Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Azure Pfsense IPSEC tunnel to cell carrier - dropped traffic

    IPsec
    1
    1
    35
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jonathan.v last edited by

      We have a single IPSEC tunnel with multiple phase 2's for different subnets with a carrier provider. Everything is up and working and all 5 phase 2's negotiate and pass traffic. On occasion, around once every 24 hours, one or two of the subnets will stop passing traffic. The only way to restore is to disconnect the phase 2 and it will re-establish and pass traffic. It seems to be random anywhere from 24 to 12 hours where it will stop traffic. They all seem to resolve themselves if I an unable to witness and manually restart the phase 2 connection.

      Specs :

      2.4.4-RELEASE-p3 (amd64)

      Phase 1
      AES 256, SHA 256 DH15
      Lifetme 86400

      Phase 2
      AES 256, SHA 256 PFS key group 15
      Lifetime 3600

      Verified matching on both side and negotiation does not seem to be the issue.

      Is there a pfsense issue that might be causing traffic to stop flowing after a period of time

      I read briefly about an old SA timers bug that was causing issues in earlier versions but i had not seen any issues on 2.4.4-RELEASE-p3.

      Any assistance is greatly appreciated.

      1 Reply Last reply Reply Quote 0
      • First post
        Last post

      Products

      • Platform Overview
      • TNSR
      • pfSense Plus
      • Appliances

      Services

      • Training
      • Professional Services

      Support

      • Subscription Plans
      • Contact Support
      • Product Lifecycle
      • Documentation

      News

      • Media Coverage
      • Press
      • Events

      Resources

      • Blog
      • FAQ
      • Find a Partner
      • Resource Library
      • Security Information

      Company

      • About Us
      • Careers
      • Partners
      • Contact Us
      • Legal
      Our Mission

      We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

      Subscribe to our Newsletter

      Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

      © 2021 Rubicon Communications, LLC | Privacy Policy