How To Set FREE VPN on XRCLOUD ECS?

How To Set FREE VPN on XRCLOUD ECS?

Tutorial Part 1. Building Pfsense Server

With the rapid development of technologies, most companies are providing 24/7 support to their customers. To keep their business running efficiently and provide the best quality service to the customers. Most enterprises rent telecom operations, buying software, firewalls, or VPN equipment to build a VPN network ensures the enterprise's internal business system's security.

Currently, the foremost VPNs used by enterprises are hardware VPNs, and the protocols are SSL VPN, L2TP VPN, IPsec VPN, etc. However, these VPN devices are expensive and have poor client compatibility and are required to be updated continuously. If businesses choose to rent a third-party VPN directly, there are also security concerns.

This article will be a guideline for using open source free firewall software pfSense and building a VPN network based on the IPsec IKEv2 protocol. So that individuals can use the Internet to access server-side resources and websites through the VPN securely, whether they are at home or abroad.

What we need :
cloud server, pfSense software, StrongSwan APK installation package (Android smartphone), Windows 10 (dial-up connection), IOS/Mac OS (native support for IPsec VPN).

1. Log in to the console and purchase a cloud server containing the Pfsense image. After the server is generated, we can directly access the Pfsense console through the cloud server's IP.

2. Enter the login page of PfSense through the public address. Enter the default user name: admin, password: pfsense

3. Configure the certificate that the IPsec VPN will use:
Enter the main control panel: select system-> Cert.Manager

Select "CAs", then select "Add" in the lower right corner.

Create a certificate: select "Certificates". Then click the green button "Add" in the lower right corner:

Fill in the certificate-related information:
Select "Create an internal Certificate",
The description name can be named according to our preference, for example, "XRC VPN 2020".
For the issuing authority, please select the authority that was created in "CAs".
For the common name, it is also named by our preference, for instance: www.xrcloud.com.
Afterward, select "Server Certificate."
Select the IP Address for the available name, and then fill in the public network address corresponding to our cloud server.

After saving it, we can view the certificate that we just create, and we can export the certificate to .Crt and .P12 formats.

4. Create IPSec VPN:

Click "VPN" and select "IPsec".

Please select ”Mobile Clients”

Select "Enable IPsec Mobile Client Support".
Select "Local Database"
Select "System"

Select "Provide a Virtual IP Address to clients", and then configure the internal network address according to our preference. The example configuration is "172.25.53.0", and the following mask selects "24".

Afterward, configure the DNS, fill in the DNS provided from the cloud service provider, or we can also configure the public DNS, for instance, 1.2.4.8, or 8.8.8.8. Finally, save the results. Thus the Mobile part is configured, and this will leads us to the next step, which we will need to enter the IPSec Tunnel configuration.

Configure "IPSec Tunnels" then select "IKEv2" and select IPv4 or "Both"
Please remember to choose the authentication method "EAP-MSchapv2"
For my identifier, select "IP Address" and then enter the cloud server's public network address, which is consistent with the public network address in the previous certificate.
Select "3DES", "SHA1", "2(1024bit)" for message encryption.
NAT select to open "FORCE".
MOBIKE enable "ENABLE"

Save the configuration.

Let us start to enter the configuration "P2" phase.
Select "Show Phase 2 Entries", click the green button "Add P2" in the lower right corner to enter configuration P2.
Select "IPv4", Local Network select "Network", address configuration "0.0.0.0", mask configuration "0", protocol selection "ESP", check "3DES", check "SHA1", PFS selection"2 (1024bit)” As a result, the P2 stage is configured, and the final step is to configure the user.

For configuring the users to enter "Pre Shared Keys", select the green button "Add" in the lower right corner
For Configure Identifier, please fill in our IPsec IKEv2 user name, the instance configuration is abcd@xrcloud.com, the encryption method is "EAP", the shared key is entered in a combination of letters with a higher security level, and the configuration here is "dfeijfiejif8! 829", this is the client's password. Finally, save the information above in order to complete the server configuration.

