PfSense IPSEC and H.323 Avaya IP phones not routing

  • Hi

    I have a site-to-site IPSec vpn. Avaya phones keeps sending UDP gatekeeper request.
    From tcpdump I could see that UDP packets are going into local lan interface, but I can't see them on enc0 interface.
    VPN tunnel is up cause I can see TCP packets going back and forwad on enc0 interface, but no UDP.

    Any hints?
    Thank you

  • I tried testing the connection with nmap. TCP scans goes through ipsec tunnel but udp fails.

    nmap -S -PN -sU

    Starting Nmap 6.25 ( ) at 2014-03-22 19:08 EET
    nexthost: failed to determine route to
    WARNING: No targets were specified, so 0 hosts scanned.
    Nmap done: 0 IP addresses (0 hosts up) scanned in 0.46 seconds

  • Banned

    Look at the fine firewall logs, they are there for a reason!

  • I've put accept on all interfaces and log, but no logging of drooped or accepted udp packets.

    At closer look to the UDP packets I could see that the frame header has the 802.1Q part with VLANID 0.
    The old router accepted this packets, but not pfsense.

Log in to reply