Pour usage personnel aucune garantie
Post date: Apr 14, 2016 5:22:40 PM
REF : https://technologyand.me/2015/08/27/ubiquiti-edge-router-vpn-with-sonicwall/
ubnt@ubnt:~$ configure
[edit]
ubnt@ubnt# set vpn ipsec esp-group ESPSonicWallVPN
ubnt@ubnt# set vpn ipsec esp-group ESPSonicWallVPN compression disabled
ubnt@ubnt# set vpn ipsec esp-group ESPSonicWallVPN lifetime 3600
ubnt@ubnt# set vpn ipsec esp-group ESPSonicWallVPN mode tunnel
ubnt@ubnt# set vpn ipsec esp-group ESPSonicWallVPN pfs disable
ubnt@ubnt# set vpn ipsec esp-group ESPSonicWallVPN proposal 1
ubnt@ubnt# set vpn ipsec esp-group ESPSonicWallVPN proposal 1 encryption aes128
ubnt@ubnt# set vpn ipsec esp-group ESPSonicWallVPN proposal 1 hash sha1
ubnt@ubnt# set vpn ipsec ike-group IKESonicWallVPN
ubnt@ubnt# set vpn ipsec ike-group IKESonicWallVPN lifetime 28800
ubnt@ubnt# set vpn ipsec ike-group IKESonicWallVPN proposal 1
ubnt@ubnt# set vpn ipsec ike-group IKESonicWallVPN proposal 1 dh-group 2
ubnt@ubnt# set vpn ipsec ike-group IKESonicWallVPN proposal 1 encryption aes128
ubnt@ubnt# set vpn ipsec ike-group IKESonicWallVPN proposal 1 hash sha1
ubnt@ubnt# set vpn ipsec ipsec-interfaces interface eth0
ubnt@ubnt# set vpn ipsec logging log-modes all
ubnt@ubnt# set vpn ipsec logging log-modes control
ubnt@ubnt# set vpn ipsec nat-traversal enable
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 local-address 1.1.1.1
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 authentication mode pre-shared-secret
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 authentication pre-shared-secret mysecretvpnkey1010
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 connection-type initiate
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 default-esp-group ESPSonicWallVPN
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 ike-group IKESonicWallVPN
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 tunnel 1
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 tunnel 1 allow-nat-networks disable
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 tunnel 1 allow-public-networks disable
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 tunnel 1 esp-group ESPSonicWallVPN
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 tunnel 1 local prefix 192.168.1.0/24
ubnt@ubnt# set vpn ipsec site-to-site peer 2.2.2.2 tunnel 1 remote prefix 10.10.1.0/24
ubnt@ubnt# commit
ubnt@ubnt# save
ubnt@ubnt# quit