pfSense 2.7.0 New! | OpenVPN Quick & Easy | Site-to-Site VPN (Peer-to-Peer Shared Key)

#stayinandexploreitkb #openvpn #pfsense #opnsense #nmam #firewall #virtualfirewall #opensourse #network #netgate #pf #site-to-siteVPN #vpn #remotecontrol #interconnected #deprecated

In this video, I am going to demonstrate to you how to configure Site-to-Site VPN between 2 sites, or interconnection between your head office and branches.

These are 3 parts of the mastering video series.
1- Peer-to-Peer Shared Key
2- SSL/TLS,
3- IPsec VPN Tunnel.

We are using the latest pfSense 2.7.0 community edition and also the same applies to pfSense Plus software.

*Part-1* https://www.youtube.com/watch?v=1nkfqSGY3H0
We will configure Site-to-Site VPN with a peer-to-peer shared key VPN tunnel, as this is deprecated due to refusal with today's security standard but you can still configure it with some technical congestions, in the future release of pfSense CE peer-to-peer shared key option will be removed finally.

*Part-2* https://www.youtube.com/watch?v=snHrMmNPH44
We will convert this non-security standard VPN tunnel to a “peer-to-peer SSL/TLS VPN tunnel” which is recommended in all situations, and this is the most secure and meets today's security standard.

And then in the final.

*Part-3* https://www.youtube.com/watch?v=x0JvK_wyGoU
We will also see how to configure an “IPsec VPN Tunnel” and interconnect your offices. Since you cannot convert your existing “peer-to-peer Shared Key” and “peer-to-peer SSL/TLS VPN tunnels” to a new “IPsec VPN Tunnel” as this is a completely different configuration so we will see in action and configure it from scratch.

*Why Site-to-Site VPN?*
Site-to-Site allows you to configure only gateways in remote subnets, and you do not need to configure the network nodes themselves. In simple terms, the Site-to-Site method connects two offices to a single network, and the Point-to-Site method connects remote employees to the office. In this video lecture, we will consider an example of connecting two existing networks - physical and virtual.
You can configure your Site-to-Site VPN over the Peer-to-Peer (Shared Key), Peer-to-Peer (SSL/TLS), and IPsec VPN Tunnel.

*Please Note:*
OpenVPN has deprecated the “Peer-to-Peer (Shared Key)” mode as it does not meet recent security standards. The shared key mode will be removed from future versions. So, you should convert any existing “Peer-to-Peer (Shared Key)” VPNs to SSL/TLS and avoid configuring any new “Shared Key” OpenVPN instances.

But in our later videos, we will see in action how to convert the existing peer-to-peer shared key into SSL/TLS and configure IPsec VPN Tunnel from scratch.

Setting up your pfSense network and satisfying all the prerequisites are fairly very straight, if you really wanted to know how to install and configure the pfSense firewall in your network then watch my related video created earlier.
Please note: all the traffic should forward through the pfSense firewall in order to establish a successful routing.
In the local area network, all the Servers and Desktops should set the IP address of your pfSense Firewall in their individual LAN gateway.

*Download*
https://www.pfsense.org/download/

*Blog*
https://www.netgate.com/blog

Видео pfSense 2.7.0 New! | OpenVPN Quick & Easy | Site-to-Site VPN (Peer-to-Peer Shared Key) канала IT-KnowledgeBase