I use Unifi UDM-SE for VPN with Gl.inet routers and WireGuard. Works very consistent and reliable.
> On Mar 7, 2024, at 6:20 AM, Michael Keuter <li...@mksolutions.info> wrote: > > Hi Michael, > > I only used StrongSwan with the AVM Fritzbox router/DSL modem models, which > are widely used in Germany. You'll have to create a textfile, which has to be > imported into the Fritzbox via the WebGUI. > > Luckily the newer Fritzbox models now support WireGuard. Never used Unifi for > VPN. I thought you wanted to use Gl.inet routers … > > Michael > > http://www.mksolutions.info > >> Am 07.03.2024 um 12:52 schrieb Lonnie Abelbeck <li...@lonnie.abelbeck.com>: >> >> Hi Michael, >> >> Unifi access points and switches have played well with others over the years. >> >> Unifi routing products, while based on linux, never had a good track record >> of interoperability, particularly with VPNs. >> >> It would seem straightforward for Unifi to support sourcing manual Wireguard >> configs in addition to the pretty GUI Wireguard configs ... maybe someday. >> >> Personally, I would not even try to get AstLinux Strongswan to work with >> Unifi's IPsec. >> >> Lonnie >> >> >> >>> On Mar 7, 2024, at 12:17 AM, Michael Knill >>> <michael.kn...@ipcsolutions.com.au> wrote: >>> >>> Noone 🙁 >>> >>> Regards >>> Michael Knill >>> From: Michael Knill <michael.kn...@ipcsolutions.com.au> >>> Sent: Friday, 23 February 2024 2:50 PM >>> To: AstLinux List (astlinux-users@lists.sourceforge.net) >>> <astlinux-users@lists.sourceforge.net> >>> Subject: [Astlinux-users] Ubiquiti Unifi >>> >>> Im kicking and screaming all the way, but I will probably be moving to the >>> Ubiquiti Unifi ecosystem (we already use their WAP’s). >>> As part of this, I will be implementing some of their gateways (routers) >>> which I really need to connect via VPN to Astlinux in the cloud. >>> They now support Wireguard but only as a client or server and not as a site >>> to site VPN which they support Open VPN and IPsec only. In the Wireguard >>> client configuration they emulate a mobile client so all traffic is from >>> the gateway address (NAT). >>> >>> So just wondering if Im going to be able to get this working with OpenVPN >>> as per below: >>> >>> <image002.png> >>> >>> Looks like it only support Pre-Shared Key and not certificates? >>> >>> Could probably use Strongswan with IPsec but would rather not unless >>> someone has got this working or something similar. >>> >>> Regards >>> >>> Michael Knill >>> Managing Director >>> >>> D: +61 2 6189 1360 >>> P: +61 2 6140 4656 >>> E: michael.kn...@ipcsolutions.com.au >>> W: ipcsolutions.com.au >>> >>> <image001.png> >>> Smarter Business Communications > > > > _______________________________________________ > Astlinux-users mailing list > Astlinux-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/astlinux-users > > Donations to support AstLinux are graciously accepted via PayPal to > pay...@krisk.org. _______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.
