PfSense IPSEC and H.323 Avaya IP phones not routing



  • Hi

    I have a site-to-site IPSec vpn. Avaya phones keeps sending UDP gatekeeper request.
    From tcpdump I could see that UDP packets are going into local lan interface, but I can't see them on enc0 interface.
    VPN tunnel is up cause I can see TCP packets going back and forwad on enc0 interface, but no UDP.

    Any hints?
    Thank you



  • I tried testing the connection with nmap. TCP scans goes through ipsec tunnel but udp fails.

    nmap -S 192.168.1.1 -PN -sU 192.168.100.1

    Starting Nmap 6.25 ( http://nmap.org ) at 2014-03-22 19:08 EET
    nexthost: failed to determine route to 192.168.100.1
    WARNING: No targets were specified, so 0 hosts scanned.
    Nmap done: 0 IP addresses (0 hosts up) scanned in 0.46 seconds


  • Banned

    Look at the fine firewall logs, they are there for a reason!



  • I've put accept on all interfaces and log, but no logging of drooped or accepted udp packets.

    At closer look to the UDP packets I could see that the frame header has the 802.1Q part with VLANID 0.
    The old router accepted this packets, but not pfsense.


Log in to reply