Traffic shaping IPsec



  • I have got an IPsec tunnel the pfsense in doing and I was just wondering on what the rules should be.



  • I don't get what you are asking for exactly. Can you give us some more details?



  • IPSEC rules are installed automatically behind the scenes.



  • I have the PFsense setting up an IPsec tunnel to a remote site and I was wondering if I would need to setup traffic shapping to optimise the link.



  • You have an IPSEC option when running the wizard. Set this priority to high. After it has finished go to the trafficshaper rules page and edit the IPSEC rules. change source "lan subnet" to "any". save and apply. now your ipsec will get higher priority.



  • Ok this is what I have now

    WAN->LAN
    ESP  *  *  qOthersDownH/qOthersUpH  m_Other IPSEC inbound     
       
      WAN->LAN
    UDP  *  *
    Port: 500  qOthersDownH/qOthersUpH  m_Other IPSEC inbound     
       
      LAN->WAN
    UDP  *  *
    Port: 500  qOthersUpH/qOthersDownH  m_Other IPSEC outbound     
       
      LAN->WAN
    AH  *  *  qOthersUpH/qOthersDownH  m_Other IPSEC outbound     
       
      LAN->WAN
    ESP  *  *  qOthersUpH/qOthersDownH  m_Other IPSEC outbound     
       
      WAN->LAN
    AH  *  *  qOthersDownH/qOthersUpH  m_Other IPSEC inbound


Log in to reply