Re: [pfSense] newbie question

2015-03-23 Thread Steve Yates
Pol Hallen wrote on Mon, Mar 23 2015 at 5:09 am: adsl -- server1 -- WAN pfsense (2 NICs) LAN -- internal lan (I known that pfsense should be after adsl modem) does ipsense runs correctly with this configuration? WAN to server1 LAN1 to internal lan or I must add a third NIC and

Re: [pfSense] 2.2.1 Site-to-Site IPsec VPN Connection Instability

2015-03-23 Thread mayak
On 03/22/2015 12:38 AM, Bryan D. wrote: We've had a pfSense-to-pfSense always on IPsec VPN connecting 2 offices since 2008 (pfSense 1.2 IIRC) and it's: - been ultra reliable (if VPN is down, suspect ISP issue or pfSense box failure) - it's been quick to connect (about 1 second, almost

[pfSense] newbie question

2015-03-23 Thread Pol Hallen
Hi all :-) my lan (for purpose testing): adsl -- server1 -- WAN pfsense (2 NICs) LAN -- internal lan (I known that pfsense should be after adsl modem) does ipsense runs correctly with this configuration? WAN to server1 LAN1 to internal lan or I must add a third NIC and connect LAN1 to

Re: [pfSense] 2.2.1 Site-to-Site IPsec VPN Connection Instability

2015-03-23 Thread Justin Edmands
I am having issues as well. 2.0.0 -- 2.0.3 works fine. Upgraded to 2.2.1 and the connection always fails within 24 hours. Please let me know how the 2.2.1 x 5 setup works. On Mon, Mar 23, 2015 at 1:40 PM, Jeremy Bennett jbenn...@hikitechnology.com wrote: Yes. I have 5 sites (of various 2.0+

Re: [pfSense] ipsec and multi-wan

2015-03-23 Thread Chris Buechler
On Thu, Mar 19, 2015 at 12:48 PM, Gregory K Shenaut gkshen...@ucdavis.edu wrote: Hi, I have a system with two sites. One of the sites has two WAN connections, the other one. I have an IPSEC tunnel passing all traffic between the two sites. I'm having some difficulty with site-to-site access.

Re: [pfSense] 2.2.1 Site-to-Site IPsec VPN Connection Instability

2015-03-23 Thread Bryan D.
FWIW, since my original report, I've noticed some other things: - since it's not yet deployed, the v2.2.1 (at both ends) site-to-site IPsec VPN has only 1 laptop and 1 wireless access point on the LAN and virtually nothing else happening on the WAN (it's tied to a cable modem) - the condition,

Re: [pfSense] 2.2.1 Site-to-Site IPsec VPN Connection Instability

2015-03-23 Thread Chris Buechler
There's nothing to go on to offer any worthwhile suggestions. IPsec logs best place to start. On Mon, Mar 23, 2015 at 6:02 PM, Bryan D. pfse...@derman.com wrote: FWIW, since my original report, I've noticed some other things: - since it's not yet deployed, the v2.2.1 (at both ends)

Re: [pfSense] 2.2.1 Site-to-Site IPsec VPN Connection Instability

2015-03-23 Thread Bryan D.
On 2015-Mar-23, at 5:24 PM, Chris Buechler c...@pfsense.com wrote: There's nothing to go on to offer any worthwhile suggestions. IPsec logs best place to start. If you can be more specific, I'll try to help. Sorry, but I don't have enough background with IPsec to ferret things out on my

Re: [pfSense] CARP failover works but it only fails back the LAN

2015-03-23 Thread Steve Yates
I am not sure this is related but it is weird/bad...I got around to setting the skew back to 0 for all CARP IPs on router1. pfSense (2.2.1) syncs the change to router2 so those skews change from 101 to 100. However afterwards router1 shows all five as Status of Master, and router2

Re: [pfSense] ipsec and multi-wan

2015-03-23 Thread Gregory K Shenaut
On Mar 23, 2015, at 17:31 , Chris Buechler c...@pfsense.org wrote: On Thu, Mar 19, 2015 at 12:48 PM, Gregory K Shenaut gkshen...@ucdavis.edu wrote: Hi, I have a system with two sites. One of the sites has two WAN connections, the other one. I have an IPSEC tunnel passing all traffic

Re: [pfSense] Locked myself out by disabling LAN

2015-03-23 Thread RB
On Mon, Mar 23, 2015 at 9:05 PM, Jean-Stéfane Bergeron j...@jsbergeron.ca wrote: I'm on the road for another two weeks - is there anyway I can re-enable my lan or connect to my router remotely to restore access? Or am I pooched until I can get back to my router physically? Without one of

[pfSense] Locked myself out by disabling LAN

2015-03-23 Thread Jean-Stéfane Bergeron
Good evening everyone, I ran into a problem with my pfsense install today. I'm connecting remotely over a VPN connection to my network. For some reason, all my local devices became inaccessible today. My VPN connection still can connect to my network. When I logged into my router, I noticed