Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSec routing problems

    Scheduled Pinned Locked Moved IPsec
    5 Posts 4 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      alex_lebbrom
      last edited by

      Hello everyone. The problem that I have is: I have 2 pfSense connected via IPSec in different places. I got up the tunnel without problems, however it is necessary that the PFSense1 traffic is routed through the PFSense2 to access internet.

      I used the steps in this link to create the tunnel. I have the same configuration but not working.

      https://doc.pfsense.org/index.php/Routing_internet_traffic_through_a_site-to-site_IPsec_tunnel

      However I can not get that Internet traffic is routed through IPSec.

      If someone could help me. Thank you

      Alexis Rondon

      1 Reply Last reply Reply Quote 0
      • R
        renegade
        last edited by

        Same Problem here but different conditions.
        After upgrading from 2.2.6 to 2.3 without changing Vpn settings my iOS 9.3.1 cannot access internet via vpn anymore.
        But what works now is that local dns resolution works!

        1 Reply Last reply Reply Quote 0
        • J
          JustMe
          last edited by

          It could be something simple like iOS not getting access to a DNS server, perhaps it is worth trying to tick the box 'Provide a DNS server list to clients ' in VPN
          / IPsec / Mobile Clients towards the end of the page, and entering your routers IP as value for Server#1 (? 192.168.1.1).

          Failing that it could be useful to check the firewall log for entries of the remotes IP, perhaps a new rule has been added / enforced that prevents the remote destination to get access to the WAN interface?

          1 Reply Last reply Reply Quote 0
          • C
            cmb
            last edited by

            It should behave the same way. What's your "local network" on your mobile IPsec P2? Needs to be 0.0.0.0/0. My iOS devices still work the same there as in 2.2.6.

            1 Reply Last reply Reply Quote 0
            • R
              renegade
              last edited by

              thank you cmb. that works for me. was set to "LAN" before.
              i am really happy now!!

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.