AWS pfSense+ Loopback interface
-
I am having issues with creating a ipsec config. It turns out that a IP (172.19.0.1) from the remote network is assigned to the loopback interface of the pfSense+
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff000000
inet 172.19.0.1 netmask 0xffffff00It seems to have been used on the mobile clients ipsec config which we don't use.
How can I remove this?
-
@paddy said in pfSense+ Loopback interface:
mobile clients ipsec config which we don't use.
Then why do you have it setup?
-
@johnpoz It was default config on the AWS pfSenese+ AMI
-
@paddy said in pfSense+ Loopback interface:
on the AWS pfSenese+ AMI
I have never set that up.. So have no idea what would be from default setup, etc.
Did you run through the wizard?
https://docs.netgate.com/pfsense/en/latest/packages/aws-vpc-wizard/index.html
-
@johnpoz I did go through the wizard but don't remember IPSEC questions. How can I change the title of this topic to add AWS?
-
@paddy if you edit your first post, you can edit the subject..
-
@paddy said in AWS pfSense+ Loopback interface:
I am having issues with creating a ipsec config. It turns out that a IP (172.19.0.1) from the remote network is assigned to the loopback interface of the pfSense+
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff000000
inet 172.19.0.1 netmask 0xffffff00It seems to have been used on the mobile clients ipsec config which we don't use.
How can I remove this?
Found it. It was configured as a Virtual IP
-
Yes, the AWS AMI deploys with mobile IPSec configured but disabled. It has that VIP set to allow mobile IPSec clients to use it for DNS.
Steve