Contents x
    Setting up site-to-site on Untangle NG
    • 1 Minute to read
      Contents

      Setting up site-to-site on Untangle NG

      • 1 Minute to read
        Article summary

        Note: If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead.

        1. On the Apps page install the Application IPSec

        2. Enable the IPsec VPN application

        01 Setting up site-to-site on Untangle NG.png

        1. Create a new IPSec Tunnel by selecting Add

        02 Setting up site-to-site on Untangle NG.png

        1. Fill in the information as seen in the image below. Please generate a Pre Shared Secret Key (we will also need this value on our end)

        2. Select Done and then Save

        3. Check the Tunnel Status; it should be Active

        03 Setting up site-to-site on Untangle NG.png

        1. Select Add to create a rule to allow the connected clients to access the internal LAN

        04 Setting up site-to-site on Untangle NG.png

        1. Add the LAN subnet of the address the NordLayer tunnel side will provide (10.6.0.0/20)

        05 Setting up site-to-site on Untangle NG.png

        1. Enable the rule by selecting Done

        06 Setting up site-to-site on Untangle NG.png

        1. Select Save to apply the new rule

        07 Setting up site-to-site on Untangle NG.png

        Ending note:

        In order to finalize the site-to-site setup on our end, please provide these values via Site-to-site request from in the NordLayer Control Panel:

        • Pre-shared key - you can generate it or we can provide it
        • Encryption  details (AES, SHA and DH group) - AES256, SHA256 and DH group 14 are recommended (also must support IKEv2)
        • Remote gateway/router public IP (must be reachable while connected to the dedicated server)
        • Remote subnet and mask (the subnet is used in your local network)

        Note: In case you are experiencing different results, make sure that you have you carefully gone through all the steps. Having said that, in case the issue persists please feel free to contact our 24/7 customer support team.

        Was this article helpful?
        What's Next