• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

PFsense 2.01 cisco anyconnect from lan to wan doesn't work

Scheduled Pinned Locked Moved Firewalling
8 Posts 3 Posters 4.9k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • P
    pbk8530
    last edited by Mar 15, 2013, 12:35 PM

    Hello,

    I am using pfsense on alix 1d3 and PPTP dialup in Austria with the MTU of 1460 settings…
    Why pfsense blocking the cisco anyconnect if I want to connect tot he company network from home?
    I try to set the firewall Firewall Optimization Options to conservative but this doesn't help.

    Is this because the MTU is set to 1460?

    KR

    Pbk

    1 Reply Last reply Reply Quote 0
    • P
      pbk8530
      last edited by Mar 19, 2013, 7:37 AM

      Hello,

      is there no Firewall Expert out there who knows to setup the PFsense for VPN pass through?
      The old PFsense 1.23 VPN pass through works, and also there is no hacking for the WAN PPTP needed…

      KR

      PbK

      1 Reply Last reply Reply Quote 0
      • P
        pbk8530
        last edited by Mar 25, 2013, 9:17 AM

        push…

        1 Reply Last reply Reply Quote 0
        • P
          pbk8530
          last edited by Apr 4, 2013, 12:49 PM

          ppppuuuuuusssssshhhhhhh!!!!

          1 Reply Last reply Reply Quote 0
          • R
            rjcrowder
            last edited by Apr 4, 2013, 4:15 PM

            I'm using Cisco Anyconnect to connect to my work VPN with no issue… didn't do anything special to allow it. What debugging steps did you go through? How do you know that pfsense is blocking the connection?

            1 Reply Last reply Reply Quote 0
            • J
              johnpoz LAYER 8 Global Moderator
              last edited by Apr 5, 2013, 11:25 AM Apr 4, 2013, 7:47 PM

              So what is not working the TLS portion or the DTLS portion.  There should really be nothing to do on pfsense to allow this traffic, unless you have modified your outbound rules.

              I do believe your going to make a connection over tcp 443, and then it will try and switch to DTLS which is UDP over 443.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • P
                pbk8530
                last edited by Apr 5, 2013, 7:42 AM Apr 5, 2013, 7:21 AM

                Hello,

                I use PfSense 2.01 on an Alix hardware.

                I use all three hardware interfaces and the wifi module, the wifi setup is done that it is using the same IP range for lan and wifi (bridged interface).

                How i debug it –> when I use the mobile hotspot of my smartphone cisco anyconnect is connecting and the connection is up as long as I want it, but through the PfSense the connection dropped after one second, so the client reconnect and the connection dropped again and again....

                There is no specific outbound rule --> what exactly to you mean?

                KR

                PbK

                1 Reply Last reply Reply Quote 0
                • J
                  johnpoz LAYER 8 Global Moderator
                  last edited by Apr 5, 2013, 11:27 AM

                  And again - what type of connection are you making..  Anyconnect should work over just a TCP 433 connection just like any website, it will try and use DTLS (udp) – is this where its failing?

                  Do you see anything in the firewall log about something blocked - what does the anyconnect client say??

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                    This community forum collects and processes your personal information.
                    consent.not_received