Setting up site-to-site on Untangle NG

Note: If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead.

1. On the Apps page install the Application IPSec

2. Enable the IPsec VPN application

3. Create a new IPSec Tunnel by selecting Add

4. Fill in the information as seen in the image below. Please generate a Pre Shared Secret Key (we will also need this value on our end)

5. Select Done and then Save

6. Check the Tunnel Status; it should be Active

7. Select Add to create a rule to allow the connected clients to access the internal LAN

8. Add the LAN subnet of the address the NordLayer tunnel side will provide (10.6.0.0/20)

9. Enable the rule by selecting Done

10. Select Save to apply the new rule

Ending note:

In order to finalize the site-to-site tunnel, please create a setup in Sites tab of the NordLayer Control Panel.

• Pre-shared key - you can generate it or we can provide it
• Encryption  details (AES, SHA and DH group) - AES256, SHA256 and DH group 14 are recommended (also must support IKEv2)
• Remote gateway/router public IP (must be reachable while connected to the server with a dedicated IP)
• Remote subnet and mask (the subnet is used in your local network)

Note: In case you have any questions or issues, press 'Chat with support' at the bottom of the page.