Creating an IPSec peer

The IPSec Peers submenu offers you the New option for adding connection partners for IPSec.

Go to VPN -> IPSec -> IPSec Peers-> New.

Enter a Description for the connection, e.g. Branch Office .
Enter the gateway IP address or DynDNS name of the connection partner, e.g. branchoffice.dyndns.org under Peer Address.
Under Peer ID leave Fully Qualified Domain Name (FQDN) and enter Branch Office .
Enter bintec as the shared password for the connection in Preshared Key.
Deselect the Default Route option.
Under Local IP Address enter 192.168.0.10 .
Under Route Entries click Add to add a new entry.
Under Remote IP Address enter the partner network to be reached, e.g. 192.168.1.0 and under Netmask enter 255.255.255.0
Press OK to confirm your entries.

Creating an IPSec peer automatically generates standard profiles for phase 1 and phase 2, which are changed in the following section to suit the requirements of this scenario.

	Note
	As you will use the certificates for your connection later, the complexity of the preshared keys is not important for this temporary connection.