Traffic shaping IPsec

[Jonb]

I have got an IPsec tunnel the pfsense in doing and I was just wondering on what the rules should be.

[hoba]

I don't get what you are asking for exactly. Can you give us some more details?

[sullrich]

IPSEC rules are installed automatically behind the scenes.

[Jonb]

I have the PFsense setting up an IPsec tunnel to a remote site and I was wondering if I would need to setup traffic shapping to optimise the link.

[hoba]

You have an IPSEC option when running the wizard. Set this priority to high. After it has finished go to the trafficshaper rules page and edit the IPSEC rules. change source "lan subnet" to "any". save and apply. now your ipsec will get higher priority.

[Jonb]

Ok this is what I have now

WAN->LAN
ESP  *  *  qOthersDownH/qOthersUpH  m_Other IPSEC inbound     
   
  WAN->LAN
UDP  *  *
Port: 500  qOthersDownH/qOthersUpH  m_Other IPSEC inbound     
   
  LAN->WAN
UDP  *  *
Port: 500  qOthersUpH/qOthersDownH  m_Other IPSEC outbound     
   
  LAN->WAN
AH  *  *  qOthersUpH/qOthersDownH  m_Other IPSEC outbound     
   
  LAN->WAN
ESP  *  *  qOthersUpH/qOthersDownH  m_Other IPSEC outbound     
   
  WAN->LAN
AH  *  *  qOthersDownH/qOthersUpH  m_Other IPSEC inbound