Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSEC connected but cannot ping remote network.

    Scheduled Pinned Locked Moved IPsec
    6 Posts 2 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      scotttiamit
      last edited by

      Hi all, I have 2 pfsense boxes both running the latest version. I have configured IPSEC on both boxes and they seem to connect OK:

      INFO: IPsec-SA established: ESP/Tunnel…

      The problem is once connected I try to ping (or open a RDP connection) to the remote network and the connection fails (fails in both directions). Subnet at one end is 192.168.0.0/24 and the other end is 192.168.4.0/24. At one stage ping was working for a few minutes but then stopped again. In my logs I am not getting any errors only a warning:

      WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument

      any ideas on resolving this issue?

      Thanks.

      Scott.

      1 Reply Last reply Reply Quote 0
      • S
        sullrich
        last edited by

        Known issue with Racoon.  We are waiting for the new version to be released.

        Not sure of their release timeframe.

        1 Reply Last reply Reply Quote 0
        • S
          scotttiamit
          last edited by

          Is Racoon to blame for the warning as well as me not being able to communicate between the two subnets connected by the IPSEC? I have seen some people in the forums which have IPsec working OK?

          Thanks.

          1 Reply Last reply Reply Quote 0
          • S
            sullrich
            last edited by

            Not sure of the specifics.  IPSEC works fine for me as well, but there is something that triggers the bug.

            1 Reply Last reply Reply Quote 0
            • S
              scotttiamit
              last edited by

              OK, thanks for your help Sullrich. Guess I will just use PPTP for now.

              Regards,
              Scott.

              1 Reply Last reply Reply Quote 0
              • S
                sullrich
                last edited by

                Personally I would give OpenVPN a try over PPTP.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.