• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Routes

Scheduled Pinned Locked Moved IPsec
5 Posts 2 Posters 1.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F Offline
    froussy
    last edited by Jul 30, 2016, 12:56 PM

    Good morning,

    After hours on the phone with fortinet, I was able to manage to have a pfsense box to work relatively perfectly with a Fortigate Network, built of 10 fortigate devices.

    So now, from the pfsense network, all traffic get on the internet, and IPSEC traffic get to the tunnel as it should (one phase 1 with 11 phase 2)

    All my PC, IOS and Android devices are able to access resources over the ipsec tunnel properly.

    As that point, the pfsense box itself cant send notification to an smtp server in the ipsec tunnel.  To have it work, I have to add a static route.

    But when I do that, my android's devices cant access internet/ipsec tunnels anymore.  PC and IOS can..

    the only way to have my android devices work again, is to disable the route..

    Any idea?

    Thanks

    1 Reply Last reply Reply Quote 0
    • J Offline
      jimp Rebel Alliance Developer Netgate
      last edited by Aug 4, 2016, 5:48 PM

      Assuming you don't need ICMP redirects from the firewall for anything else on LAN, you could try this:

      Add a floating rule to block outbound on LAN, quick checked, protocol=ICMP type=redirect.

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • F Offline
        froussy
        last edited by Aug 4, 2016, 8:11 PM

        doesnt work :(

        1 Reply Last reply Reply Quote 0
        • F Offline
          froussy
          last edited by Aug 6, 2016, 2:58 PM

          To make simple.. I have found that doc from pfSense doc site:

          https://doc.pfsense.org/index.php/Why_can%27t_I_query_SNMP%2C_use_syslog%2C_NTP%2C_or_other_services_initiated_by_the_firewall_itself_over_IPsec_VPN%3F

          I did exactly that.. but, as soon I do it, I get the following:

          -ONLY Android devices cant access Remote sites (over ipsec) resources
          -Anything else work (IOS,PC.. etc etc)

          Frank

          1 Reply Last reply Reply Quote 0
          • F Offline
            froussy
            last edited by Aug 8, 2016, 8:17 PM

            I finally fixed it using:

            http://phil.lavin.me.uk/2013/04/how-to-disable-icmp-redirects-in-pfsense/

            Thanks

            1 Reply Last reply Reply Quote 0
            3 out of 5
            • First post
              3/5
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
              This community forum collects and processes your personal information.
              consent.not_received