IPSec works only for one day - "couldn't find the proper pskey"
-
Hello,
we works now with the new version of pfsense 2.0.1-RELEASE (amd64). The most problems are now away, but IPSec cuts the stream every day. Its works fine, but next day the people in homeoffice call me that they can't work. I look the tunnels and see that every 30 seconds it will be cut. a look in the Logs said: NOTIFY: couldn't find the proper pskey, try to get one by the peer's address.
But the key is correct, so i turn off and on IPSec and it works… but next day the same problem?
what can i do? thank you for help! :)
-
Try going to System > Advanced, on the Misc tab, and toggle the checkbox for "Prefer old IPsec SA"
It sounds like when one SA is expiring, it isn't getting fully dropped/rebuilt as expected by both sides.
Also, disable NAT-T.