The VPN configuration is now complete, and we need to configure the firewall's inbound and outbound rules.
Please select Firewalls->Rules->IPsec, and select "ADD". Then a configuration page pops up.
Please Select:
Action option configuration "Pass";
Interface option is configured as "IPsec";
The Address Family option is configured as "IPv4+IPv6";
Both Source and Destination options are configured as "Any"
Finally select "Save"
The above completes the configuration of pfsense's IPsec rules.

Finally, we will need to configure the firewall's WAN port rules to release the ports used by the IPsec service.
Please select Firewalls->Rules->WAN, and then we choose "ADD". Then a configuration page pops up.
We select
Action option configuration "Pass";
Interface option is configured as "IPsec";
The Address Family option is configured as "IPv4+IPv6";
Protocol configuration is "TCP/UDP";
Source configuration is "Any";
The destination is configured as "any"
Destination Port Range select "IPsec NAT-T(4500)"
Finally select "Save"
The actions above will release Port 4500

Next, we configure the release of Port 500. As above, Firewalls->Rules->WAN, then we select "ADD". Then a configuration page pops up.
We select :
Action option configuration "Pass";
Interface option is configured as "IPsec";
The Address Family option is configured as "IPv4+IPv6";
Protocol configuration is "TCP/UDP";
Source configuration is "Any";
The destination is configured as "any"
Destination Port Range select "ISAKMP(500)"
Finally select "Save"
This will release Port 500

We have completed the server configuration of the entire IPsec IKEv2 VPN;
For the next article, we will introduce the client configuration, which includes:
-iPhone/Mac OS client
-StrongSwan Android Client
-Configure Windows client

Stay tuned for the updates !!

If you have any questions, please contact us at support@xrcloud.net or submit a support case.

87 comments

  1. Seo-bro rox

    Полноценное продвижение сайтов в ТОП 10 по Москве и России от [url=https://seo-bro.ru/]https://seo-bro.ru/[/url] (https://seo-bro.ru/) - Услуги по раскрутке сайтов в Яндекс, Google от частного SEO специалиста с кейсами!

    [url=https://seo-bro.ru/]Продвижение сайтов москва и московская область[/url] по низким ценам!

  2. Balashiha-evakuator

    Как можно заказать эвакуатор в Москве?

    Тут точно можно [url=https://balashiha-evakuator.ru/]https://balashiha-evakuator.ru/[/url] заказать эвакуатор! У них большой паркинг машин и разнооразные тарифы по Москве и московской области!

    [url=https://balashiha-evakuator.ru/]Эвакуатор вызов дешево стоимость в москве и области[/url] по низким ценам!

  3. Loans For Bad Credit

    [url=http://paydayloansapp.com/]guaranteed payday loans[/url] [url=http://iwebcash.com/]loans bad credit[/url]

  4. Cash Advance

    [url=https://lendingsum.com/]instant payday[/url]

  5. Evakuator PHONA

    Нужна помощь, где! можно заказать эвакуатор в Москве?

    Уверен, что здесь можно [url=https://evacuator-2000.ru/]https://evacuator-2000.ru/[/url] заказать эвакуатор! У них большой паркинг машин и разнооразные тарифы!

    [url=https://evacuator-2000.ru/]вывоз машины на эвакуаторе из страны[/url]

  6. Evacuator82 PHONA

    Нужна помощь, где! можно заказать эвакуатор в Москве?

    Здесь точно можно [url=https://evacuator82.ru/]https://evacuator82.ru/[/url] заказать эвакуатор! У них большой паркинг машин и разнооразные тарифы по Москве и московской области!

    [url=https://evacuator82.ru/]Заказать эвакуатор в северном бутово дешево[/url] по низким ценам!

  7. Evakuatoronline

    Где можно заказать автоэвакуатор в Москве?

    Однозначно стоит здесь [url=https://evakuatoronline.ru/]https://evakuatoronline.ru/[/url] заказать эвакуатор! У них большой паркинг машин и разнооразные тарифы!

