Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSEC with mobile client endpoint problem

    Scheduled Pinned Locked Moved IPsec
    3 Posts 2 Posters 3.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      ciclonite
      last edited by

      Hi,
      I've configured with the help of some guys the ipsec tunnel between PF 2.0 Final and IPHONE 4. It' works for some days and now i' can't connect from my iphone into PF box because RACOON wont start.
      In the log appear:

      
      Oct 31 08:07:10 	php: /vpn_ipsec_phase1.php: Reload VPN tunnel(s)
      Oct 31 08:07:21 	php: /vpn_ipsec_phase1.php: Could not determine VPN endpoint for 'VPN'
      Oct 31 08:07:21 	check_reload_status: Syncing firewall
      Oct 31 08:09:07 	php: /vpn_ipsec_phase2.php: Could not determine VPN endpoint for 'VPN'
      Oct 31 08:09:07 	check_reload_status: Syncing firewall
      Oct 31 08:09:16 	php: /vpn_ipsec.php: Could not determine VPN endpoint for 'VPN'
      Oct 31 08:09:16 	check_reload_status: Reloading filter
      
      

      I've tried to setup the tunnel again but this error always apper.
      Any ideas?

      1 Reply Last reply Reply Quote 0
      • C
        ciclonite
        last edited by

        I've tried everything..
        I'vee se the if statement that generate the error in vpn.inc:

        
        if (!is_ipaddr($phase1['remote-gateway'])) {
        if(! $g['booting']) {	
        $rgip = resolve_retry($phase1['remote-gateway']);
        add_hostname_to_watch($phase1['remote-gateway']);		
        } else {
        add_hostname_to_watch($phase1['remote-gateway']);
        }
        if (!is_ipaddr($rgip)) {
        log_error("Could not determine VPN endpoint for '{$phase1['descr']}'");
        return false;
        }
        
        

        There is a problem on remote gw variable.. Any idea?

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          That error is not your problem. That error is harmless. Mobile tunnels have no remote gateway, so that error isn't really saying anything significant. The system log is not where you should be looking, check the IPsec tab.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.