IPSEC VPN connection Peplink - 3rd party hardware

[luke.trimble]

Hi There,

I want to be able to use my peplink box with existing 3rd party hardware to establish a ipsec VPN that requires a preshared key.

Can anyone help

[Danny_Greco]

I am having issues with a similar setup, I’d like my 580 to allow L2TP IPEC traffic through to my MAC Mini VPN Gateway server… Although I have have been instructed to enable the IPSEC NAT-T option I cannot seem to esablish a VPN connection…

[Haruki]

Hello Danny,

I’m going to post it again here.

You will need to use either a Inbound Access or Nat Mapping.

The following article describes how to set up an Inbound Access.

How to Configure Inbound Port Forwarding

Inbound port forwarding, also known as Inbound Access for Peplink Balance, allows internal hosts, such as web server and mail server etc., behind Peplink Balance to be accessed from the Internet. Here are two scenarios for configuring inbound port forwarding. Both are possible using the Peplink Balance, while only the “NAT Mode” configuration is applicable to FusionHub. Configuring inbound Port Forwarding with Peplink Balance Deployed in Drop-In Mode When there is a firewall placed on the LAN …

You can use NAT Mapping as well. However, It will be one to one NAT and all the ports will be forwarded to the device.

https://forum.peplink.com/t/configuring-one-to-one-nat-mappings/8216

The following article describes how different these functions are.

Firewall Rules vs. Inbound Port Forwarding vs. NAT Mappings... When to Use Which?

Firewall Rules Selective filtering of data traffic from LAN to WAN (Outbound) or from WAN to LAN (Inbound) Application: To block or allow a specific protocol going across the Peplink Balance device Inbound Port Forwarding Also known as Inbound Access for Peplink Balance, allows internal hosts such as web server and mail server etc., behind Peplink Balance to be accessed from the Internet. Application: To allow servers to be accessed from the Internet for the specific protocol, e.g. HTTP, FTP, et…

Hello Luke,

Could you tell us where your existing 3rd party VPN device is located at? If it is located right behind the balance, you can follow the same setup as Danny needs to.

If you have any questions, please let us know.

Best Regards,

Haruki

The Peplink Team

[Jason]

Hi Luke,

I know that you also opened a ticket for IPSec help which I have responded to. If you do have further questions, feel free to update me with the ticket rather than the forums.

Best Regards,

Jason

The Peplink Team

[dror_ferents]

Hi,
I am trying to build IPsec VPN between peplink 210 and cisco RV042.
First I try Main Mode, and it work immediately.
Then I tried to put the cisco without const IP
So I changed to Aggressive Mode.
and put and email address in both Local and remote ID.
in the cisco RV042 I choose dynamic IP + Email address and put the same Email address

it is not working
What did I did wrong?
Thanks, Dror

[Kurt_See]

Thanks Dror. We will need to take a closer look at your Cisco and Peplink config. Could you please send them to us via support?