Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPsec configuration files lost after reboot.

    IPsec
    4
    27
    5.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      Konstanti @Konstanti
      last edited by Konstanti

      @konstanti Try to set IKEV2without the l2tp/IPSEC
      From the documentation
      We strongly recommend using another solution such as IKEv2 instead of L2TP/IPsec.

      1 Reply Last reply Reply Quote 0
      • A
        artemis
        last edited by

        0_1545392899865_Capture.PNG

        K 3 Replies Last reply Reply Quote 0
        • K
          Konstanti @artemis
          last edited by

          @artemis Unfortunately, nothing is visible

          1 Reply Last reply Reply Quote 0
          • K
            Konstanti @artemis
            last edited by

            @artemis https://www.netgate.com/docs/pfsense/book/ipsec/mobile-ipsec.html

            1 Reply Last reply Reply Quote 0
            • A
              artemis
              last edited by

              Ok. To describe it, am showing you that the phase1 is enabled from the gui and the interface is not up.

              K 1 Reply Last reply Reply Quote 0
              • K
                Konstanti @artemis
                last edited by Konstanti

                @artemis
                When booting the PF checks whether it is enabled to initialize IPSEC
                If not , enc0 set to down
                And files strongswan.conf, ipsec.conf,..... not created

                Try to configure access using IKEV2 without l2tp

                1 Reply Last reply Reply Quote 0
                • A
                  artemis
                  last edited by

                  Ok how can i say to my pfsense to check the IPsec on the boot, because as i told you before it doesnt check it. My remote hosts do not support ikev2

                  1 Reply Last reply Reply Quote 0
                  • K
                    Konstanti @artemis
                    last edited by Konstanti

                    @artemis he picture shows that phase 1 is disabled from gui (your configuration)
                    Phase 1 is enabled (my configuration)
                    0_1545394017218_8cfc48e2-ffaa-4b18-adf5-3f2af7ee8663-image.png

                    0_1545394169959_828ded07-bbe7-408c-8b02-9bae37fc05b6-image.png

                    1 Reply Last reply Reply Quote 0
                    • A
                      artemis
                      last edited by

                      Right now i am feeling that i want to dig a hole and put myself in. I thought that green (Enabled) was the status of the phase 1. Omg and the worst part is that i am a network engineer(CCNP). OMG. Thank you very much.

                      GrimsonG K 2 Replies Last reply Reply Quote 0
                      • GrimsonG
                        Grimson Banned @artemis
                        last edited by

                        @artemis said in IPsec configuration files lost after reboot.:

                        I thought that green (Enabled) was the status of the phase 1.

                        There is a big difference between Enable and Enabled.

                        1 Reply Last reply Reply Quote 0
                        • A
                          artemis
                          last edited by

                          Just a comment to say something Grimson?

                          1 Reply Last reply Reply Quote 0
                          • K
                            Konstanti @artemis
                            last edited by

                            @artemis Is it loading correctly now ? ))))))

                            1 Reply Last reply Reply Quote 0
                            • A
                              artemis
                              last edited by

                              Yes everything is fine right know. Thank you for your help

                              K 1 Reply Last reply Reply Quote 0
                              • K
                                Konstanti @artemis
                                last edited by

                                @artemis At the time , too, wanted to go to study at Cisco engineer, but could not . Glad to have helped ))))) good Luck

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.