configure
edit vpn ipsec
# Fase 1
set ike-group unifi key-exchange ikev2
set ike-group unifi lifetime 14400
set ike-group unifi proposal 1 dh-group 14
set ike-group unifi proposal 1 encryption aes128
set ike-group unifi proposal 1 hash sha1
# Fase 2
set esp-group unifi compression disable
set esp-group unifi lifetime 14400
set esp-group unifi mode tunnel
set esp-group unifi pfs dh-group14
set esp-group unifi proposal 1 encryption aes128
set esp-group unifi proposal 1 hash sha1
# IPSEC VPN
# ToDo
pkg install unifi5
Edit /etc/rc.conf:
unifi_enable="YES"
Keep in mind that Unifi uses the mongodb package, but run it by it's own, on a different port. So you don't have to start mongodb at boot time.
root@router:~# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 pppoe2
10.40.3.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
10.40.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1.1010
10.162.80.0 0.0.0.0 255.255.240.0 U 0 0 0 eth0.4
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
194.109.5.227 0.0.0.0 255.255.255.255 UH 0 0 0 pppoe2
213.75.112.0 10.162.80.1 255.255.248.0 UG 0 0 0 eth0.4