Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSec VPN packet loss

    IPsec
    2
    3
    5.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • X
      xibalba
      last edited by

      Hello all,
      I just installed two fresh copies of pfSense. One at my location and another at my friend's location. We added the IPSec VPN Tunnels and left all the defaults, with the exceptions of

      my subnet 192.168.1.0/24
      his subnet 192.168.2.0/24

      on my end, for the remote gateway i set the WAN IP address of his pfSense box.
      under phase 1: encryption is 3des, hash, md5, dh key group 2,
      The identifier under phase 1 is set as "My IP Address" (left blank)
      Authentication Method : preshared-key.

      when i ping -t 192.168.2.1 (his router) from my computer I am able to get icmp replies back from his router, however it is very intermittent (around 60% packet loss). There is nothing else running through either of our links and bandwidth shaping is disabled. Any suggestions?
      Thanks in advance.

      1 Reply Last reply Reply Quote 0
      • H
        hoba
        last edited by

        Lower the MTUs at both WANs at interfaces>WAN. Start with something like 1300. If this makes the problem go away raise the MTUs again until it breaks again and go back a step. Also make sure you are on the latest version.

        1 Reply Last reply Reply Quote 0
        • X
          xibalba
          last edited by

          hoba, thanks for the reply. it turned out to be faulty network card on the WAN interface. Now the ipsec vpn is working flawlessly. great off-shoot of FreeBSD/M0n0wall you guys have created.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.