Ruijie Community

Title: How to configure IPsec VPN on reyee gateway [Print this page]

Author: chenlin5@ruijie    Time: 2021-8-27 15:35
Title: How to configure IPsec VPN on reyee gateway
How to configure IPsec VPN on reyee gateway?


Sample topolohy


HQ:

Step 1: Choose VPN→IPSec and then add the policy


Step 2:configure the IPSec Security Policy





Branch:
Step 1: Choose VPN→IPSec and then add the policy


Step 2:configure the IPSec Security Policy





Note: Make sure the  IKE Policy and Connection Policy is the same on both side

Finally: Check IPSec Connection Status




Author: hasheem@alhiba-    Time: 2022-6-8 20:59
How to configure with NO-IP DDNS?

Author: zhangwei13    Time: 2022-6-9 13:56
Hasheemuddin Mohammad replied at 2022-6-8 20:59
How to configure with NO-IP DDNS?

Hi sir, you can follow t his picture to input the correct username and password of No-IP DNS.



Author: it@symphonycr.c    Time: 2022-10-28 14:21
How can I connect a PFSense router through IPSec to Ruijie Gateway?

Author: zhangwei13    Time: 2022-10-31 12:18
unknown unknown replied at 2022-10-28 14:21
How can I connect a PFSense router through IPSec to Ruijie Gateway?

Hi sir, the configuratios are most same, please note to make sure the VPN settings in PFSense are correct, especially the pre-shared key, nncryption algorithms and transform set.


Author: Luis Puentes    Time: 2023-7-6 21:33
Greetings, How to connect through the internet when there is double NAT on both ends?

Author: guominxiang@rui    Time: 2023-7-7 19:45
Luis  Puentes  replied at 2023-7-6 21:33
Greetings, How to connect through the internet when there is double NAT on both ends?

May I confirm do you want to consult the case that both sides are on the Intranet, and the public IP address is other devices which is on uplink, how to configure it?

If yes, you need to configure ipsec vpn on EG normally and configure port mapping on the public IP
device.


Author: Luis Puentes    Time: 2023-7-18 08:36
GTAC-Micca replied at 2023-7-7 19:45
May I confirm do you want to consult the case that both sides are on the Intranet, and the public  ...

Thanks for answering. The scenario is the following: I have to connect a laptop from my home to the central offices, the ISPs are different companies, and both offer services with dynamic IP and work over double NAT, I cannot open ports at both ends. What solution can I apply? ruijie has any cloud VPN service?


Author: guominxiang@rui    Time: 2023-7-18 09:49
Luis  Puentes  replied at 2023-7-18 08:36
Thanks for answering. The scenario is the following: I have to connect a laptop from my home to th ...
May I confirm the network environment of EG with you?
1. EG with dynamic IP and it is private ip address right? Is EG connecting to ISP directly? Or EG iis connecting to ISP router?
2. May I know what is meaning of "I cannot open ports at both ends" please?

Author: Luis Puentes    Time: 2023-7-18 22:20
GTAC-Micca replied at 2023-7-18 09:49
Luis  Puentes  replied at 2023-7-18 08:36
Thanks for answering. The scenario is the following: I hav ...

The EG gateway is on a private IP, the ISP does not deploy a public IP, the NE pf EG is on remote site



Author: guominxiang@rui    Time: 2023-7-19 18:58
Luis  Puentes replied at 2023-7-18 22:20
The EG gateway is on a private IP, the ISP does not deploy a public IP, the NE pf EG is on remote  ...

EG is connect to ISP directly or ISP router? Is there any device between EG and ISP?
If EG on private IP, is there any device has public IP?


Author: admin@cityfell.    Time: 2023-8-29 23:09
Hi, I want to configure client to site VPN, but both sides have a private IP dinamic, is not possible open ports, both sides have a double NAT. both sides are connected direct to fiber ONT, no routers or another firewalls.

Author: guominxiang@rui    Time: 2023-8-31 09:36
Luis Puentes replied at 2023-8-29 23:09
Hi, I want to configure client to site VPN, but both sides have a private IP dinamic, is not possibl ...

You mean, ONT is also a private address, and one of the NAT is done on the ISP? If so, I'm sorry that VPN cannot be configured for this environment



Author: admin@cityfell.    Time: 2023-8-31 23:29
GTAC-Micca replied at 2023-8-31 09:36
You mean, ONT is also a private address, and one of the NAT is done on the ISP? If so, I'm sorry t ...

Thankyou for you reply.





Welcome to Ruijie Community (https://community.ruijienetworks.com/) Powered by Discuz! X3.2