Ipsec doesn't work anymore ( i386 full )

mxx

Hi jimp,

thanks for your reply.
I can't say for sure, will need to check the serveraid status manually. But I can only do this by rebooting the machine. However I would have gotten an alert when one of the disks have failed.. it's raid1 + 1 hot spare

However isn't it strange that it doesn't work on snapshots 21 and 23, but 19 is ok?
It worked on 19th, it stopped working on 23rd, it didn't work on 21st either and after downgrading again to 19th it worked again..

mxx

Does noone else have this problem?

I will download another copy of the config and restore that. Maybe the message goes away and was because my previously downloaded config has been corrupted..

mxx

Update: I'm absolutely sure that no disk has failed.
Should I do a filesystem check?

rpsmith

I'm running nanobsd on a net5501 that I update daily and have several active IPsec tunnels and have zero IPsec problems (other than the "Automatically ping host" doesn't always start the tunnel).

Roy…

mxx

Thank you,

I also never had any problems with ipsec since May/2010.. strange

jimp

There may be some extra error checking in the newer snapshots that is flagging something in the config. If you don't mind sending me a copy of your config I can have a look, jimp (at) pfsense [dot] org.

mxx

Thank you very much jimp.

I'll send you the config

jimp

Well it passed xmllint so there isn't anything obviously wrong with the one you sent.

Was this the config from the 19th or after it upgraded?

mxx

This was the config before I upgraded to the snapshot from 23rd…
I also didn't see that warning in the gui before (after boot) "pfSense is restoring the configuration".
This first appeared after the upgrade to 23rd and never went away, even after downgrading to 19th again..

mxx

I took another backup of the config which I then simply restored and don't get this alert anymore (on bootup). It's just like before my try to upgrade to something newer than 19th.

However I get many of those at boot time:
Jan 25 20:34:32 php: : WARNING! Configuration written on bootup. This can cause stray openvpn and load balancing items in config.xml
But I remember to have read somewhere else on the forums that this isn't something to worry about if I'm not mistaken?

I'll give it another try tomorrow (upgrading to latest then).

mxx

Okay upgrading to Wed Jan 26 09:44:03 EST 2011 went smoothly and I have no trouble with ipsec.