Changing an IPSEC endpoint's IP address
Jump to navigation
Jump to search
- Edit /usr/local/etc/racoon/ipsec.conf and change the IP in the SPD lines that are relevant.
- Edit /usr/local/etc/racoon/psk.conf and change the IP that the pre-shared-key belongs to.
- Edit /etc/pf.conf and update vpn-clients table with the new IP.
- Reload SPDs: 'setkey -F ; setkey -f /usr/local/etc/racoon/ipsec.conf'
- Restart racoon: '/usr/local/etc/rc.d/racoon restart'
- Watch logfile: 'tail -f /var/log/security'