RE: [pfSense Support] vpn pass thru problem

2009-06-25 Thread Guruprasad-Baysoft
I am using safenet softremote LT client software. My customer sent the security policy editor config file. So i just imported that in my safenet vpn client software and using. Hence i donot know what is the remote vpn server i am connecting to. My doubt is whether i need to explicitly configure

Re: [pfSense Support] Cvstrac-Bug 1932 patch

2009-06-25 Thread Chris Buechler
On Wed, Jun 24, 2009 at 8:22 AM, Aarno Aukiaaarnoau...@gmail.com wrote: Hi, Attached a patch against 1.2.3-rc1 fixing http://cvstrac.pfsense.com/tktview?tn=1932, which was opened by a co-worker of mine while I was on vacation. Let me know if de patch fails against cvs/git. I'll have to

Re: [pfSense Support] vpn pass thru problem

2009-06-25 Thread Chris Buechler
On Thu, Jun 25, 2009 at 1:59 AM, Guruprasad-Baysoftg...@baysoft.in wrote: I am using safenet softremote LT client software. My customer sent the security policy editor config file. So i just imported that in my safenet vpn client software and using. Hence i donot know what is the remote vpn

Re: [pfSense Support] PFSense 1.2.3RC1 / Problems with IPSEC and AES256

2009-06-25 Thread Chris Buechler
On Tue, May 26, 2009 at 5:42 AM, Benjamin Frommebenjamin.fro...@login-online.de wrote: Hi List, we have several tunnels between some pfsense 1.2.2 boxes. For phase 2 we have configured AES256 as the only encryption algorithm and everything works fine. Now we upgrade one of the boxes to

Re: [pfSense Support] PFSense 1.2.3RC1 / Problems with IPSEC and AES256

2009-06-25 Thread Ho Sy Tan
I run pfSense-1.2.3-RC1 (FreeBSD 7.1), IPSec with IKE P2 AES 256, it work fine. On Thu, Jun 25, 2009 at 2:13 PM, Chris Buechler c...@pfsense.org wrote: On Tue, May 26, 2009 at 5:42 AM, Benjamin Frommebenjamin.fro...@login-online.de wrote: Hi List, we have several tunnels between some

[pfSense Support] Interface wierdness

2009-06-25 Thread Curtis Maurand
have a public IP on em1 I have a private IP on em2 (10.0.1.10/24) I have a private ip on OPT1 (10.201.17.1/28) Normally I would have the OPT interface in a DMZ, but constraints aren't allowing me to do that so the OPT1 interface is also plugged in on the local LAN as well. I've assigned a

Re: [pfSense Support] Interface wierdness

2009-06-25 Thread Tim Nelson
- Curtis Maurand cmaur...@xyonet.com wrote: have a public IP on em1 I have a private IP on em2 (10.0.1.10/24) I have a private ip on OPT1 (10.201.17.1/28) Normally I would have the OPT interface in a DMZ, but constraints aren't allowing me to do that so the OPT1 interface is also

[pfSense Support] Multiple WANs on a Single Bridge

2009-06-25 Thread Joseph Hardeman
Hi Everyone, I have been trying to figure out how to setup multiple wan networks on a single bridge. For instance: 111.111.111.111/25 - em0/bridge0/opt1 - internal servers 222.222.222.222/25 - em0/bridge0/opt1 - internal servers I see a way to add a virtual IP in the Firewall section,

Re: [pfSense Support] Interface wierdness

2009-06-25 Thread Curtis Maurand
Tim Nelson wrote: - Curtis Maurand cmaur...@xyonet.com wrote: have a public IP on em1 I have a private IP on em2 (10.0.1.10/24) I have a private ip on OPT1 (10.201.17.1/28) Normally I would have the OPT interface in a DMZ, but constraints aren't allowing me to do that so the OPT1

Re: [pfSense Support] Multiple WANs on a Single Bridge

2009-06-25 Thread Chris Buechler
On Thu, Jun 25, 2009 at 3:43 PM, Joseph Hardemanjharde...@colocube.com wrote: Hi Everyone, I have been trying to figure out how to setup multiple wan networks on a single bridge. For instance: 111.111.111.111/25  - em0/bridge0/opt1 - internal servers 222.222.222.222/25  - em0/bridge0/opt1 -

[pfSense Support] CARP and Bridging

2009-06-25 Thread Joseph Hardeman
One other question now that I think of it. Does CARP work between two firewalls that are running in full Bridge mode, no NATing done at all, just port blocking on the WAN interface? We have two firewalls and I want to make sure any states are kept intact on the chance we have to failover to

Re: [pfSense Support] Multiple WANs on a Single Bridge

2009-06-25 Thread Joseph Hardeman
Chris, Thanks for your reply, I found this out earlier today. Yes, all of the gateways are outside of the firewall so when I changed the IP on my laptop after getting the firewall upgraded it was able to get out with no problem. Again, thank you for your reply. I appreciate it. Joe