1.3 KiB
Site-to-site connections
The Connectivity page: the router's IPsec site-to-site connections and its network.
Status tab
Each connection the router set up, with the local and the remote identity, the subnets it resolved and how long it has been up, and their IPsec security associations, child SAs, connections and connection children. IKEv2 access connections are on the IKEv2 tab of Remote Access.
Network tab
The external and the internal interface with their addresses, the internal gateway, the local CIDRs and the IPv4 routes. The panels fold, hide, move and change width; the browser keeps their layout.
Connections tab
Each connection with its remote peer, remote identity, remote and local CIDRs, local identity mode, authentication and whether the tunnel is established.
- Add, Edit and Remove (after a confirmation).
- Pre-shared key: typed as a password; required while the connection has none and kept when left empty; never shown.
- Certificates: the PEM certificate of a remote CA is optional; without it the peer's certificate must come from the router's site-to-site CA.
The router applies a change in the background by running its setup again. The connection the
router was installed with is remote-site.