Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPsec and DMZ

    Scheduled Pinned Locked Moved IPsec
    4 Posts 2 Posters 1.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      speedy-luis
      last edited by

      Hello!

      We have one headquarter and one branch office connected via IPsec-VPN. On both sites is pfSense. Tunnel is working fine.
      My problem is to reach the DMZ in headquarter from branch office.

      Do you have any ideas, why it doesn´t work.

      Sorry for my bad english.

      Greetz speedy

      1 Reply Last reply Reply Quote 0
      • ?
        A Former User
        last edited by

        Hello Speedy,

        this can be a few things …
        Can you give us more information about your config?

        Can you ping a server in your dmz?
        Did you check your firewall rules and the logs?
        Is your routing working fine?

        Greetings, Sanches

        1 Reply Last reply Reply Quote 0
        • S
          speedy-luis
          last edited by

          Hello,

          the problem is, that the branch office doesn´t have a route to DMZ in headquarter.

          Here my configuration:

          headquarter:
          em0 –> WAN 217.x.x.10/29    gw--> 217.x.x.9/29
          em1 --> LAN  192.168.4.1/24
          em2 --> DMZ 192.168.5.1/24  gw--> 217.x.x.9/29

          branch office:
          em0 --> WAN 62.x.x.10/29      gw--> 62.x.x.9
          em1 --> LAN 192.168.10.1/24

          The tunnel is configured like this:

          Phase1: Interface = WAN headquarter ; Remote Gateway = WAN-address branch office (and vice versa)
          Phase2: Local Network = LAN subnet headquarter ; Remote Network = LAN address branch office (and vice versa)

          I don´t know, how to configure the tunnel between DMZ headquarter und LAN subnet branch office.

          Thank you for your help and sorry for my bad english.

          Greetings

          1 Reply Last reply Reply Quote 0
          • ?
            A Former User
            last edited by

            Hello,

            i thought, there is just 1 post, but http://forum.pfsense.org/index.php/topic,50914.0.html
            It's the same, just in the german support.

            We should close this one and keep going in the german one …

            My german is also better  ;D

            Greetings / Gruß

            Sanches

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.