Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSEC manual failover adding an extra box

    Scheduled Pinned Locked Moved IPsec
    1 Posts 1 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rlustemberg
      last edited by

      After unsuccesfully trying to setup IPSEC tunnels on OPT interfaces, I decided for a quick fix: just setting up an extra pfsense box for having IPSEC tunnels.
      This is my setup:
      Main location:
      pfsense1 at 192.x.x.1:  WAN(ISP1) and WAN2(ISP2) , IPSEC tunnels to remote location through WAN. Default gateway for LAN

      pfsense2 at 192.x.x.1: WAN(ISP2), IPSEC tunnels to remote location are brought up manually when ISP1 goes down, bringing IPSEC connections on pfsense to a halt. This is an alternative gateway for LAN

      I created the tunnels, added static routes on pfsense1, allowed traffic through firewall rules. Nevertheless , when I connect through IPSEC to pfsense2 , I cannot ping to other hosts on the LAN, even if I put routing rules on the default gateway pointing to the remote network accessed through pfsense2 tunnel.

      Any ideas on how to setup routing rules properly?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.