PfSense IPSEC and H.323 Avaya IP phones not routing
-
Hi
I have a site-to-site IPSec vpn. Avaya phones keeps sending UDP gatekeeper request.
From tcpdump I could see that UDP packets are going into local lan interface, but I can't see them on enc0 interface.
VPN tunnel is up cause I can see TCP packets going back and forwad on enc0 interface, but no UDP.Any hints?
Thank you -
I tried testing the connection with nmap. TCP scans goes through ipsec tunnel but udp fails.
nmap -S 192.168.1.1 -PN -sU 192.168.100.1
Starting Nmap 6.25 ( http://nmap.org ) at 2014-03-22 19:08 EET
nexthost: failed to determine route to 192.168.100.1
WARNING: No targets were specified, so 0 hosts scanned.
Nmap done: 0 IP addresses (0 hosts up) scanned in 0.46 seconds -
Look at the fine firewall logs, they are there for a reason!
-
I've put accept on all interfaces and log, but no logging of drooped or accepted udp packets.
At closer look to the UDP packets I could see that the frame header has the 802.1Q part with VLANID 0.
The old router accepted this packets, but not pfsense.