Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problems with IPSEC to multiple branches

    Scheduled Pinned Locked Moved IPsec
    3 Posts 2 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bGn
      last edited by

      Hi,
      i hope you can help me with my problem:
      I changed all the routers in my company through pfSense.
      The branches all have fixed IP’s and are connected via IPSEC to the Headquarter.
      We have a 2Mbit SDSL connection there. The branches all have ADSL connections with fixed IP’s (PPPOE) and different bandwidths. The traffic is normally really low because they work on a AS/400 (like a telnet program).
      Here the configuration of the different tunnels, which are the same but the PSK
      Interface: WAN
      Local Subnet: LAN subnet
      Remote Subnet: 192.168.x.0 /24
      Remote Gatway: Filiale WAN IP

      P1
      Mode: aggressive
      Identifier: My IP Adress
      Encryption: Blowfish
      Hash: SHA1
      DH: 2
      Lifetime: 28800
      Auth: PSK

      P2
      Protocol: ESP
      Encryption: Blowfish
      Hash: SHA1
      PFS: 2
      Lifetime: 86400

      The Hardware in the HQ is a Intel 2,4 Ghz PC with 1GB RAM and 2 Nic’s
      The branches have embedded ALIX machines from PCEngines.
      Problem is, that the connection in the branches often breaks. Normally they reconnect fast, but the connections to telnet disconnect.
      Please ask me about different logs you need to help me with this problem, because i don’t know exactly what is relevant.
      After i installed the 4th banch, the PPTP Server on the HQ stopped working.
      Any Ideas? I redirect PPTP to my W2k3 Server now.
      I recognized that some Firewalls have no connection to the NTP Server.
      Some do, some not (cannot reach pool.ntp.org eg.). Can the different date cause the problems with the connection problems (lifetime)?

      It would be great if someone could give me a hint or is interested in bringing up a solution for this problem.
      Best regards
      Patrick

      1 Reply Last reply Reply Quote 0
      • Z
        Zeon
        last edited by

        Hi Patrick,
        Have you tried the bottom box to automatically ping host?

        1 Reply Last reply Reply Quote 0
        • B
          bGn
          last edited by

          yes i did (ping to remote gateway lan adress) but only from branch to HQ because branch has no full time connection

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.