IKEv1 tunnels drop when enabling mobile client IPSEC Policy
-
I have multiple site to site connections, some going from PFSense to Netgear boxes via IKEv1 PSK, 2 going to other PFSense boxes using IKEv2 PSK. I have mobile client enabled and configured, I have a mobile policy for mutual psk + Xauth for road warriors. When I enable that policy no matter how it's configured, all IKEv1 tunnels going to the netgear boxes drop and don't come back up until I disable the policy. All IKEv2 tunnels going to PFSense boxes seem to be operating fine however. Does anyone have any idea why this is happening? I'm running the latest stable build of PFSense 2.3.3.
-
Hi,
Same problem… Nobody can help us ?
Thanks.
-
same problem here :(
-
@StaChris:
I have multiple site to site connections, some going from PFSense to Netgear boxes via IKEv1 PSK, 2 going to other PFSense boxes using IKEv2 PSK. I have mobile client enabled and configured, I have a mobile policy for mutual psk + Xauth for road warriors. When I enable that policy no matter how it's configured, all IKEv1 tunnels going to the netgear boxes drop and don't come back up until I disable the policy. All IKEv2 tunnels going to PFSense boxes seem to be operating fine however. Does anyone have any idea why this is happening? I'm running the latest stable build of PFSense 2.3.3.
Are you using IKEv1 or IKEv2 for the mobile setup? Considering all the IKEv2 tunnels stay up but the IKEv1 tunnels go down, I wonder if there is some conflict. If using IKEv1 for the client, have you tried using IKEv2 for the client and see if it affects anything? Do the IKEv1 tunnels still go down, do the IKEv2 tunnels go down instead, or does everything continue working like normal.
