https://wiki.ixheim.de/index.php?action=history&feed=atom&title=OPNsense_site2site_IPSEC_mit_Bildern OPNsense site2site IPSEC mit Bildern - Versionsgeschichte 2026-06-29T04:39:25Z Versionsgeschichte dieser Seite in Xinux Wiki MediaWiki 1.35.1 https://wiki.ixheim.de/index.php?title=OPNsense_site2site_IPSEC_mit_Bildern&diff=66995&oldid=prev Thomas.will: /* Rechts */ 2026-02-18T06:11:13Z <p><span dir="auto"><span class="autocomment">Rechts</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 18. Februar 2026, 06:11 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l29" >Zeile 29:</td> <td colspan="2" class="diff-lineno">Zeile 29:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*ANY 172.26.52.0/22 -&gt;  172.26.20.0/22 IPSEC ALLOW</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*ANY 172.26.52.0/22 -&gt;  172.26.20.0/22 IPSEC ALLOW</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">==Rechts==</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">*ID: 192.168.12.34</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">*VPNGW: 192.168.12.34</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">*NETZ: 172.26.52.0/22</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">;Firewall</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">*UDP 192.168.12.20 -&gt; 192.168.12.34:500 - WAN - ALLOW</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">*ESP 192.168.12.26 -&gt; 192.168.12.34 - WAN - ALLOW</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">*ANY 172.26.20.0/22 -&gt;  172.26.52.0/22 IPSEC ALLOW</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==Schaubild==</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==Schaubild==</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{#drawio:opns-sec-fire-04}}</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{#drawio:opns-sec-fire-04}}</div></td></tr> </table> Thomas.will https://wiki.ixheim.de/index.php?title=OPNsense_site2site_IPSEC_mit_Bildern&diff=66994&oldid=prev Thomas.will: /* Links */ 2026-02-18T06:11:00Z <p><span dir="auto"><span class="autocomment">Links</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 18. Februar 2026, 06:11 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l24" >Zeile 24:</td> <td colspan="2" class="diff-lineno">Zeile 24:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=it213.xinmen.de Seite=</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=it213.xinmen.de Seite=</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>==<del class="diffchange diffchange-inline">Links</del>==</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>==<ins class="diffchange diffchange-inline">Firewall</ins>==</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">*ID: 192.168.12.26</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">*VPNGW: 192.168.12.26</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">*NETZ: 172.26.20.0/22</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">;Firewall</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*UDP 192.168.12.34 -&gt; 192.168.12.26:500 - WAN - ALLOW</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*UDP 192.168.12.34 -&gt; 192.168.12.26:500 - WAN - ALLOW</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*ESP 192.168.12.34 -&gt; 192.168.12.26 - WAN - ALLOW</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*ESP 192.168.12.34 -&gt; 192.168.12.26 - WAN - ALLOW</div></td></tr> </table> Thomas.will https://wiki.ixheim.de/index.php?title=OPNsense_site2site_IPSEC_mit_Bildern&diff=66993&oldid=prev Thomas.will am 18. Februar 2026 um 06:10 Uhr 2026-02-18T06:10:38Z <p></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 18. Februar 2026, 06:10 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l22" >Zeile 22:</td> <td colspan="2" class="diff-lineno">Zeile 22:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>| '''ESP-LIFETIME''' || colspan=&quot;2&quot; | 3600s</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>| '''ESP-LIFETIME''' || colspan=&quot;2&quot; | 