IPSec
Set up a secure site-to-site connection
By Jakub and 2 others3 authors6 articles
- How to set up an IPSec connectionCreating the IPSec Connector with the API and adding the Connector to SIMs.
- Can I ping public IPs with IPSec?Yes, but the NATing and routing has to happen on yours side of the IPSec connection.
- Can I debug the IPSec tunnel myself from the Onomondo app?No. Onomondo app does not offer debugging tools for IPSec yet.
- How is Dead Peer Detection (DPD) configured on Onomondo’s end?The connection is configured to restart upon dead peer detection, with a 10 second delay and a 30 second timeout.
- What are the IPSec phase 1 and phase 2 integrity algorithms supported by Onomondo?All algorithms listed in IKEv2 Cipher Suites are supported. It is up to you to decide which ones you want to use.
- Can we monitor a IPSec tunnel?We don’t provide an in-tunnel probe IP/URL. Use DPD, a private /32 you control, or probe one of your device IPs.