IPSec tunnel to Unifi USG up but no traffic passes

  • All looks fine; the remote subnets are correctly stated, but nothing is singable from either end. Anyone know how to sort, please?

  • I haven't had much trouble going from a USG to pfSense. On the USG side, I used site-to-site, manual IPSec, (fill in settings), uncheck enable dynamic routing.

  • Dynamic routing was enabled, so I've unchecked it, but still cannot ping the LAN IP of the USG from pfSense..... Any more ideas as to where to look? I haven't got SSH access to the USG right now, but will have tomorrow I hope

  • Sorry, not sure what else to check. In my case, unchecking dynamic routing got it going.

  • Doh - there was never an issue it seems. BEWARE: unless I was doing it wrong (using defaults) you cannot test the VPN by pinging the other end from within the UI; you have to test using endpoints. Wasted hours on that one!! Netgate, is that a bug?

  • When I make an IPsec between two pfSense routers I can ping both sides of the tunnel from the pfSense UI. Are you sure you don't still have suttle config error or issue?

Log in to reply