interfaces { dummy dum0 { address 172.20.0.1/30 } ethernet eth0 { address 192.168.150.1/24 } } system { config-management { commit-revisions 100 } console { device ttyS0 { speed 115200 } } host-name vyos login { user vyos { authentication { encrypted-password $6$2Ta6TWHd/U$NmrX0x9kexCimeOcYK1MfhMpITF9ELxHcaBU/znBq.X2ukQOj61fVI2UYP/xBzP4QtiTcdkgs7WOQMHWsRymO/ plaintext-password "" } } } ntp { server time1.vyos.net { } server time2.vyos.net { } server time3.vyos.net { } } syslog { global { facility all { level info } facility protocols { level debug } } } } vpn { ipsec { esp-group MyESPGroup { proposal 1 { encryption aes128 hash sha1 } } ike-group MyIKEGroup { proposal 1 { dh-group 2 encryption aes128 hash sha1 } } ipsec-interfaces { interface eth0 } site-to-site { peer 192.168.150.2 { authentication { mode x509 x509 { ca-cert-file ovpn_test_ca.pem cert-file ovpn_test_server.pem key { file ovpn_test_server.key } } } default-esp-group MyESPGroup ike-group MyIKEGroup local-address 192.168.150.1 tunnel 0 { local { prefix 172.20.0.0/24 } remote { prefix 172.21.0.0/24 } } } peer 192.168.150.3 { authentication { mode rsa pre-shared-secret MYSECRETKEY rsa-key-name peer2 } default-esp-group MyESPGroup ike-group MyIKEGroup local-address 192.168.150.1 tunnel 0 { local { prefix 172.20.0.0/24 } remote { prefix 172.22.0.0/24 } } } } } rsa-keys { local-key { file /config/auth/ovpn_test_server.key } rsa-key-name peer2 { rsa-key 0sAwEAAbudt5WQZSW2plbixjpgx4yVN/WMHdYRIZhyypJWO4ujQ/UQS9j3oTBgV2+RLtQ0YQ7eocwIfkvJVUnnZVMyZ4asQMOarQgbQ5nFGliCcDOMtNXRxHlMsvmjLx4o6FWbGukwgoxsT2x915n0XMn4XJNNSIEQotxj2GWFhEfBSPHyOM++kODk0lkbE7mLeHMMFq02vQhoczzEPWxjUUoY3jywhmHMfb4PdAKLFyt9x40znmPCYh+NSMQmpBXtD3gjGtX62bgrqKuP3BJU44x1gLlv8rJAJ4SY74YKnFUZ8m5GSbnVapwPOrp65lJZFKOGs2XXjAp5leoR+wmSYyqbDJM= } } } // Warning: Do not remove the following line. // vyos-config-version: "bgp@1:broadcast-relay@1:cluster@1:config-management@1:conntrack@2:conntrack-sync@2:dhcp-relay@2:dhcp-server@5:dhcpv6-server@1:dns-forwarding@3:firewall@5:https@2:interfaces@22:ipoe-server@1:ipsec@6:isis@1:l2tp@3:lldp@1:mdns@1:nat@5:nat66@1:ntp@1:policy@1:pppoe-server@5:pptp@2:qos@1:quagga@9:rpki@1:salt@1:snmp@2:ssh@2:sstp@3:system@21:vrf@2:vrrp@2:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2:zone-policy@1" // Release version: 1.4-rolling-202106290839