Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    After success update to 25.11. ipsec vpn-to-vpn (between two netgate-devices) no windows remote desktop works!

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    15 Posts 4 Posters 2.1k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H Offline
      hsrtreml
      last edited by hsrtreml

      After success update to 25.11. ipsec vpn-to-vpn (between two netgate-boxes), no changes, is established: file service works, https-service works; >>> but no windows remote desktop works!

      with with client-ipsec-access windows remote desktop works!!

      no changes during the upgrade processes

      w0wW H 2 Replies Last reply Reply Quote 0
      • w0wW Offline
        w0w @hsrtreml
        last edited by

        @hsrtreml
        Update from what version and what hardware, bare metal installation?

        1 Reply Last reply Reply Quote 0
        • H Offline
          hsrtreml @hsrtreml
          last edited by

          Netgate 7100
          Serial: 1930226343
          Netgate Device ID:

          From 24.11, 25.07.1 to 25.11

          PC Engines APU2 Platform ("apu2" model)
          Netgate Device ID:

          From 25.07.1 to 25.11

          H 1 Reply Last reply Reply Quote 0
          • H Offline
            hsrtreml @hsrtreml
            last edited by

            after starting rdp and connect to windows 11-pc, i see only a black panel!

            H SteveITSS 2 Replies Last reply Reply Quote 0
            • H Offline
              hsrtreml @hsrtreml
              last edited by

              as well as: ports are not open?!!

              H 1 Reply Last reply Reply Quote 0
              • H Offline
                hsrtreml @hsrtreml
                last edited by

                ipsec from client-config works!

                w0wW 1 Reply Last reply Reply Quote 0
                • w0wW Offline
                  w0w @hsrtreml
                  last edited by

                  @hsrtreml
                  Any chances that you are using some floating rules for ipsec?

                  H 1 Reply Last reply Reply Quote 0
                  • H Offline
                    hsrtreml @w0w
                    last edited by

                    @w0w no changes ...

                    luckman212L 1 Reply Last reply Reply Quote 0
                    • luckman212L Offline
                      luckman212 LAYER 8 @hsrtreml
                      last edited by luckman212

                      @hsrtreml I would double check MTU/MSS settings on that tunnel. Something may have changed between versions that is now manifesting as this.

                      Also might be worth experimenting with Floating States vs Interface Bound States, as there is specific mention of that possibly affecting IPSEC in the docs.

                      1 Reply Last reply Reply Quote 0
                      • SteveITSS Offline
                        SteveITS Rebel Alliance @hsrtreml
                        last edited by

                        @hsrtreml restart the host PC.

                        To upgrade, select your branch in System/Update/Update Settings. When upgrading, allow 10-15 minutes to reboot, or more depending on packages, CPU, and/or disk speed.
                        Only install packages for your version of pfSense.
                        Upvote 👍 helpful posts!

                        H 1 Reply Last reply Reply Quote 0
                        • H Offline
                          hsrtreml @SteveITS
                          last edited by hsrtreml

                          @SteveITS restarted all system (Client, Host, pfsense); disabled MSS-Clamping on both firewalsystems: not it works!!

                          Thanks to all

                          SteveITSS luckman212L 2 Replies Last reply Reply Quote 0
                          • SteveITSS Offline
                            SteveITS Rebel Alliance @hsrtreml
                            last edited by

                            @hsrtreml If you log in and get to a black screen you’re already connected. I would diagnose that as an issue on the host PC. Can you Remote Desktop to it from another PC on its LAN?

                            To upgrade, select your branch in System/Update/Update Settings. When upgrading, allow 10-15 minutes to reboot, or more depending on packages, CPU, and/or disk speed.
                            Only install packages for your version of pfSense.
                            Upvote 👍 helpful posts!

                            H 1 Reply Last reply Reply Quote 0
                            • luckman212L Offline
                              luckman212 LAYER 8 @hsrtreml
                              last edited by

                              @hsrtreml said in After success update to 25.11. ipsec vpn-to-vpn (between two netgate-devices) no windows remote desktop works!:

                              not it works!!

                              did you mean "now it works"? so it's working? I had suggested looking at the MSS settings a few posts up...

                              H 1 Reply Last reply Reply Quote 0
                              • H Offline
                                hsrtreml @luckman212
                                last edited by

                                @luckman212 said in After success update to 25.11. ipsec vpn-to-vpn (between two netgate-devices) no windows remote desktop works!:

                                now it works"? so it's working

                                sorry, i mean: now it works -- so it's working

                                1 Reply Last reply Reply Quote 0
                                • H Offline
                                  hsrtreml @SteveITS
                                  last edited by

                                  @SteveITS yes, you are right; I reboot the windows-pc's; now all fine.

                                  1 Reply Last reply Reply Quote 2
                                  • First post
                                    Last post
                                  Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.
                                  Privacy Policy · Cookie Policy