one way traffic between Unifi USG and pfsense ipsec



  • USG lan = 10.7.1.1 /24
    pfsense lan = 10.5.1.1 /20

    i have rules to allow traffic both ways in pfsense

    i can ping from USG lan to pfsense lan fine and to all hosts (quickly too), but i cannot access any hosts the other way, including pinging from the pfsense itself using ping diagnostic tool.

    the only red herring i've got so far is it seems to be kicking my ping out to the internet at some point but i dont know what to make of this, to be fair when i look in routes i dont have ones for the usg lan but ipsec makes its own right?
    1a33184b-015b-462c-9b28-2f15a489ce73-image.png

    see how in routes it skips right over the remote rubnet:8b0f99e4-bc3e-44c3-ade1-ec99e3338bd9-image.png

    context in case needed:
    81c2ca9e-8d8b-444e-bca4-729d582fe01b-image.png
    e61f9a3e-e4ec-466b-9cc5-4232e0920345-image.png



  • this is still a issue


Log in to reply