Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Setting up pfSense for 'Road Warriors' via IPSec

    IPsec
    1
    1
    1708
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dparsons
      last edited by

      Hello Everyone,
        What I want to do, for the time being, is get pfSense setup so that a few of my employees can connect from their residences.  I have poured over this doc for quite awhile: http://doc.pfsense.org/index.php/IPsec_Road_Warrior/Mobile_Client_How-To with no luck.  A quick overview of my network topology: T1 –> Cisco Router 2800 --> Internal Network  The box that has pfSense setup resides on the internal network with dual NICs. In the router I have added three entires for IPSec into the ACL for the public IP of the pfSense box.

      Now if I try to connect from the local network to the pfSense box via Shrew the log for racoon looks like this:

      
      racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 1 negotiation: 1.2.3.4[500]<=>192.168.1.44[500]
      Aug 3 17:51:08	racoon: INFO: begin Aggressive mode.
      Aug 3 17:51:08	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-00
      Aug 3 17:51:08	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-01
      Aug 3 17:51:08	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
      Aug 3 17:51:08	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-03
      Aug 3 17:51:08	racoon: INFO: received Vendor ID: RFC 3947
      Aug 3 17:51:08	racoon: INFO: received broken Microsoft ID: FRAGMENTATION
      Aug 3 17:51:08	racoon: INFO: received Vendor ID: DPD
      Aug 3 17:51:08	racoon: INFO: received Vendor ID: CISCO-UNITY
      Aug 3 17:51:13	racoon: NOTIFY: the packet is retransmitted by 192.168.1.44[500] (1).
      Aug 3 17:51:18	racoon: NOTIFY: the packet is retransmitted by 192.168.1.44[500] (1).
      Aug 3 17:51:32	racoon: ERROR: phase1 negotiation failed due to time up. 12359c6a1d26d55e:de8038828d565cab
      
      

      Where 1.2.3.4 is the public IP of the pfSense box.  If I connect to a network outside the public network the logs look similar.  Is there something obvious that I am missing or have I misconfigured something?

      Thanks in advance!

      1 Reply Last reply Reply Quote 0
      • First post
        Last post