Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPsec configuration files lost after reboot.

    Scheduled Pinned Locked Moved IPsec
    27 Posts 4 Posters 6.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      Konstanti @artemis
      last edited by

      @artemis This means that IPSEC is not enabled at boot time

      Or missing phase 1
      Or phase 1 is disabled

      K 1 Reply Last reply Reply Quote 0
      • A
        artemis
        last edited by

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • K
          Konstanti @Konstanti
          last edited by Konstanti

          @konstanti Try to set IKEV2without the l2tp/IPSEC
          From the documentation
          We strongly recommend using another solution such as IKEv2 instead of L2TP/IPsec.

          1 Reply Last reply Reply Quote 0
          • A
            artemis
            last edited by

            0_1545392899865_Capture.PNG

            K 3 Replies Last reply Reply Quote 0
            • K
              Konstanti @artemis
              last edited by

              @artemis Unfortunately, nothing is visible

              1 Reply Last reply Reply Quote 0
              • K
                Konstanti @artemis
                last edited by

                @artemis https://www.netgate.com/docs/pfsense/book/ipsec/mobile-ipsec.html

                1 Reply Last reply Reply Quote 0
                • A
                  artemis
                  last edited by

                  Ok. To describe it, am showing you that the phase1 is enabled from the gui and the interface is not up.

                  K 1 Reply Last reply Reply Quote 0
                  • K
                    Konstanti @artemis
                    last edited by Konstanti

                    @artemis
                    When booting the PF checks whether it is enabled to initialize IPSEC
                    If not , enc0 set to down
                    And files strongswan.conf, ipsec.conf,..... not created

                    Try to configure access using IKEV2 without l2tp

                    1 Reply Last reply Reply Quote 0
                    • A
                      artemis
                      last edited by

                      Ok how can i say to my pfsense to check the IPsec on the boot, because as i told you before it doesnt check it. My remote hosts do not support ikev2

                      1 Reply Last reply Reply Quote 0
                      • K
                        Konstanti @artemis
                        last edited by Konstanti

                        @artemis he picture shows that phase 1 is disabled from gui (your configuration)
                        Phase 1 is enabled (my configuration)
                        0_1545394017218_8cfc48e2-ffaa-4b18-adf5-3f2af7ee8663-image.png

                        0_1545394169959_828ded07-bbe7-408c-8b02-9bae37fc05b6-image.png

                        1 Reply Last reply Reply Quote 0
                        • A
                          artemis
                          last edited by

                          Right now i am feeling that i want to dig a hole and put myself in. I thought that green (Enabled) was the status of the phase 1. Omg and the worst part is that i am a network engineer(CCNP). OMG. Thank you very much.

                          GrimsonG K 2 Replies Last reply Reply Quote 0
                          • GrimsonG
                            Grimson Banned @artemis
                            last edited by

                            @artemis said in IPsec configuration files lost after reboot.:

                            I thought that green (Enabled) was the status of the phase 1.

                            There is a big difference between Enable and Enabled.

                            1 Reply Last reply Reply Quote 0
                            • A
                              artemis
                              last edited by

                              Just a comment to say something Grimson?

                              1 Reply Last reply Reply Quote 0
                              • K
                                Konstanti @artemis
                                last edited by

                                @artemis Is it loading correctly now ? ))))))

                                1 Reply Last reply Reply Quote 0
                                • A
                                  artemis
                                  last edited by

                                  Yes everything is fine right know. Thank you for your help

                                  K 1 Reply Last reply Reply Quote 0
                                  • K
                                    Konstanti @artemis
                                    last edited by

                                    @artemis At the time , too, wanted to go to study at Cisco engineer, but could not . Glad to have helped ))))) good Luck

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.