@blackbinary Hey This is possible, but you must make changes to the PFsense configuration files (responder side) As a result of these changes, PFSense will create a config file (ipsec.conf) that will allow strongswan to accept connections from any ip address Here is an example of how it looks in practice after the changes In the settings section of Remote Gateway you enter "any" and the necessary config is ready [image: 1554120408570-c2a5f51c-aaa5-4e48-9629-6de183f1a0e5-image-resized.png] If you write me in the chat your email, I'll send you an email with all instructions

Hello Just noticed it breaks large packets of UDP :( hopefully we will get fix soon. https://redmine.pfsense.org/issues/7801

@Konstanti Ya, I can't tell you how many times I verified the IPSec settings Magically, the connection was established last night as I left it on while doing some other work. When I returned to have another look, the connection was made. I tried this current configuration multiple times to no avail, so I am baffled as to what the resolution was I'm booking a meeting with a guy at the other side to start pulling parts and pieces apart to determine the issue One thing I noticed is that the initial attempts to connect were using port 4500 and the established tunnel is on 500 (I have no firewall logs blocking this and I have rules on WAN in place explicitly allowing UDP 500/4500 and ESP. Perhaps their end isn't liking the 4500 (they told me they are good with the UDP 4500 mind you) Sort of feels like Cisco just not wanting to play nice in the sandbox with the other kids. I'll update with any resolution(s) or comments here

@Juan-Carlos-Gtz Hey You're only allowed TCP on the interface IPSEC Mex 2. Other protocols are prohibited. In order to use ping you need to enable ICMP.

[image: 1553357748255-pfs2.jpg] [image: 1553357756563-azurepfs.png]

Then post what you have because it most certainly does work.

Might be better to use FRR in place of OpenBGP.

Excellent questions. I will check when it happens again. I appreciate you replying so quickly. -Andrew G

Removed all config and re did all config on both pfsense and Cisco and it now works. Dont know why it works as I din't change any settings....