Misconfigured IPSec Tunnel killed LAN side connections to pfSense
-
While configuring two pfSense 2.0 firewalls I lost track of which machine I was on and accidentally configured one to tunnel to itself. I can't connect to the management interface or ssh from the LAN, however I can ssh in from the WAN. Is there a way to stop the tunnel or disable IPSec from the shell?
-
If you can still SSH, you can hit the web interface via a SSH tunnel and fix it. Item #6 here.
http://doc.pfsense.org/index.php/I_locked_myself_out_of_the_WebGUI,_help!You can also manually edit the XML via SSH but that's error prone if you're not familiar with it, could really break things.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.