• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Question VPN Module for site-to-site connection

southy

Basic Pleskian
Dear everybody,

The VPN module in Plesk requires me to enter local & remote peer address for a VPN connection.
However what I want to do is not a machine-to-machine connection, but a site-to-site connection [or at least (Plesk-)machine-to-site].

It appears the Plesk VPN module GUI is just suited to create machine-to-machine connections, as it will not accept e.g. 10.0.0.0/16 as local or remote peer addresses.

That's unfortunate, as I aim to replace an existing machine (no plesk), where the tunnel ends in a Strongswan, which this is pretty easily defined in strongswan.conf:

Code:
conn xxxxxx
        dpdaction = restart
        left = 51.??.??.??
#       authby = psk
        leftcert = vpnHostCert.der
        leftid = siteconnect.xxxxx.xxx
        leftsubnet = 10.41.0.0/16

        right = 217.??.??.??
        rightid = name
        auto = start
        authby = psk
        keyexchange = ikev1
        rightsubnet = 10.41.0.0/16

Note that in strongswan, by setting "leftsubnet / rightsubnet", I define a site-to-stite connection.
Would I use "left / right" and set a IP instead of a network address, it would be a machine-to-machine connection.

How can I achieve this in Plesk?
Can I manually set this in a config file or via CLI, as it doesn't seem to work via GUI?

Apparently, the config files should be located in /usr/local/psa/var/modules/vpn/
However, there's no config file here; just a key file "vpn-key".

EDIT:
Oh, I see: the config files is only present when the connection has been activated - once it is deactivated, config files vanish. Well, so much about that.
Still leaves the question open on how to configure this in GUI - or if it's a good idea to manually change config files...

Has anyone and idea on how to do this?
 
Last edited:
Back
Top