No very nice solution, but making a in /usr/local/etc/rc.d with lines:

sleep 40
ipsec stop
sleep 5
ipsec start

All goes OK.

For some reason, traffic FROM LAN to LAN IP of pfSense try to go via IPSEC 
TUNNEL ( first time after rebooting........ Strange.

Lic. Nicolas A. Fabris
Seguridad Informática
Gcia. De Procesos y Sistemas
OO4312-2500 Int. 3119

-----Mensaje original-----
De: List [] En nombre de Marcio Vogel 
Merlone dos Santos
Enviado el: martes, 29 de marzo de 2016 03:12 p.m.
Asunto: Re: [pfSense] 2.2.6 - Lost LAN conection when IPSEC tunnel is conected 
only first time booting

Em 23-03-2016 11:03, Marcio Vogel Merlone dos Santos escreveu:
> Em 15-03-2016 11:14, Nicolas Fabris escreveu:
>> I have an strange issue.
>> Details:
>> LAN IP pfSense:
>> TUNNEL IPSEC: Phase 2
>> Local Network LAN Subnet
>> Remote Network
>> Advanced setting Enable bypasslan for LAN........ checked.
>> When IPSEC tunnel is on, I lost ping from LAN to LAN IP 
>> (, something like traffic going to 10.x.x.x. is tryning 
>> to go by IPSEC TUNNEL I think............, and not working OK the 
>> bypass for LAN option.
>> If I restart ipsec services, have no more problems, but have to do 
>> this manually every time after reboot.
> Bizarre, as is my situation.
> I have a remote site connected by a ipsec tunnel to my main office, 
> both using pfSense 2.2.6. Whenever the tunnel disconects for whatever 
> reason, after some seconds all local stations on remote site are also 
> disconnected (Windows reports network cable unpluged, "X" mark on 
> network icon near the clock!) for some seconds and then reconnects 
> happily as if nothing happened.
> Just observed that yesterday after many user complains and am starting 
> to scratch my head now.
> This looks very similar to your problem, I don't have a solution yet.

For the record and my shame, I have an IP Phone between that specific station 
and the network. When VPN goes down the phone looses connection with the office 
and then... reboots, causing the disconnection of the station.

Check if your case has any similarity.

Best regards and good luck.

*Marcio Merlone*
pfSense mailing list
Support the project with Gold!
pfSense mailing list
Support the project with Gold!

Reply via email to