Ipsec passthrough/WIFI calling not working only when the firewall is a pfSense box
-
Hello all,
I am having a problem where Wi-Fi calling basically never establishes on any of my Wi-Fi networks controlled by my pfSense box,.
I have 2 WANs and plugged one of them into a cheapo Linksys router and confirmed that my ISP supports and does not break WI-FI calling in any way. I was able to break Wi-Fi calling by disabling IPsec passthrough, and functionality returned when re-enabling that function. I then took that AP/router and put it behind pfsense and it broke again.I have These rules in NAT as some have suggested and have even narrowed on Verizon's IP blocks for extra measure but it seems as if the fundamental concept of VPN and IPsec passthrough are broken/convoluted in pfSense.
Has anyone else found an actual solution to fixing this issue?
My main AP's are TPlink Wall 235's, and my test AP is Linksys E5400 - Both 802.11ac 1200 spec AP's, I have a cisco switch and then it goes straight into the pfsense box. The AP's shouldn't be doing anything to change the outcome so I believe this to be a pfSense issue.
Any help appreciated!
-
This post is deleted! -
Update: Wifi calling seems to work with no outbound nat rules other than the default enabled, however I can only get it to actually use it when I put the phone in a faraday cage that blocks cell, or airplane mode. I don't know if this is something specific with my carrier, or my Pixel 8 pro software. I did test with and s21 and it didn't use it until I did the airplane mode and enable wifi thing. Not sure if it is preferring LTE instead of wifi because of how strong our LTE is in our area, or if this is a cause of a misconfigured fire wall. Still having a bit of a head scratcher at this one, especially because I went into settings and told it to prefer wifi over LTE, but who knows.