Cannot ping DHCP clients
-
Hello,
Im running Pfsense 1.2.3 and im trying to configure IPSEC for mobile clients.
I can ping/access all my clients with a static IP. The problem is that i cant connect to clients with an IP from the DHCP pool.I also recieve this messages in the IPSEC logs:
x.x.x.x and y.y.y.y are IP'sFeb 3 21:25:42 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA established x.x.x.x[500]-y.y.y.y[500] spi:9d74558fb89b94e9:88d136cf26ff50c4
Feb 3 21:25:47 racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 2 negotiation: x.x.x.x[0]<=>y.y.y.y[0]
Feb 3 21:25:47 racoon: [Unknown Gateway/Dynamic]: INFO: no policy found, try to generate the policy : 192.168.50.10/32[0] 192.168.1.0/24[0] proto=any dir=in
Feb 3 21:25:47 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP y.y.y.y[0]->x.x.x.x.x[0] spi=69410748(0x4231fbc)
Feb 3 21:25:47 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP x.x.x.x[0]->y.y.y.y.y[0] spi=2750655360(0xa3f3ab80)
Feb 3 21:25:47 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "192.168.50.10/32[0] 192.168.1.0/24[0] proto=any dir=in"
Feb 3 21:25:47 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "192.168.1.0/24[0] 192.168.50.10/32[0] proto=any dir=out"
Feb 3 21:27:40 racoon: INFO: generated policy, deleting it.
Feb 3 21:27:40 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA expired x.x.x.x[500]-y.y.y.y[500] spi:9d74558fb89b94e9:88d136cf26ff50c4
Feb 3 21:27:41 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA deleted x.x.x.x[500]-y.y.y.y[500]