General Info
Key Exchange Version: Auto
Internet Protocol: IPv4
Interface: WAN
Remote Gateway: Remote IP/FQDN
Description: As needed
Phase 1 Proposal (Authentication)
Authentication Method: Mutual PSK
Negotiation Mode: Main
My Identifier: My IP address
Peer Identifier: Peer IP Address
Pre-Shared Key: PSK String
Phase 1 Proposal (Algorithms)
Encryption Algorithm: 3DES
Hash Algoritm: SHA1
DH group: 2 (1024 bit)
Lifetime: 2880
Advanced Options
Disable Rekey: No
Responder Only: No
NAT Traversal: Auto
Dead Peer Detection: ON
Delay: 10
Max Failures: 5
General Information
Mode: Tunnel IPv4
Local Network: LAN subnet
NAT/BINAT translation: None
Remote Network: Edgemarc Primary LAN Subnet
Description: As needed
Phase 2 Proposal (SA/Key Exchange)
Protocol: ESP
Encryption Algorithm: AES / Auto
Hash Algoritm: SHA1
PFS key group: 2 (1024 bit)
Lifetime: 86400
Advanced Configuration
Automatically Ping Host: Edgemarc LAN Default Gateway IP
Enable VPN Module: On
Name: As needed
Enabled: On
Shared Secret: PSK String as used in PFSense configuration
Local VPN Gateway: WAN_IP
Protected Local Network: Edgemarc Primary LAN Subnet as used in PFSense configuration
Remote VPN Gateway: Remote IP/FQDN
Protected Remote Network: PFSense LAN Subnet
DH Group: DH Group 2 - 1024 bits
Phase 1: 3DES - SHA1
Phase 2: AES128 - SHA1
Phase 1 Lifetime: 28800
Phase 2 Lifetime: 86400
Perfect Forward Secrecy: On
Early Start: On
Keepalive Ping (Optional)
Source IP address: Edgemarc Primary LAN Gateway IP
Destination IP address: PFSense Primary LAN Gateway IP