Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    IPSec works only for one day - "couldn't find the proper pskey"

    IPsec
    2
    2
    3753
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      eku last edited by

      Hello,

      we works now with the new version of pfsense 2.0.1-RELEASE (amd64). The most problems are now away, but IPSec cuts the stream every day. Its works fine, but next day the people in homeoffice call me that they can't work. I look the tunnels and see that every 30 seconds it will be cut. a look in the Logs said: NOTIFY: couldn't find the proper pskey, try to get one by the peer's address.

      But the key is correct, so i turn off and on IPSec and it works… but next day the same problem?

      what can i do? thank you for help!  :)

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        Try going to System > Advanced, on the Misc tab, and toggle the checkbox for "Prefer old IPsec SA"

        It sounds like when one SA is expiring, it isn't getting fully dropped/rebuilt as expected by both sides.

        Also, disable NAT-T.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • First post
          Last post