No traffic from one pfSense to another

cyberfinn

Hey

Running two pfSense instances. Running a IPSec tunnel between the two sites.

pfSense 1:
LAN: 10.10.0.0/16

IPSec phase 2:
Local Network
Type: Network
Address: 10.10.0.0/16

Remote network:
Type: Network
Address: 10.0.0.0/15

pfSense 2:
LAN: 10.0.0.0/15

IPSec phase 2:
Local Network:
Type: Network
Address: 10.0.0.0/15

Remote network:
Type: Network
Address: 10.10.0.0/16

The problem is that pfSense 1 can't connect to anything on the 10.0.0.0/15 subnet. All clients/servers on 10.10.0.0/16 can.
pfSense 2 can connect/ping on the 10.10.0.0/16

There is a allow all for IpSec in both boxes.

How to debug this behavior?

kapara

Post screenshots of phase 1/2 for both masking confidential IP info. Without more info it is difficult to guess and more info means quicker resolution.

Derelict

And I'll say it. /15 and /16? Really?

Hopefully you're subnetting those out to hundreds of sites.