    [url=https://evakuatoronline.ru/]Эвакуатор в москве подача за 20 заказать недорого[/url] по низким ценам!

  8. Quick Loan

    [url=https://lendingm.com/]payday loans guaranteed acceptance[/url]

  9. Podolsk-evacuators

    Подскажите, где можно заказать автоэвакуатор в Москве?

    Уверен, что здесь можно [url=https://podolsk-evacuators.ru/]https://podolsk-evacuators.ru/[/url] заказать эвакуатор! У них большой паркинг машин и разнооразные тарифы!

    [url=https://podolsk-evacuators.ru/]Услуга эвакуатора дешево ботанический сад стоимость[/url] по низким ценам!

  10. Online Payday Loans

    [url=http://fayecash.com/]ace cash[/url]

  11. Online Payday Loan

    [url=http://paydaymay.com/]tribal loans online[/url]

  12. Online Payday Loans

    [url=https://cashcra.com/]loans in california[/url]

  13. Direct Lenders

    [url=https://btrlending.com/]no fuss payday loans[/url] [url=https://lendingsna.com/]direct lender installment loans[/url]

  14. Getting A Loan

    [url=http://loansaxis.com/]loans personal loans[/url]

  15. A Payday Loan

    [url=http://cashadvancet.com/]personal loans unsecured[/url]

  16. Online Payday Loans

    [url=https://fayecash.com/]personal loans online approval[/url]

  17. Quick Loan

    [url=http://personalloanstag.com/]loans on line[/url] [url=http://lendingm.com/]need cash now[/url]

  18. Speedy Cash

    [url=https://personalloansapr.com/]loan site[/url]

  19. Get A Loan

    [url=http://cashadvancet.com/]take out a loan[/url] [url=http://instnloans.com/]cash advance payday loans online[/url]

  20. https://main7.net/

    With low mail-open rates I wouldn’t think it was effective. Tweet seems like a cool idea.How’d you do the magic – finding twitter handle of people who comment and all that?
    Btw I learned another gem from you – you tweeted letting me know you left a response on my comment. And sort of solved my problem – I used to send individual mails to my readers letting them know I responded to their comment on my blog.
    카지노사이트

  21. https://liveone9.com/

    With low mail-open rates I wouldn’t think it was effective. Tweet seems like a cool idea.How’d you do the magic – finding twitter handle of people who comment and all that?
    Btw I learned another gem from you – you tweeted letting me know you left a response on my comment. And sort of solved my problem – I used to send individual mails to my readers letting them know I responded to their comment on my blog.
    카지노사이트

  22. https://txt2080.com/pharaoh/

    Appreciate the tweet and kind words, Shiv. Hope you are having a great day!
    You’re writing a book? Awesome! I’d be thrilled if you included a paragraph to the post and linked to it in your book. (I wouldn’t mind being mentioned by name either. Haha.) Hope your readers find it useful!
    파라오카지노

  23. Getting A Loan

    [url=https://usupaydayloans.com/]new loan[/url] [url=https://cashcra.com/]payday loans for bad credit[/url]

  24. Loan

    [url=http://personalloansapr.com/]lending com[/url] [url=http://cashsudo.com/]payday loan chicago[/url]

  25. Speedy Cash

    [url=https://personalloanstag.com/]loan without checking account[/url]

  26. Amyabism

    [url=http://furosemidepills.com/]furosemide buy[/url]

  27. Kiaabism

    [url=http://cialisfp.com/]cialis rx[/url]

  28. Get A Loan

    [url=https://yotalending.com/]loan fast cash[/url] [url=https://cashsudo.com/]credit loans[/url]

  29. Lisaabism

    [url=https://synthroidforsale.com/]canadian pharmacy synthroid[/url]

  30. Payday Loan Online

    [url=http://loansaxis.com/]personal loan interest rates[/url] [url=http://paydayadloans.com/]instant loans online[/url]

