I have a strange problem with my IPsec VPN: I have 2 matched [hardware and software - 2.4.4 release p3] pfSense boxes at different locations. Each pfSense is a Firewall + DHCP server + Gateway for the local LAN. I have setup an IPsec tunnel between the two gateways, but while I can access both gateways from a local host, I can't connect to any remote hosts.

Additionally the local gateway can't ping the remote gateway.

  • Local host pings local gateway
  • Local host pings remote gateway
  • Local host cannot ping remote host
  • Local gateway cannot ping remote gateway

Local subnet: 192.168.10.0/24

Remote subnet: 192.168.9.0/24

Sitting at either location, I can access both gateways, but nothing else on the remote side.

Both gateways have the P1 and P2 settings exactly the same [apart from switching local and remote networks / gateways on the respective boxes]

Here are the P1 settings:

  • Key Exchange Version: IKEv2
  • Internet Protocol: Both (Dual Stack)
  • Interface: WAN [which is on a static IP]
  • Remote Gateway: Static Ip of remote Gateway

P2 Settings:

  • Mode: Tunnel IPv4
  • Local Network: 192.168.10.0/24 [this gets changed to .9.0 on the other box]
  • NAT/BINAT translation: none
  • Remote Network: 192.168.9.0/24 [this gets changed to .10.0 on the other box]

I tried disabling the firewall completely to see if that was the issue, but it had no effect.

7

1 Answer

The issue is sorted,

I had setup the IPsec firewall rules to go though the gateway on which IPsec was configured.

Once I changed the gateway settings to Default, it worked [almost] perfectly.

Now I can access some remote hosts, but not all.

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy