Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multi Site-to-Site VPN Issue

    Scheduled Pinned Locked Moved IPsec
    3 Posts 1 Posters 945 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      streetsfinest
      last edited by

      Hello at all,

      i have successfully created a site-to-site vpn over ipsec to a fritzbox.
      Today i must create a new site-to-site connection to a pfsense.
      Since i create the new connection i get the following error message of my first vpn site-to-site to fritzbox:

      charon: 13[KNL] creating acquire job for policy My-public-ip/32|/0 === other-site-public-ip/32|/0 with reqid {1}

      ignoring acquire, connection attempt pending

      The new vpn site-to-site is working perfectly and the old one (that i also need) get those error messages are shown above.
      My pfsense is running 2.2 and i upgrade it after the issues to the new version 2.2.1 - but the problems sill exist.

      The following things do not fix the issue:

      • Deleting the new site-to-site connection
      • Deleting the old site-to-site connection and create it new

      Every Site-to-Site has his own PSK, but this can´t be the problem, doesn´t it?

      Thanks in advance

      1 Reply Last reply Reply Quote 0
      • S
        streetsfinest
        last edited by

        There are more informations from ipsec log:

        Mar 19 19:39:18 charon: 10[IKE] <con1000|5>giving up after 5 retransmits
        Mar 19 19:39:18 charon: 10[IKE] giving up after 5 retransmits
        Mar 19 19:39:18 charon: 10[IKE] <con1000|5>peer not responding, trying again (3/3)
        Mar 19 19:39:18 charon: 10[IKE] peer not responding, trying again (3/3)
        Mar 19 19:39:18 charon: 10[IKE] <con1000|5>initiating Main Mode IKE_SA con1000[5] to fritzbox-wan-ip
        Mar 19 19:39:18 charon: 10[IKE] initiating Main Mode IKE_SA con1000[5] to fritzbox-wan-ip
        Mar 19 19:39:18 charon: 10[ENC] generating ID_PROT request 0 [ SA V V V V V V ]
        Mar 19 19:39:18 charon: 10[NET] sending packet: from my-pfsense-wan-ip[500] to fritzbox-wan-ip[500] (200 bytes)
        Mar 19 19:39:21 charon: 10[IKE] <con2000|1>sending DPD request
        Mar 19 19:39:21 charon: 10[IKE] sending DPD request
        Mar 19 19:39:21 charon: 10[ENC] generating INFORMATIONAL_V1 request 2515535109 [ HASH N(DPD) ]</con2000|1></con1000|5></con1000|5></con1000|5>

        1 Reply Last reply Reply Quote 0
        • S
          streetsfinest
          last edited by

          I have fixed it. Just restart the Fritzbox. There was no issue in my config.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.