  31. Jasonabism

    [url=http://cialiscaps.com/]tadalafil buy online[/url] [url=http://propranololsale.com/]propranolol price in india[/url] [url=http://modafiniltabs.com/]how to get modafinil in usa[/url] [url=http://cialisoral.com/]can you buy cialis online from canada[/url] [url=http://genericpropranolol.com/]buy propranolol australia[/url] [url=http://cialisxs.com/]cialis 5mg australia[/url] [url=http://prozacflxt.com/]where to get prozac[/url] [url=http://lasixwpill.com/]how to get furosemide[/url] [url=http://pharmacytwo.com/]canadian pharmacy no prescription needed[/url] [url=http://abbspharm.com/]ciprofloxacin buy online[/url]

  32. Speedycash

    [url=https://cashcra.com/]loan 365[/url]

  33. Easy Payday Loan

    [url=https://lendingsum.com/]installment loan companies[/url]

  34. Personal Loans

    [url=https://augloans.com/]payday loans houston tx[/url]

  35. Kiaabism

    [url=http://cialisoral.com/]cialis usa[/url]

  36. Speedy Cash

    [url=https://lendingsum.com/]loans for bad credit uk[/url]

  37. Paydayloan

    [url=http://ilendingeasy.com/]loans in ontario[/url]

  38. Cash Advance

    [url=http://ilendingeasy.com/]loans with bankruptcy[/url] [url=http://pidloans.com/]cash loans no credit[/url]

  39. WilliamUteno

    Нужна помощь, где! можно отремонтировать робот-пылесос HOBOT?

    Здесь точно можно [url=https://irobot-tbk.ru/]https://irobot-tbk.ru/[/url] (https://irobot-tbk.ru/) отремонтировать Ваш сломанный робот-пылесос!

    [url=https://irobot-tbk.ru/]Ремонт роботов пылесосов panda в москве[/url] по низким ценам!

  40. Lisaabism

    [url=https://xsviagra.com/]buy viagra with paypal[/url]

  41. Next-remont Uteno

    Подскажите, где можно отремонтировать робот-пылесос PANDA!TEFAL?

    Здесь точно можно [url=https://next-remont.ru/]https://next-remont.ru/[/url] отремонтировать Ваш поломанный робот-пылесос!

    [url=https://next-remont.ru/]Где отремонтировать моющий робот пылесос[/url] по низким ценам!

  42. Speedy Cash

    [url=http://personalloansapr.com/]quick cash loans no credit check[/url]

  43. Payday Loan Online

    [url=http://lendingm.com/]online payday loan instant approval[/url] [url=http://sanlending.com/]personal loans for debt consolidation[/url]

  44. Markabism

    [url=https://viagracialistabs.com/]viagra 5343[/url] [url=https://cheaphydroxychloroquine.com/]average cost of plaquenil[/url] [url=https://cialisrtab.com/]purchase cialis 10mg[/url] [url=https://viagracialisale.com/]price of 100mg viagra[/url] [url=https://viagraar.com/]best pharmacy prices for viagra[/url] [url=https://genericcialisviagra.com/]sildenafil products[/url] [url=https://phenerganxl.com/]phenergan uk online[/url]

  45. Spotloan

    [url=http://qrcashadvance.com/]online installment loans[/url]

  46. Payday Loans

    [url=http://lendingsna.com/]usa cash loans[/url]

  47. Denabism

    [url=http://tdacialis.com/]buy daily cialis online[/url] [url=http://buycialisviagra.com/]cialis pills in canada[/url] [url=http://amoxicillinworx.com/]amoxicillin 125 mg price[/url] [url=http://xsviagra.com/]viagra pills generic brand[/url] [url=http://abbspharm.com/]online pharmacy cipro[/url]

  48. Markabism

    [url=https://viagrawcialis.com/]buy female viagra online canada[/url] [url=https://buycialisviagra.com/]cheapest tadalafil india[/url] [url=https://modafiniltabs.com/]where can i buy provigil[/url]

  49. Kiaabism

    [url=http://viagracialispills.com/]cialis 2.5 daily[/url]

