New DHCP Scope Issue with IPSEC VPN

McCormick.234 · Feb 25, 2019, 8:29 PM

Hello,

We recently needed to increase the number of IP addresses at one of our locations. However, anyone who receives that new IP address cannot reach our servers or get out to the internet. If you have one of the existing IP addresses you are still able to. I checked the IPsec tunnels and all the addresses look correct. I'm trying to avoid rebooting the firewall because we have several conference calls going on right now. Any ideas would be really helpful.

Thank you!

tim.mcmanus · Feb 25, 2019, 9:21 PM

Can you share your pfSense configs?

jimp · Feb 25, 2019, 9:35 PM

You probably didn't account for the larger subnet in your firewall rules, outbound NAT rules, IPsec P2s, and other places. You probably need to add more rules or adjust subnet masks to match what you changed.