• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

IPsec Tunnel FritzBox pfSense with only WAN Interface

Scheduled Pinned Locked Moved IPsec
1 Posts 1 Posters 368 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • B
    Blackshie
    last edited by Blackshie Sep 6, 2022, 9:01 PM Sep 6, 2022, 8:50 PM

    i am almost desperate now and maybe someone could help me.

    I am trying to connect a fritzbox with a pfsense over an ipsec vpn tunnel.

    The problem is I only have a WAN interface, and I can't add more (hosted vserver).
    all instructions on the internet refer to the case that you also have a lan interface

    i already tried everything and i also get a green connection on FritzBox side.
    also it shows the connection in the pfsense successful

    But no ping goes through in any direction.
    hopefully someone of you has an idea?

    thank you

    below are my settings

    fritzbox settings

    vpncfg {
    connections {
      enabled = yes;
      conn_type = conntype_lan;
      name = "VPN Cloud pfSense"; // NAME der Verbindung
      always_renew = yes; // Verbindung immer herstellen
      reject_not_encrypted = no;
      dont_filter_netbios = yes;
      localip = 0.0.0.0;
      local_virtualip = 0.0.0.0;
      remoteip = XXXXXXXX; // Feste oeffentliche IP der pfSense Firewall
      remote_virtualip = 0.0.0.0;
      localid {
        fqdn = "XXXXXXXXX"; // dyndns name der FritzBox
        }
      remoteid {
        ipaddr = XXXXXXXX; // Feste oeffentliche IP der pfSense Firewall
        }
      mode = phase1_mode_idp;
      phase1ss = "dh14/aes/sha";
      keytype = connkeytype_pre_shared;
      key = "XXXXXXXX";
      cert_do_server_auth = no;
      use_nat_t = no;
      use_xauth = no;
      use_cfgmode = no;
      phase2localid {
        ipnet {
          ipaddr = 192.168.0.0;
          mask = 255.255.255.0;
          }
        }
      phase2remoteid {
        ipnet {
          ipaddr = XXXXXXX; // Das interne Netzwerk LAN hinter der pfSense
          mask = 255.255.255.0; // inklusive Subnetmask
          }
        }
      phase2ss = "esp-aes256-3des-sha/ah-no/comp-lzs-no/pfs"; // wichtig, da sonst kein Datenaustausch
      accesslist = "permit ip any 10.10.0.0 255.255.244.0"; // Firewall Einstellungen für pfSense Subnetz
      }
      ike_forward_rules = "udp 0.0.0.0:500 0.0.0.0:500",
                          "udp 0.0.0.0:4500 0.0.0.0:4500";
    }
    

    52ac629e-c429-4c98-bf19-cc5645c87b5e-grafik.png

    b70513c5-9e36-43da-a8c9-a5a6a4d2733f-grafik.png

    6eae845c-a856-44ae-b901-9c26fbdf6a36-grafik.png

    1 Reply Last reply Reply Quote 0
    1 out of 1
    • First post
      1/1
      Last post
    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
      This community forum collects and processes your personal information.
      consent.not_received