Behavior is different with pfSense-1.2-BETA-1-Embedded-128-MB.img.gz, but still has difficulties.
No problem without the Hi/Fn card.
With the card, the behavior is complicated and, unfortunately, inconsistent.
The data here represents approximately 15 power-cycle iterations.
Sometimes racoon is restarted. Not entirely clear about the timing. Consistently racoon and a working tunnel is available immediately after the console message
Configuring IPsec VPN... done
appears. However, sometimes racoon is restarted a second time. It is not clear under what circumstances but 3 times (out of 15) the console never finished loading. Twice the last message on the console was:
Starting /usr/local/etc/rc.d/*.sh...done.
Once it got a little further but still hung at:
Bootup complete
FreeBSD/i386 (staff1.vineyardtransit.com) (console)
*** Welcome to pfSense 1.2-BETA-1-embedded on staff1 ***
Once the console finished loading; but shortly after it was done, racoon was restarted. Another time racoon restarted almost 5 minutes after boot was 'complete.'
At all 5 of these occasions racoon reports that it received a signal 15 and a few seconds later it is restarted. Prior to this second start-up the IPSec tunnel is fine. After this second start-up phase 2 negotiation fails even tho a phase 1 SA is achieved. As before, if I stop/start racoon manually (ssh works fine), all is well.
Since the Generating RRD Graphs section takes almost 4 minutes to load, this means that the IPSec is established and working for an appreciable period before it breaks.
Interestingly, without the Hi/Fn card, racoon is still restarted; however, it works when it comes back up.
Sorry this report is so chaotic.