Intro I needed to set up a set of VPNs from my home network to my Azure environments, which run OPNsense VNAs as firewalls. My home firewall, Ubiquiti USG-3, offers two options for s2s vpn, OpenVPN and IPSec. I’m far more familiar with IPSec, so that is what I chose. My USG-3 is managed by a CloudKey Gen2+ controller. While this makes the initial setup of an IPSec VPN pretty easy, it gives us a LOT less visibility into what’s going on, as well as far fewer settings and customization than what the USG-3 itself is capable of.