Line 165: |
Line 165: |
| ===Configuration on RUT2 device=== | | ===Configuration on RUT2 device=== |
| ---- | | ---- |
| + | Navigate to '''Services > VPN > IPsec''': |
| #Enter Instance name | | #Enter Instance name |
| #Click on the [[File:Add Button.png|50px]] | | #Click on the [[File:Add Button.png|50px]] |
− | [[File:Vxlan over vpn add client.png|border|class=tlt-border]] | + | |
| + | #<li value="3"> Enable instance |
| + | #Enter RUT1 Public IP |
| + | #Select '''Pre-Shared Key''' as the authentication method |
| + | #Enter the key. This key must match the one that will be entered later in the RUT2 IPSec settings |
| + | #Enter the RUT2 LAN IP address as the '''Local identifier''' |
| + | #Enter the RUT1 LAN IP address as the '''Remote identifier''' |
| + | |
| + | :Scroll down to '''Connection settings''': |
| + | |
| + | #<li value="9">Select "'''Start'''" in '''Mode''' section |
| + | #Select "'''Tunnel'''" as connection type |
| + | #Enable "'''Route based IPSec'''" |
| + | #Enter the '''IP address''' of the RUT2 tunnel endpoint |
| + | #Enter lower MTU to reduce packet size (optional) |
| + | #<li value="14">Leave all other settings at their default values and click the [[File:Save & Apply.png|90px]] twice |
| + | |
| + | |
| + | |
| + | Navigate to '''Network > Devices'''. To create a new instance, click the [[File:Add Button.png|50px]] button. If editing an existing interface from the [[#VXLAN over Wired WAN|'''previous configuration''']], click [[File:Edit button.png]] |
| + | |
| + | #Enter '''IP address''' of RUT1 VPN '''tunnel endpoint''' |
| + | #Click the [[File:Save & Apply.png|90px]] twice |
| + | |
| + | [[File:Vxlan over vpn vxlan settings rut1.png|border|class=tlt-border]] |
| | | |
| ==Configuration testing== | | ==Configuration testing== |