  50. Online Loans

    [url=http://liccash.com/]really bad credit loans[/url]

  51. Lisaabism

    [url=https://cialisfp.com/]tadalafil 10 mg tablet[/url]

  52. Amyabism

    [url=http://viagasi.com/]ordering viagra from india[/url]

  53. Amyabism

    [url=http://tmcialis.com/]tadalafil 100mg price[/url]

  54. Pay Day Loan

    [url=https://steplending.com/]cash installment loans online[/url]

  55. Loans For Bad Credit

    [url=http://liccash.com/]loan today[/url] [url=http://ispcash.com/]installment loans guaranteed[/url]

  56. Pay Day Loans

    [url=https://primecashone.com/]loan products[/url] [url=https://advpaydayloans.com/]loans to pay off credit cards[/url]

  57. Kiaabism

    [url=http://pharmacyfive.com/]polish pharmacy online uk[/url]

  58. Paydayloan

    [url=https://reeseloans.com/]eloans[/url]

  59. Amyabism

    [url=http://viagraar.com/]female viagra singapore[/url]

  60. Jasonabism

    [url=http://prozacflxt.com/]fluoxetine 10 mg tablet uk[/url] [url=http://viagrandcialis.com/]online viagra order india[/url] [url=http://tdacialis.com/]can you buy cialis safely online[/url] [url=http://azithromycinzith.com/]z pack zithromax[/url] [url=http://cialisoral.com/]cheapest tadalafil 5mg[/url] [url=http://tabspluscaps.com/]how can i get zoloft[/url] [url=http://intelpills.com/]0.1 tretinoin cream[/url] [url=http://viagraefft.com/]viagra 100 mg canada[/url] [url=http://augmentinab.com/]buy augmentin 825 online no prescription[/url] [url=http://modafinilmedication.com/]buy provigil online south africa[/url]

  61. Payday Loan

    [url=https://uvacash.com/]loans personal loans[/url]

  62. Payday

    [url=http://signlending.com/]cash til payday[/url]

  63. Pay Day Loan

    [url=http://steplending.com/]ohio loan[/url]

  64. Getting A Loan

    [url=https://personalloansinstant.com/]bad credit cash advance[/url] [url=https://monroloans.com/]short time loans[/url]

  65. Judyabism

    [url=http://amoxicillinworx.com/]amoxicillin online no prescription[/url] [url=http://propranololsale.com/]propanolol 20 mg to buy without prescription[/url] [url=http://cialisaid.com/]buy brand name cialis[/url] [url=http://viagasi.com/]us online pharmacy generic viagra[/url] [url=http://duoviagra.com/]viagra 88[/url] [url=http://cialice.com/]generic cialis 2018 usa[/url] [url=http://viagracialisale.com/]real cialis canada[/url] [url=http://genericpropranolol.com/]propranolol tablets 20 mg[/url] [url=http://viagrautab.com/]sildenafil 48 tabs[/url] [url=http://imegamed.com/]retin-a cheap[/url]

  66. Instant Online Loans

    [url=https://amoslending.com/]payday loan guaranteed[/url]

  67. Lisaabism

    [url=https://phenerganxl.com/]buy phenergan 25mg uk[/url]

  68. Personal Loans

    [url=https://steplending.com/]lenders for bad credit[/url]

  69. Payday Loan Online

    [url=http://polalending.com/]best payday loan lender[/url]

  70. Pay Day Loans

    [url=http://altcashadvance.com/]payday loan apr[/url] [url=http://personalloansinstant.com/]payday express[/url]

  71. Money Loan

    [url=http://lettocash.com/]rapid cash[/url]

  72. Maryabism

    [url=https://amoxicillinworx.com/]amoxicillin cheapest price[/url] [url=https://cialisxr.com/]cheap 10 mg tadalafil[/url] [url=https://furosemidepills.com/]lasix online uk[/url] [url=https://intelpills.com/]tretinoin 0.1 cost[/url] [url=https://lasixwpill.com/]furosemide 20 mg tablet cost[/url] [url=https://tospharmacy.com/]cheapest pharmacy prescription drugs[/url] [url=https://cialisytab.com/]can i buy cialis in mexico[/url] [url=https://cialisoz.com/]us tadalafil[/url] [url=https://pharmacyfive.com/]online pharmacy uk[/url] [url=https://viagracialispills.com/]viagra pro[/url]

  73. Online Loan

    [url=http://steplending.com/]easy online loans[/url]

  74. perpect post!!Hello.This article was really remarkable, especially because I was investigating for thoughts on this matter last Saturday.

