Back to TopUniFi Gateway - Site-to-Site IPsec VPN
IPsec is a Site-to-Site VPN that allows you to connect a UniFi gateway to a remote location. You can access it from Network Settings > Teleport & VPN.
Refer to the advanced article when setting up a Site-to-Site VPN to a third-party gateway. A UniFi Gateway or UniFi Cloud Gateway is required.
How Does it Work?
IPsec Site-to-Site VPNs use a Pre-Shared Key for authentication. A unique key is automatically generated, but a custom key can be used as well.
Additionally, the following information is required:
- Server Address: Use the IP address assigned to the WAN port or enter a manual address.
- Shared Remote Subnets: Network(s) used at the remote location.
- Remote IP: Public IP address of the remote location.
In order to set up a successful VPN, the following information needs to match between the gateways:
- VPN Protocol
- Pre-shared Key
- Remote and local server IP address
- Remote and local subnets
- Key Exchange Version, Encryption, Hash, and DH Groups (when using Manual settings)
- Perfect Forward Secrecy (when using Manual settings)
- Route-Based VPN (when using Manual settings)
Note: When configuring a Site-to-Site VPN between two UniFi gateways, we recommend to use the Auto settings.
Frequently Asked Questions
IPsec encrypts your traffic and secures the VPN connection. It also uses an automatically generated unique key for authentication.
Check if one of the gateways is assigned a private IP address and is behind another router.
If both gateways are using public IP addresses, then verify if the configuration matches.
To test connectivity over the VPN, try pinging between two clients instead of to or from the UniFi gateway itself.
If the ping is not working, then verify if there are any Firewall or Traffic Rules configured that may prevent connectivity.
When using Windows clients for testing, also ensure that the ping traffic is allowed through the Windows firewall.
No, this is not possible even when forwarding ports on the upstream router.
No, these are automatically created.
Was this article helpful?