Pfsense 2.4.2 IPSEC Status Overview missing Child SA entries status disconnected

pete35 · Oct 21, 2017, 1:45 PM

Hi,

i have a well running IPSEC tunnel between a 2.4.0 Pfsense and a 2.4.2 Pfsense with lots of NAT and phase 2 entries. On the 2.4.0 site every Phase 2 entry is shown correctly. Since the upgrade to 2.4.2 the child SA are not shown on the other site, there is only a false entry "disconnected". The tunnel and all NAT/IP is working fine. So i guess something is wrong with the IPSEC Status Overview on vers 2.4.2.

Thanks!

jwt · Oct 22, 2017, 4:40 PM

please open a bug on redmine.pfsense.org

mysticsilent · Oct 30, 2017, 11:40 AM

I have the exact same issue. If you have some information about the bug, i am very interested.

pete35 · Oct 30, 2017, 2:26 PM

Hi,

it is fixed in the latest update 2.4.2a from yesterday.

nsnidanko · Nov 3, 2017, 2:49 AM

Version 2.4.2a here from 02/11/2017
Over time child entries displayed multiple times. After some time when you have 6 of them displaying all tunnels stops working.
As a workaround we found that stoping and starting service resets it for several hors. Restarting service doesn't fix the problem.
See attached file for screenshot.

virusbcn · Nov 3, 2017, 11:33 AM

Sorry but i not find where can i download 2.4.2 ¿???? Can i upgrade my 2.4.1 to 2.4.2a ???

Thanks

w0w · Nov 3, 2017, 2:54 PM

And if your system is stable after update, don't forget to switch it back!

virusbcn · Nov 3, 2017, 3:55 PM

Oh sorry :o !!!

I not view this 8)

Thank you !!! ;)

virusbcn · Nov 3, 2017, 4:00 PM

Sorry but i can not download development version because i have 2.4.1 and don't works with PPOE over VLAN, i need download the 2.4.2 version and manually update 2.4.1 to 2.4.2, where can i download 2.4.2 ¿??