Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    I would have access to servers via IPSec to be identified as the fpsence address

    IPsec
    1
    1
    1484
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      danielobs
      last edited by

      Hi,

      In my fpsence (1.2.3-RELEASE) in IPSec log I have a lot of this type of records :

      Jul 22 14:28:10 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA established 89.77.51.56[500]-80.50.127.246[500]

      spi:eb36e02d5817e938:79bf38e0345074c3
      Jul 22 14:28:10 racoon: INFO: generated policy, deleting it.
      Jul 22 14:28:16 racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 2 negotiation: 89.77.51.56[0]<=>80.50.127.246[0]
      Jul 22 14:28:16 racoon: [Unknown Gateway/Dynamic]: INFO: no policy found, try to generate the policy : 192.168.0.104/32[0] 192.168.1.0/24[0]

      proto=any dir=in
      Jul 22 14:28:16 racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 2 negotiation: 89.77.51.56[0]<=>80.50.127.246[0]
      Jul 22 14:28:16 racoon: [Unknown Gateway/Dynamic]: INFO: no policy found, try to generate the policy : 192.168.0.104/32[0] 192.168.1.0/24[0]

      proto=any dir=in
      Jul 22 14:28:17 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 80.50.127.246[0]->89.77.51.56[0] spi=234668977(0xdfcc3b1)
      Jul 22 14:28:17 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 89.77.51.56[0]->80.50.127.246[0] spi=3880356702(0xe7498b5e)
      Jul 22 14:28:17 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "192.168.0.104/32[0] 192.168.1.0/24[0] proto=any

      dir=in"
      Jul 22 14:28:17 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "192.168.1.0/24[0] 192.168.0.104/32[0] proto=any

      dir=out"
      Jul 22 14:28:17 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 80.50.127.246[0]->89.77.51.56[0] spi=113561201(0x6c4ce71)
      Jul 22 14:28:17 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 89.77.51.56[0]->80.50.127.246[0] spi=2895794727(0xac9a5227)
      Jul 22 14:28:17 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "192.168.0.104/32[0] 192.168.1.0/24[0] proto=any

      dir=in"
      Jul 22 14:28:17 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "192.168.1.0/24[0] 192.168.0.104/32[0] proto=any

      dir=out"

      By IPSec acces from mobile client to the LAN is OK.

      Unfortunately, as I wanted to connect from the mobile client (SHREW) to public ip address through the IPSec channel is unfortunately not released me.

      From the customer office I would have access to mail servers via IPSec to be identified as the public address from pfsence. It is possible ?

      Regards,

      Daniel

      1 Reply Last reply Reply Quote 0
      • First post
        Last post