Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPsec configuration files lost after reboot.

    Scheduled Pinned Locked Moved IPsec
    27 Posts 4 Posters 5.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      artemis
      last edited by

      This post is deleted!
      1 Reply Last reply Reply Quote 0
      • K
        Konstanti @Konstanti
        last edited by Konstanti

        @konstanti Try to set IKEV2without the l2tp/IPSEC
        From the documentation
        We strongly recommend using another solution such as IKEv2 instead of L2TP/IPsec.

        1 Reply Last reply Reply Quote 0
        • A
          artemis
          last edited by

          0_1545392899865_Capture.PNG

          K 3 Replies Last reply Reply Quote 0
          • K
            Konstanti @artemis
            last edited by

            @artemis Unfortunately, nothing is visible

            1 Reply Last reply Reply Quote 0
            • K
              Konstanti @artemis
              last edited by

              @artemis https://www.netgate.com/docs/pfsense/book/ipsec/mobile-ipsec.html

              1 Reply Last reply Reply Quote 0
              • A
                artemis
                last edited by

                Ok. To describe it, am showing you that the phase1 is enabled from the gui and the interface is not up.

                K 1 Reply Last reply Reply Quote 0
                • K
                  Konstanti @artemis
                  last edited by Konstanti

                  @artemis
                  When booting the PF checks whether it is enabled to initialize IPSEC
                  If not , enc0 set to down
                  And files strongswan.conf, ipsec.conf,..... not created

                  Try to configure access using IKEV2 without l2tp

                  1 Reply Last reply Reply Quote 0
                  • A
                    artemis
                    last edited by

                    Ok how can i say to my pfsense to check the IPsec on the boot, because as i told you before it doesnt check it. My remote hosts do not support ikev2

                    1 Reply Last reply Reply Quote 0
                    • K
                      Konstanti @artemis
                      last edited by Konstanti

                      @artemis he picture shows that phase 1 is disabled from gui (your configuration)
                      Phase 1 is enabled (my configuration)
                      0_1545394017218_8cfc48e2-ffaa-4b18-adf5-3f2af7ee8663-image.png

                      0_1545394169959_828ded07-bbe7-408c-8b02-9bae37fc05b6-image.png

                      1 Reply Last reply Reply Quote 0
                      • A
                        artemis
                        last edited by

                        Right now i am feeling that i want to dig a hole and put myself in. I thought that green (Enabled) was the status of the phase 1. Omg and the worst part is that i am a network engineer(CCNP). OMG. Thank you very much.

                        GrimsonG K 2 Replies Last reply Reply Quote 0
                        • GrimsonG
                          Grimson Banned @artemis
                          last edited by

                          @artemis said in IPsec configuration files lost after reboot.:

                          I thought that green (Enabled) was the status of the phase 1.

                          There is a big difference between Enable and Enabled.

                          1 Reply Last reply Reply Quote 0
                          • A
                            artemis
                            last edited by

                            Just a comment to say something Grimson?

                            1 Reply Last reply Reply Quote 0
                            • K
                              Konstanti @artemis
                              last edited by

                              @artemis Is it loading correctly now ? ))))))

                              1 Reply Last reply Reply Quote 0
                              • A
                                artemis
                                last edited by

                                Yes everything is fine right know. Thank you for your help

                                K 1 Reply Last reply Reply Quote 0
                                • K
                                  Konstanti @artemis
                                  last edited by

                                  @artemis At the time , too, wanted to go to study at Cisco engineer, but could not . Glad to have helped ))))) good Luck

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.