with ssl for pfSense WebUI ?

[@itkb]

Sure, I have also covered such part in very great detail, visit this link kzbin.info/www/bejne/pnvWf3uGf6monas

[@AhmedKhan-et5tc]

we have 2 offices one in delhi and one in ghaziabad do we need public ip to have site to site vpn or peer to peer?

[@itkb]

Static IP is ideal, however, you could besides use Dynamic DNS (DDNS).

[@stephenfosu2386]

Please, can you do site-to-multisites OpenVPN connection using SSL/TLS and how all the sites communicate with each other? Thanks 🙏

[@itkb]

Thank you for your request, sure, I will make a detailed video soon on your request.

[@stephenfosu2386]

@@itkb thanks Sir but how soon because I really need it for our multiple sites. 🙏

[@itkb]

​@@stephenfosu2386 in a week!

[@stephenfosu2386]

@@itkb thanks Sir 🙏

[@stephenfosu2386]

​@@itkbHello Sir. I hope you are doing well? As a gentle reminder of the site-to-multisites with SSL/TLS as you promised this week. Thank you 👍