3600s</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|}</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|}</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins class="diffchange diffchange-inline">=it213.xinmen.de Seite=</ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==Links==</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==Links==</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-66992:rev-66993 --> </table> Thomas.will https://wiki.ixheim.de/index.php?title=OPNsense_site2site_IPSEC_mit_Bildern&diff=66992&oldid=prev Thomas.will: Die Seite wurde neu angelegt: „=VPN Daten= ==Kenndaten== {| class="wikitable" ! Einstellung !! opnsense.it213.xinmen.de !! opnsense.it214.xinmen.de |- | '''Protokoll 2''' || colspan="2" | IK…“ 2026-02-18T06:09:46Z <p>Die Seite wurde neu angelegt: „=VPN Daten= ==Kenndaten== {| class=&quot;wikitable&quot; ! Einstellung !! opnsense.it213.xinmen.de !! opnsense.it214.xinmen.de |- | &#039;&#039;&#039;Protokoll 2&#039;&#039;&#039; || colspan=&quot;2&quot; | IK…“</p> <p><b>Neue Seite</b></p><div>=VPN Daten=<br /> ==Kenndaten==<br /> {| class=&quot;wikitable&quot;<br /> ! Einstellung !! opnsense.it213.xinmen.de !! opnsense.it214.xinmen.de<br /> |-<br /> | '''Protokoll 2''' || colspan=&quot;2&quot; | IKEv2<br /> |-<br /> | '''ID''' || 192.168.4.213 || 192.168.4.214<br /> |-<br /> | '''IP Address''' || 192.168.4.213 || 192.168.4.214<br /> |-<br /> | '''Internes Netz''' || 172.17.213.0/24 || 172.17.214.0/24<br /> |-<br /> | '''Pre-Shared Key (PSK)''' || colspan=&quot;2&quot; | 123Start$<br /> |-<br /> | '''Phase 1''' || colspan=&quot;2&quot; | AES256 – SHA256 – DH16<br /> |-<br /> | '''Phase 2''' || colspan=&quot;2&quot; | AES256 – SHA256 – DH16<br /> |-<br /> | '''IKE-LIFETIME''' || colspan=&quot;2&quot; | 10800s<br /> |-<br /> | '''ESP-LIFETIME''' || colspan=&quot;2&quot; | 3600s<br /> |}<br /> <br /> <br /> ==Links==<br /> *ID: 192.168.12.26<br /> *VPNGW: 192.168.12.26<br /> *NETZ: 172.26.20.0/22<br /> ;Firewall<br /> *UDP 192.168.12.34 -&gt; 192.168.12.26:500 - WAN - ALLOW<br /> *ESP 192.168.12.34 -&gt; 192.168.12.26 - WAN - ALLOW<br /> *ANY 172.26.52.0/22 -&gt; 172.26.20.0/22 IPSEC ALLOW<br /> <br /> ==Rechts==<br /> *ID: 192.168.12.34<br /> *VPNGW: 192.168.12.34<br /> *NETZ: 172.26.52.0/22<br /> ;Firewall<br /> *UDP 192.168.12.20 -&gt; 192.168.12.34:500 - WAN - ALLOW<br /> *ESP 192.168.12.26 -&gt; 192.168.12.34 - WAN - ALLOW<br /> *ANY 172.26.20.0/22 -&gt; 172.26.52.0/22 IPSEC ALLOW<br /> ==Schaubild==<br /> {{#drawio:opns-sec-fire-04}}<br /> <br /> ==Firewall==<br /> ;Wir gehen davon aus, das ausgehender Verkehr freigeschaltet ist.<br /> *Die Gegenseite muss zu unserer Firewall UDP Port 500 und ESP Verbindungen aufbauen können.<br /> *Desweiteren müssen die Partnernetze zu unseren Netzen freigeschaltet werden.<br /> <br /> <br /> =VPN: IPsec: Pre-Shared Keys=<br /> *VPN<br /> **IPsec<br /> ***Pre-Shared Keys<br /> [[Datei:Opsense-ipsec-0.png]]<br /> =VPN: IPsec: Connections=<br /> ==ADD PSK==<br /> *VPN<br /> **IPsec<br /> ***PREshared_Key<br /> [[Datei:Opsense-ipsec-1.5.png]]<br /> <br /> <br /> ==Enable IPsec==<br /> *VPN<br /> **IPsec<br /> ***Connections<br /> [[Datei:Opsense-ipsec-0.5.png]]<br /> ==Add Connection==<br /> *VPN<br /> **IPsec<br /> ***Connections<br /> [[Datei:Opsense-ipsec-1.png]]<br /> ==Local Authentication==<br /> *VPN<br /> **IPsec<br /> ***Connections<br /> ****Local Authentication<br /> [[Datei:Opsense-ipsec-2.png]]<br /> ==Remote Authentication==<br /> *VPN<br /> **IPsec<br /> ***Connections<br /> ****Remote Authentication<br /> [[Datei:Opsense-ipsec-3.png]]<br /> <br /> ==Children==<br /> *VPN<br /> **IPsec<br /> ***Connections<br /> ****Children<br /> [[Datei:Opsense-ipsec-4.png]]<br /> <br /> =VPN: IPsec: Status Overview=<br /> [[Datei:Opsense-ipsec-5.png]]<br /> =VPN: IPsec: Security Policy Database=<br /> [[Datei:Opsense-ipsec-6.png]]<br /> =Freischalten in der Firewall=<br /> [[Datei:Opsense-ipsec-8.png]]</div> Thomas.will