You can use Preshared Key (PSK) authentication to create a basic site-to-site VPN when you don’t need advanced tunnel authentication and management controls.
Note
You can safely leave all advanced settings with their default values. You can have the same settings and values on both peers, or reverse remote and local settings where needed.
Steps
1. Create the primary tunnel specification on the primary system
- Go to NETWORK > VPN.
- Select IPsec subnets.
- Enter a descriptive Name for the tunnel.
- Select Enabled.
2. Configure your Local IP address
- Select the external Local IP address for the primary tunnel
-
Enter the Local network that the secondary system can access. Ensure the values are in the IP address/network mask format. For example: 192.168.10.0/255.255.255.0.
Note
The IP address should correspond to an existing local network.
-
From the Local ID type list, select the method for the primary system to identify itself to the secondary system. You can use a static external IP for the ID value.
Note
If you select local, leave the Local ID value empty. It's auto-generated when Local IP is chosen as the local ID type.
3. Configure your secondary system
- Enter your secondary system’s IP address. If the IP address is:
- Static: Enter the Remote IP or hostname.
- Dynamic: Leave this field blank.
-
Specify the Remote network on the secondary system that the primary system can access. Enter the values in the IP address/network mask format. For example: 192.168.20.0/255.255.255.0.
Note
This should correspond to an existing local network.
- From the Remote ID type list, select Remote IP (or ANY if blank Remote IP). This means that the primary system can use the secondary’s IP address (if one was specified).
- Enter the Remote ID value and the Local IP address of the secondary system.
4. Authenticate your secondary system
- From the Authenticate by list, select Preshared Key. This instructs Smoothwall Firewall to authenticate the secondary system by validating a shared pass phrase.
- Enter the Preshared Key pass-phrase, and then enter Preshared Key again for confirmation.
5. Finalise the setup
- Enter a descriptive comment. For example: Tunnel to Birmingham Branch.
- Select Add.
Smoothwall Filter and Firewall will place your new VPN tunnel in the Current tunnels section.