  75. Alanabism

    [url=http://imegamed.com/]retin a 0.01 buy[/url] [url=http://cialisplusviagra.com/]tadalafil canada 20mg[/url] [url=http://pharmacytwo.com/]india pharmacy mail order[/url] [url=http://viagracialissale.com/]viagra united states[/url] [url=http://tdacialis.com/]buy cialis in nz[/url] [url=http://tospharmacy.com/]top 10 pharmacies in india[/url] [url=http://xsviagra.com/]buy viagra australia[/url] [url=http://cialisfp.com/]cialis daily uk[/url] [url=http://viagracialisale.com/]tadalafil chewable tablets 20 mg[/url] [url=http://brandhydroxychloroquine.com/]buy plaquenil uk[/url]

  76. Fastest Payday Loan

    [url=http://primecashone.com/]instant payday loan[/url]

  77. greate !!!very good post story!! blog!!!Bloghopping is really my forte and i like to visit blogs,

  78. Carlabism

    [url=http://viagraspi.com/]where can i buy viagra in usa[/url] [url=http://tospharmacy.com/]reputable online pharmacy no prescription[/url] [url=http://duoviagra.com/]pinkviagraforwomen[/url] [url=http://cheaphydroxychloroquine.com/]plaquenil for arthritis[/url] [url=http://cialisplusviagra.com/]buy generic cialis india[/url]

  79. Spotloan

    [url=https://loansset.com/]pay day loan[/url]

  80. A Payday Loan

    [url=https://xfastmoney.com/]bad credit loan[/url]

  81. Carlabism

    [url=http://tdacialis.com/]average cost of cialis for daily use[/url] [url=http://prednisonepharm.com/]deltasone 10 mg price[/url] [url=http://buycialisviagra.com/]viagra pharmacy cost[/url] [url=http://synthroidforsale.com/]synthroid 60 mg[/url] [url=http://cialiscaps.com/]cost of cialis 5mg[/url]

  82. Best Online Loans

    [url=http://smallloanseasy.com/]loan programs[/url] [url=http://altcashadvance.com/]cash advance network[/url]

  83. Payday Loans

    [url=http://advpaydayloans.com/]no faxing payday loan[/url]

  84. Kiaabism

    [url=http://synthroidforsale.com/]synthroid from india[/url]

  85. Direct Lenders

    [url=https://primecashone.com/]loans for bad credit[/url]

  86. Eyeabism

    [url=http://augmentinab.com/]generic augmentin 875 cost[/url] [url=http://modafiniltabs.com/]provigil price canada[/url] [url=http://tabspluscaps.com/]zoloft 50 mg price in india[/url] [url=http://cialisxr.com/]buy cialis 5mg canada[/url] [url=http://cialisoral.com/]cialis usa[/url] [url=http://prozacflxt.com/]fluoxetine 20 mg price uk[/url] [url=http://cialisoviagra.com/]viagra without prescription[/url] [url=http://cialisoz.com/]canadian cialis 20mg[/url] [url=http://viagraar.com/]viagra for sale online[/url] [url=http://abbspharm.com/]ciprofloxacin canadian pharmacy[/url]

  87. Instant Online Loans

    [url=https://paydayad.com/]loan for 5000[/url]

Comment

Your email address will not be disclosed. The required fields are marked with*.

Related recommendation

No related articles!

微信扫一扫,分享到朋友圈

How To Set FREE VPN on XRCLOUD ECS?