Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-24 Thread Evgeny Yurchenko
Evgeny Yurchenko wrote: Evgeny Yurchenko wrote: Chris Buechler wrote: On Tue, Sep 22, 2009 at 11:10 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I can not ping 10.29.11.1 or 10.29.11.2 from any host connected to LAN pfSense1. Traffic does not go over IPSec but instead natted and goes

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-23 Thread Evgeny Yurchenko
Evgeny Yurchenko wrote: Chris Buechler wrote: On Tue, Sep 22, 2009 at 11:10 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I can not ping 10.29.11.1 or 10.29.11.2 from any host connected to LAN pfSense1. Traffic does not go over IPSec but instead natted and goes to Internet. On WAN (ng0):

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:32 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I know it looks stupid, but... 1.2.3-RC1 LAN=10.29.1.19/24 WAN(PPPoE)=x.x.x.106 remote LAN=10.29.11.1/24 remote WAN=x.x.x.225 Tunnel is up. When I do from pfSense itself ping -S 10.29.1.19 10.29.11.1

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Evgeny Yurchenko
Scott Ullrich wrote: That is normal. Traffic on the firewall itself prefers the system routing table. Clients behind the firewall will prefer the IPSEC tunnel. Pretty sure that is documented somewhere on the doc site. Scott So, it is impossible to use IPSec with PPPoE on WAN? Eugene

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:39 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: So, it is impossible to use IPSec with PPPoE on WAN? Eugene That would be news to me. It should work fine. Scott - To unsubscribe, e-mail:

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Evgeny Yurchenko
Evgeny Yurchenko wrote: Scott Ullrich wrote: That is normal. Traffic on the firewall itself prefers the system routing table. Clients behind the firewall will prefer the IPSEC tunnel. Pretty sure that is documented somewhere on the doc site. Scott So, it is impossible to use IPSec

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:46 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Then sorry Scott, I do not understand your statement: Traffic on the firewall itself prefers the system routing table.  Clients behind the firewall will prefer the IPSEC tunnel. In my case traffic initiated on the

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Paul Mansfield
On 22/09/09 17:36, Scott Ullrich wrote: That is normal. Traffic on the firewall itself prefers the system routing table. Clients behind the firewall will prefer the IPSEC tunnel. Pretty sure that is documented somewhere on the doc site. if you want connections initiated by the

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Evgeny Yurchenko
Scott Ullrich wrote: On Tue, Sep 22, 2009 at 12:46 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Then sorry Scott, I do not understand your statement: Traffic on the firewall itself prefers the system routing table. Clients behind the firewall will prefer the IPSEC tunnel. In my case

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Evgeny Yurchenko
Paul Mansfield wrote: On 22/09/09 17:36, Scott Ullrich wrote: That is normal. Traffic on the firewall itself prefers the system routing table. Clients behind the firewall will prefer the IPSEC tunnel. Pretty sure that is documented somewhere on the doc site. if you want

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Evgeny Yurchenko
Chris Buechler wrote: On Tue, Sep 22, 2009 at 6:36 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Paul Mansfield wrote: On 22/09/09 17:36, Scott Ullrich wrote: That is normal. Traffic on the firewall itself prefers the system routing table. Clients behind the firewall

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Chris Buechler
On Tue, Sep 22, 2009 at 11:10 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I can not ping 10.29.11.1 or 10.29.11.2 from any host connected to LAN pfSense1. Traffic does not go over IPSec but instead natted and goes to Internet. On WAN (ng0): 20:29:13.951253 IP x.x.x.106 10.29.11.1: ICMP

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Evgeny Yurchenko
Chris Buechler wrote: On Tue, Sep 22, 2009 at 11:10 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I can not ping 10.29.11.1 or 10.29.11.2 from any host connected to LAN pfSense1. Traffic does not go over IPSec but instead natted and goes to Internet. On WAN (ng0): 20:29:13.951253 IP