Vejledning fra UI er fundet her:
help.ui.com/hc/en-us/articles/1150128312...te-to-Site-IPsec-VPN
Efter at være kørt gennem ChatGPT, giver det nedenstående resultat, som er lidt nemmere at følge, opsætning er testet og fungerer..
Step 1: Define IPsec Peer and Encryption Settings (Site A - ER-L)
Access the Web UI of the first EdgeRouter (Site A).
Navigate to "VPN" > "IPsec Site-to-Site" > "+Add Peer".
Make sure to check "Show advanced options" and "Automatically open firewall and exclude from NAT".
Configure the following settings:
Peer: er-r.ubnt.com (replace with the public IP or hostname of the remote EdgeRouter - Site
Description: ipsec (you can provide any meaningful description here)
Local IP: 0.0.0.0 (this means the router will listen on all available interfaces)
Encryption: AES-128
Hash: SHA1
DH Group: 14
Pre-shared Secret: <secret> (replace with the actual pre-shared secret)
Local subnet: 192.168.1.0/24 (replace with your local subnet at Site A)
Remote subnet: 172.16.1.0/24 (replace with the remote subnet at Site
Step 2: Repeat the Configuration on the Second EdgeRouter (Site B - ER-R)
Access the Web UI of the second EdgeRouter (Site .
Navigate to "VPN" > "IPsec Site-to-Site" > "+Add Peer".
Check the same "Show advanced options" and "Automatically open firewall and exclude from NAT" options.
Configure the same settings as in Step 1, but with the appropriate values for Site B:
Peer: (the public IP or hostname of the remote EdgeRouter - Site A)
Description: ipsec (same as Site A)
Local subnet: 172.16.1.0/24 (replace with your local subnet at Site
Remote subnet: 192.168.1.0/24 (replace with the remote subnet at Site A)
