Problems with Phase2 Local IP

JBW · Jul 14, 2023, 3:08 PM

Hi,
I have a strange issue with my Phase2 IPSEC connection on a VPN we have set up with an external company which I can't solve.

The phase 2 tunnel has been set up to subnet /21 with all the settings matched to the other side which is a Fortigate. It connects, but the child local settings connect at /23 even when everything has been set at both ends to connect at /21.

We are running PFsense on a netgate 7100 with version 23.01

We have checked and tripple checked eveything at both ends, but no matter what happens, it won't connect on the correct subnet.

Is it possible this is a bug or something else I have missed?

The logs from the other side suppliers Fortigate show its negotiating a /23 instead of a /21.

Any help would be appreciated.