Ryan good morning,
Tweaked yes, I haven't recreated it from scratch no. I'll do that
and see if it's repeatable. I'm currently dealing with racoon stealing all
available CPU and not negotiating any phase1/2 connections (site to site).
The interesting this is when doing packet captures on the ipsec interface
and internal interfaces I don't see any traffic engressing. I have a permit
any any rule for IPsec traffic and am accepting ESP and isakmp on both wan
interfaces. Thanks for the reply Ryan, I hope you enjoyed your vacation ;-)
-W
Wade Blackwell
Solutions Architect
(D) 805.457.8825
(C) 805.400.8485
(S) coc.wadeblackwell
On Mon, Jun 16, 2014 at 7:33 PM, Ryan Coleman <[email protected]> wrote:
> Since no one has responded to you and I was on vacation when you sent the
> first message I will ask the obvious:
> Have you removed the configuration, recreated and seen it continue?
>
> On Jun 16, 2014, at 12:00, Wade Blackwell <[email protected]> wrote:
>
> Anyone?
>
> -W
>
> Wade Blackwell
> Solutions Architect
> (D) 805.457.8825
> (C) 805.400.8485
> (S) coc.wadeblackwell
>
>
> On Sun, May 25, 2014 at 11:21 AM, Wade Blackwell <[email protected]> wrote:
>
>> Good morning all,
>> I'm running 2.1.2-RELEASE (i386)nanobsd 4g (Netgate) and the Z10
>> is running 10.2.1.2228. I used the following link
>> <https://doc.pfsense.org/index.php/Mobile_IPsec_on_2.0>. it appeared to
>> work fabulously until I attempted to pass traffic which I could not.
>> Advanced outbound nat is being used and the road warrior IPsec subnet is
>> included for both Wan interfaces (dual wan setup and working. Another very
>> strange side effect is the Z10 is spawning many IPsec sessions, current
>> count is 212;
>>
>>
>>
>> . Has anyone seen this behavior? I don't see a route to the Road Warrior
>> subnet or client IP when the phone is connected (172.31.2./24 is the
>> subnet allocated). Any feedback would be great, thanks so much!
>>
>> -W
>>
>> Wade Blackwell
>> Solutions Architect
>> (D) 805.457.8825
>> (C) 805.400.8485
>> (S) coc.wadeblackwell
>>
>
> _______________________________________________
> List mailing list
> [email protected]
> https://lists.pfsense.org/mailman/listinfo/list
>
>
>
_______________________________________________
List mailing list
[email protected]
https://lists.pfsense.org/mailman/listinfo/list