Site to Site VPN not connecting?

Question

I'm trying to use the Unifi controller's built in site-to-site IPSec VPN. I just got the public IP, so I set the whole thing up, hoping that one public IP would be enough to connect the two networks, but so far, nothing. I created the VPN on both sides, gave both sides the same name, and saved it. I can't ping hosts in the other network, so it's not connected, but there's also no status on the VPN. How do I tell what's going on? Should this even work?

Current setup

Posted Dec 1, 2023, 6:31 PM UTC

Sort by:

AutoModeratorMOD•2 yr. ago

Hello! Thanks for posting on r/Ubiquiti!

This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Please read and understand the rules in the sidebar, as posts and comments that violate them will be removed. Please put all off topic posts in the weekly off topic thread that is stickied to the top of the subreddit.

If you see people spreading misinformation, trying to mislead others, or other inappropriate behavior, please report it!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

PinsDrop•2 yr. ago

Are you talking about the Site Magic VPN? I only have 1 public IP and it worked for me. I only had it setup temporarily to test the feature. You configure the Site Magic VPN at https://unifi.ui.com/site-magic

Teh_Willy•2 yr. ago

To get past Starlink CGNAT you need to either use magic site to site or make the starlink side a Wireguard client of the site with a public IP.

Both options will require a UDR, UDM, UXG, or Unifi Express @ both sites. USG is currently not supported.

taevOP•2 yr. ago

Thank you for clarifying that. I assumed the USG would work for this.