Phase 2 - Traffic Selector using LAN network for Other network
-
Hello everyone,
So I've configured my IPSec tunnel, phase 1 no problem but phase 2 fail on the traffic selector where the traffic selector is using the local network for the other network…
Logs (in reverse):
Jan 7 00:30:25 charon 07[IKE] <bypasslan|3190>traffic selectors 10.24.0.0/22|/0 === 10.25.0.0/22|/0 inacceptable Jan 7 00:30:25 charon 07[CFG] <bypasslan|3190>10.24.0.0/22|/0 Jan 7 00:30:25 charon 07[CFG] <bypasslan|3190>proposing traffic selectors for other: Jan 7 00:30:25 charon 07[CFG] <bypasslan|3190>10.24.0.0/22|/0 Jan 7 00:30:25 charon 07[CFG] <bypasslan|3190>proposing traffic selectors for us: Jan 7 00:30:25 charon 07[CFG] <bypasslan|3190>looking for a child config for 10.24.0.0/22|/0 === 10.25.0.0/22|/0</bypasslan|3190></bypasslan|3190></bypasslan|3190></bypasslan|3190></bypasslan|3190></bypasslan|3190>
Both ends are pfSense 2.4.2-RELEASE-p1, one of them is on internet directly, the other one is behind a NAT.
Phase 1 is done with Mutual-RSA, Auto-exclude LAN address is On.I've attached the screenshot of both conf from SSH
Cheers

