Problem with ping
-
Hi All, I've a 2 node Ipsec site to site VPN installation with 2 2.1.4-RELEASE (i386) PfSense, Node A and Node B.
I've the follow problem:
if I send from any pc behind node A a ping to any pc behind node B, I recieved a response.
if I send from any pc behind node B a ping to any pc behind node A, I don't recieved a response.
Node B(public IP ..94.153 - LAN IP 172.16.0.190 ) to A(public IP ..94.152 - LAN IP 192.168.111.10)
No firewall active on any pcI collected these data:
From Node A to B (It Works)
WAN
11:22:37.388235 IP ..94.152 > ..94.153: ESP(spi=0x0f7a5e0f,seq=0x4ab), length 104
11:22:37.388698 IP ..94.153 > ..94.152: ESP(spi=0x09a0b256,seq=0x7f0), length 104
11:22:37.996815 IP ..94.152 > ..94.153: ESP(spi=0x0f7a5e0f,seq=0x4ac), length 152
11:22:37.999886 IP ..94.153 > ..94.152: ESP(spi=0x09a0b256,seq=0x7f1), length 152IPSEC
11:23:54.377521 (authentic,confidential): SPI 0x0f7a5e0f: IP 192.168.111.10 > 172.16.0.190: ICMP echo request, id 1, seq 1906, length 40
11:23:54.378142 (authentic,confidential): SPI 0x09a0b256: IP 172.16.0.190 > 192.168.111.10: ICMP echo reply, id 1, seq 1906, length 40
11:23:55.391594 (authentic,confidential): SPI 0x0f7a5e0f: IP 192.168.111.10 > 172.16.0.190: ICMP echo request, id 1, seq 1907, length 40
11:23:55.392077 (authentic,confidential): SPI 0x09a0b256: IP 172.16.0.190 > 192.168.111.10: ICMP echo reply, id 1, seq 1907, length 40LAN
11:25:02.318437 IP 192.168.111.10 > 172.16.0.190: ICMP echo request, id 1, seq 1973, length 40
11:25:02.318875 IP 172.16.0.190 > 192.168.111.10: ICMP echo reply, id 1, seq 1973, length 40
11:25:03.332457 IP 192.168.111.10 > 172.16.0.190: ICMP echo request, id 1, seq 1974, length 40
11:25:03.332867 IP 172.16.0.190 > 192.168.111.10: ICMP echo reply, id 1, seq 1974, length 40From Node B to A (It dosen't Works)
Wan
11:17:45.556447 IP ..94.153 > ..94.152: ESP(spi=0x09a0b256,seq=0x786), length 104
11:17:50.556281 IP ..94.153 > ..94.152: ESP(spi=0x09a0b256,seq=0x787), length 104
11:17:55.557365 IP ..94.153 > ..94.152: ESP(spi=0x09a0b256,seq=0x788), length 104Ipsec
11:18:55.557563 (authentic,confidential): SPI 0x09a0b256: IP 172.16.0.190 > 192.168.111.10: ICMP echo request, id 1, seq 831, length 40
11:19:00.556879 (authentic,confidential): SPI 0x09a0b256: IP 172.16.0.190 > 192.168.111.10: ICMP echo request, id 1, seq 832, length 40
11:19:05.557712 (authentic,confidential): SPI 0x09a0b256: IP 172.16.0.190 > 192.168.111.10: ICMP echo request, id 1, seq 833, length 40Lan
nothing….......... no pingI'm going crazy, I do not understand where I'm wrong :D :(
do you have any idea? some configuration that I don't know I don't know...
Thanks
-
Node B(public IP ..94.153 […] to A(public IP ..94.152
Are those public IPs really "one off" from each other? It seems then that they would be part of the same subnet?? hard to route between 2 IPs that are on the same subnet…something doesn't seem right. But it is very late here and could be I am over tired and not understanding.... :o
-
2.1.4? Upgrade and ask again.