Hi Maybe take a look at my post https://forum.pfsense.org/index.php?topic=104680.0 This my be related to your problem with Shewsoft Thanks

I've had the same issue (in 2.2.5), Azure tunnel seemed to be up, but no traffic. I think i have solved this by setting the PFS key group setting in the phase 2 configuration to Off. The tunnel has been up and functioning well for a week now. I'm not sure if this has any security implications though

@cmb: That's exactly what I said - the one with the xauth options is a mobile P1, the one without is a site to site P1. It's correct, you're trying to edit/create the wrong thing. Edit the mobile P1, or if you don't have one, go to the mobile clients tab and add one. Ah I found it. Seems that you can only get to it from another option and it isn't directly available right from that menu. have to add mobile=true to the url if you wanted to access P1 mobile directly.

Ok.  I hate replying to my own topic, but incase anyone else is having this problem, I thought I would update status… I found out it is indeed an IOS issue....  I was running IOS 9.0.2...  Updated to latest IOS 9.2 and it solved the problem.

I am having the same issue as you. Can you point me what exactly did you add in the Virtual IP network and the proxy arp?

@pforum: I could test that out. I would be the best as I see it right. However, we have sites on version 2.1.5-RELEASE as well as 2.2.2-RELEASE where this isn't happening at all. I don´t know about your versions, but here under the link is described what changes are done in IPSec exactly. New Features and Changes in pfSense 2.2.5

If you have a pfSense Gold Subscription I did a video of the IKEv2 remote access VPN a couple months back. It works fine when the wiki instructions are followed exactly.

"AES" is AES-CBC.

You don't route across IPsec. Just need to make sure the additional P2 matches, if IKEv1. For IKEv2, ASAs don't support multiple selectors in the same TS payload yet, so that won't work. We'll implement a workaround likely in 2.3 to accommodate that, as Cisco doesn't seem to be implementing that any time soon. https://redmine.pfsense.org/issues/4704

It was technically wrong to begin with, but racoon didn't care. It's noted in the upgrade guide. https://doc.pfsense.org/index.php/UpgradeGuide#Mobile_client_users.2C_verify_Local_Network

No one know why i can connect only one VPN at the same time ? Best regards