Site-to-site on-premises resources

This section provides instructions on how to construct site-to-site connections among your other branches using various routers. Find your model and get started

23 Articles in this category

Setting up site-to-site on SmartRG router

This guide walks you through setting up a site-to-site IPsec tunnel on SmartRG routers, specifically using the SmartRG SR516AC as a reference. However, this setup process applies broadly across all SmartRG SR series routers, thanks to their similar ...

Setting up site-to-site on UniFi USG

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. If you're operating on UniFi Controller 5.13.29 and above please switch to Classic Mode first. Configuring the tunnel at the Uni...

Setting up site-to-site on TP-Link router

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Verify the settings needed for IPsec tunnel on router To verify the settings needed for the setup, please log into the router's mana...

Setting up site-to-site on Synology router

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Follow the steps below to establish a Site-to-Site VPN connection between a pair of Synology Router: Set up your Synology Router and ...

Setting up site-to-site on D-Link DIR-130/330

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Open your web browser and type in the IP address of your D-Link router management console (192.168.0.1 by default). Enter the userna...

Setting up site-to-site on Linux server

Prerequisites SECRET_KEY - replace with your generated secret preshared key NordLayerIP - replace with the IP of your NordLayer server with a dedicated IP YourIP - replace with your public static IP LocalSubnet - replace with the I...

Setting up site-to-site on Zyxel USG

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring at the Zyxel USG Interface Go to the ZyXel USG interface and add a VPN Gateway. (Configuration > VPN > IPSec VPN...

Setting up site-to-site on WatchGuard

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring the tunnel on the WatchGuard Management Interface Open Fireware Web UI In the left panel, select VPN, then Bra...

Setting up site-to-site on Untangle NG

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. On the Apps page install the Application IPSec Enable the IPsec VPN application Create a new IPSec Tunnel by sel...

Setting up site-to-site on Sophos XG

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring at the Sophos XG Interface Go to the Sophos XG interface and add a local and remote LAN Go to Hosts and Servic...

Setting up site-to-site on SonicWall

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Creating objects in SonicWall Go to Objects in SonicWall Go to Address Object Select Add Add the IP of your No...

Setting up site-to-site on pfSense

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. pfSense IPSEC tunnel creation Go to VPN -> IPsec Select +Add P1 Key Exchange Version : IKEv2 Internet Pro...

Setting up site-to-site on Palo Alto

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring the tunnel in the Palo Alto WebGUI Open the Palo Alto WebGUI, and select the Network tab Select Interfaces and...

Setting up site-to-site on Netgear BR500 router

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring the tunnel on the Netgear Management Interface Open the Netgear management interface In the left panel, select...

Setting up site-to-site on Linksys router

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring the tunnel on the Linksys Web Interface Open the Linksys management interface (typically 192.168.1.1) In the l...

Setting up site-to-site on Juniper (JunOS) SRX

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring at the Juniper SRX Firewall Interface Please follow the steps below. Each step is accompanied by a command that needs to...

Setting up site-to-site on FortiGate

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring the tunnel at the FortiGate Management Interface Open the FortiGate Management Interface In the left panel, se...

Setting up site-to-site on DrayTek Vigor 3900

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring the tunnel on the DrayTek Management Interface Open the DrayTek management interface In the left panel, select...

Setting up site-to-site on Cisco Meraki

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. This article describes how to configure a site-to-site connection between NordLayer server with a dedicated IP and Cisco Meraki device...

Setting up site-to-site on Check Point

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Creating a gateway object at the Check Point Smart Console Open the Check Point Smart Console Go to Security Policies ...

Setting up site-to-site on Barracuda

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Configuring the tunnel at the Barracuda Management Interface Open the Barracuda Management Interface In the top menu, sele...

Setting up site-to-site on Asus BRT-AC828

Note : As Asus BRT-AC828 does not allow establishing a Site-to-Site connection on wider subnets than /24, you will only be able to access your remote resources while connected specifically with the IKEv2 VPN protocol chosen in the NordLayer appli...

Setting up site-to-site on Ubiquiti EdgeRouter / EdgeMax

Note : If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead. Replace 'DEDICATED_SERVER_IP' with the IP of your NordLayer server with a dedicated IP; LOCAL_IP_ADDRESS - with the static public ...