PfSense 2.2 <-> AVM - Fritzbox (VPN Net2Net) ?



  • Is there anyone out there who had success with that Mission?

    I tried several tutorials (but still only available for 2.1) but failed.

    regards



  • i have successfully do that.
    Do you have a special problem?



  • Same problem here. Any config files or screen shots of the working configuration?



  • Config File of Fritzbox:

    /*

    • C:\Users\user\AppData\Roaming\AVM\FRITZ!Fernzugang\dyndns\fritzbox_fritzbox.cfg
    • Mon Mar 02 17:06:02 2015
      */

    vpncfg {
            connections {
                    enabled = yes;
                    conn_type = conntype_lan;
                    name = "pfsense_vpn";
                    always_renew = no;
                    reject_not_encrypted = no;
                    dont_filter_netbios = yes;
                    localip = 0.0.0.0;
                    local_virtualip = 0.0.0.0;
                    remoteip = pfsense_ip;
                    remote_virtualip = 0.0.0.0;
                    localid {
                            fqdn = "dyndns or static ip";
                    }
                    remoteid {
                            ipaddr = static wan ip or dyndns;
                    }
                    mode = phase1_mode_idp;
                    phase1ss = "all/all/all";
                    keytype = connkeytype_pre_shared;
                    key = "presharedkey";
                    cert_do_server_auth = no;
                    use_nat_t = yes;
                    use_xauth = no;
                    use_cfgmode = no;
                    phase2localid {
                            ipnet {
                                    ipaddr = 192.168.10.0;
                                    mask = 255.255.255.0;
                            }
                    }
                    phase2remoteid {
                            ipnet {
                                    ipaddr = 192.168.100.0;
                                    mask = 255.255.255.0;
                            }
                    }
                    phase2ss = "esp-all-all/ah-none/comp-all/pfs";
                    accesslist = "permit ip any 192.168.100.0 255.255.255.0";
            }
            ike_forward_rules = "udp 0.0.0.0:500 0.0.0.0:500",
                                "udp 0.0.0.0:4500 0.0.0.0:4500";
    }

    // EOF



  • Phase 1 pfsense:

    Phase 2 pfsense:

    Finish.

    Successfully tested with pfsense (version 2.2 & 2.2.1) and Fritzbox 7490, 7390 …



  • No success. Maybe it’s my old Fritzbox 7270. Get a new one (7490) next week or so and will give it a try.



  • With the new Fritzbox 7490 it works. Thanks!


Log in to reply