Re: [pfSense] IPSec not routing traffic over tunnel

2018-02-08 Thread Eero Volotinen
Well. Maybe You need to hire pfsense consultant with NDA, so you can unmask needed information. Usually there is no need to NAT in ipsec as you can tunnel private network/ip address too and limit access with firewall rules. Eero On Thu, Feb 8, 2018 at 9:42 PM, Roland Giesler

Re: [pfSense] IPSec not routing traffic over tunnel

2018-02-08 Thread Roland Giesler
On 8 February 2018 at 20:40, Eero Volotinen wrote: > how about not masking ip addresses? > I'm not allowed to show the ip addresses (by my client), hence the masking... I thought I need NAT, but I also testing simply added the virtual ip, a.a.a.a as the address, but it

Re: [pfSense] IPSec not routing traffic over tunnel

2018-02-08 Thread Eero Volotinen
how about not masking ip addresses? do you really need nat in phase 2 ? why? Eero 8.2.2018 18.17 "Roland Giesler" kirjoitti: > I'm trying to find a solution and know there are quite a few pfSense users > here, so here goes... > > We've set up some IPSec tunnels and

[pfSense] IPSec not routing traffic over tunnel

2018-02-08 Thread Roland Giesler
I'm trying to find a solution and know there are quite a few pfSense users here, so here goes... We've set up some IPSec tunnels and they connect. The Phase2 also "comes up", but we can't reach the hosts specified in the Phase2 "remote network". One instance (to keep it simpler): WAN gateway: