Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSec established but not work properly

    Scheduled Pinned Locked Moved IPsec
    2 Posts 1 Posters 338 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rlozanogar
      last edited by

      I have a problem for months.

      I have mounted an IPSec site to site tunnel with a PFSense and a FW heckPoint. Apparently everything works correctly but after a few days or weeks the tunnel is established but there is no connection between both parties. There is no ping or anything. In pfense packet capture the ping if it goes through the IPSec interface but there is no reply. It is as if the tunnel is not renegotiated and falls even if it is established.
      For the tunnel to work again I have to reconnect and everything would work correctly.

      I can't find the solution and would appreciate any help. Thanks!

      IPSec configuration attachment
      ee732897-8553-4ad5-b167-d471d1bd298d-imagen.png

      Phase 1:
      92b96e3a-0259-4adb-9a88-c4aa587719f6-imagen.png

      7bf8fb56-aa17-4717-a11a-3870da27f307-imagen.png

      PHASE 2

      895c682a-2f53-420a-aaa1-77fe61c97328-imagen.png

      53353b47-b6a5-40cb-b23e-8adfbc723bcd-imagen.png

      1 Reply Last reply Reply Quote 0
      • R
        rlozanogar
        last edited by

        Update:

        The remote network is 10.90.0.0/16.

        When this problem appears sometines i can do ping host in one VLan and not another host in another vlan. For example:

        When i do ping to host on vlan 6: 10.90.6.22/24 . The ping not work and when I do ping to VLan 19: 10.90.19.63 , the ping work. The problem with Vlans is random.

        I tried to disable DPD but the result is the same.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.