Van: [email protected] [mailto:[email protected]] Namens D C Verzonden: donderdag 29 augustus 2013 15:04 Aan: pfSense support and discussion Onderwerp: Re: [pfSense] Remove a single ip from ipsec Thanks, Dan On Thu, Aug 29, 2013 at 8:58 AM, Jochem de Waal <[email protected]> wrote: I'm running into a funny but annoying situation. I have an ipsec tunnel setup between two pfsense boxes. The tunnel is working great, and I am allowing my office's /24 network to access a remote datacenters /24 public ips through the vpn. The problem is that we have one ip (.103) on the remote network which I need to NOT go through the vpn. I've tried playing with static routes, and firewall redirects but had no luck. How can i exclude a single ip from the ipsec phase2 entry? Am I going to have to break my phase 2 entry into multiple entries so that I can skip over this one ip, or is there a better way? Thanks, Dan Van: [email protected] [mailto:[email protected]] Namens D C Verzonden: donderdag 29 augustus 2013 14:56 Aan: [email protected] Onderwerp: [pfSense] Remove a single ip from ipsec Create a Block rule on IPSEC above the allow rule This would be ideal, but I don't see an option to do this. I'm using pfsense 2.0.1-RELEASE amd64 Cheers, Jochem _______________________________________________ List mailing list [email protected] http://lists.pfsense.org/mailman/listinfo/list Dan, You could also Block the traffic at the remote site from entering the tunnel by putting a block rule on the LAN interface for this single IP to the segment you would like to block the access to. Jochem
_______________________________________________ List mailing list [email protected] http://lists.pfsense.org/mailman/listinfo/list
