Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    One Way Traffic on Site-to-Site IPSEC (Both pfSense Endpoints)

    Scheduled Pinned Locked Moved IPsec
    2 Posts 2 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      arobar
      last edited by

      I've setup a site-to-site IPSEC VPN using pfSense at both endpoints. The tunnel is established, but traffic only seems to flow one-way.

      Setup is like this:

      OfficeA  –----->(internet)------->  OfficeB
      192.168.0.0/24                            192.168.2.0/24

      The tunnel is setup on OfficeA. From any PC on the OfficeA LAN I can access resources on the OfficeB LAN. But from the OfficeB LAN, I can't see any of the OfficeA resources. In testing, I've setup firewall rules on the IPSEC interface to allow all traffic from all sources, but the result was the same.

      Things that may be of consequence:

      • OfficeA is using a dynamic public IP

      • OfficeB is using a dual-WAN setup

      I would appreciate any ideas. Thanks!

      1 Reply Last reply Reply Quote 0
      • J
        jcpolo
        last edited by

        I have run into this same issue on my 6 site vpn setup I can access all of the sites from my main location and from some of the sites I cannot access the main site..

        I only have pfsense at the main location so I believe its something to do with firewall rules.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.