Ipsec not working with the last snapshot!

PacDemon

I have the same Problem. I switch back to pfSense-Full-Update-1.2.1-RC1-20080817-2330.tgz, same problem.
But before i upgrade it works under this version pfSense-Full-Update-1.2.1-RC1-20080817-2330.tgz.

PD

heiko

I have had contact with a developer from pfsense and he will take a look into the code…..

PacDemon

Oh I hope they can fix it fast. I have in the moment one office offline :(

PD

heiko

Probably this week a fix is available…..

PacDemon

Oh, I hope it really. In the moment it is no new snapshot :(

Rgds,
PD

heiko

Heh, 1.21 is beta, not a release…. if you can make a downgrade to 1.2 release, make it...

PacDemon

Yea, i know.
Do you know that is possible to downgrade to 1.2 over the Firmaware update or I have to install new over a Image?

PD

heiko

I have not tested a downgrade. At the moment i haven´t new informations about the ipsec fix…...

First, i would make a downgrade to 1.2, if it fails you must install from a fresh 1.2 image.... :-\

Regards
heiko

If i have new informations, i post it as soon as possible...

PacDemon

Oh oh, the Hardware is 600 km form here. Hmm, i think i test it first on a another hardware if it is possible to downgrade from 1.2.1 to 1.2 back.

I let you know this.

PD

heiko

please wait, i will test it also…

Results: I have made a downgrade to 1.2 and the ipsec and all the other things runs as it should, but after the downgrade you must delete the SPD´s and then click save on the ipsec tunnel tab.... that´s it.

Regards
heiko

PacDemon

Ohoh,
be not work, it killed the complete box. No I sent out a new one out to our office.

Hope they fix it in the 1.2.1 version.

Greats,
PD

heiko

oh, very angrily….

databeestje

I have just committed a fix into CVS which should fix this for PPPoE or PPtP WAN connections.

Please test!

I also need confirmation that DHCP, Static IPs and CARP interfaces still work!

heiko

I will test it! Thanks Seth.

Regards
Heiko

databeestje

Any result? Does the silence mean it works now?

heiko

Sorry Seth, dynamic side to static side with "enabled mobile option" works now!! :D

This is strange, i think:
racoon: INFO: received broken Microsoft ID: FRAGMENTATION….

but this is pfsense to pfsense, any ideas?

Next week i will test "carp"!

Regards
heiko