Re: [pfSense Support] ipsec woes

2008-05-13 Thread Chris Buechler
On Tue, May 13, 2008 at 6:47 AM, Jure Pečar <[EMAIL PROTECTED]> wrote: > > > I solved office1 to office2 with openvpn, now I want to figure out the > problem between office1 and servers. > > I monitored the ipsec logs on both pfsenses at the time when ssh session > freezes and nothing shows up

Re: [pfSense Support] ipsec woes

2008-05-13 Thread Jure Pečar
On Thu, 8 May 2008 16:23:28 -0700 "David Rees" <[EMAIL PROTECTED]> wrote: > > office1 to servers: works, but typing 'dmesg' or something else with lots > > of output freezes the ssh session over it. It never freezes if left idle. > > Sshing to the same machine over public ip does not exhibit this

Re: [pfSense Support] ipsec woes

2008-05-12 Thread Jure Pečar
On Mon, 12 May 2008 11:14:20 +0200 Jure Pečar <[EMAIL PROTECTED]> wrote: > I'll try to set up a tunnel at office2 back to office1 and see what > I get. Nothing really - I just figured out that what I see in pfsense gui is not always what is in the config files. But after I manually fixed racoon

Re: [pfSense Support] ipsec woes

2008-05-12 Thread Jure Pečar
On Fri, 9 May 2008 12:31:41 -0700 "David Rees" <[EMAIL PROTECTED]> wrote: > On Fri, May 9, 2008 at 2:01 AM, Jure Pečar <[EMAIL PROTECTED]> wrote: > > May 9 10:30:20 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does > > not already exist: "192.168.1.0/24[0] 192.168.111.0/24[0] proto=any

Re: [pfSense Support] ipsec woes

2008-05-09 Thread David Rees
On Fri, May 9, 2008 at 2:01 AM, Jure Pečar <[EMAIL PROTECTED]> wrote: > Of course. Let's debug one by one. This is office1->office2): > > on office1 i see: Looks fairly normal. > ... and on office2 side i see: > > May 9 10:30:20 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does > not a

Re: [pfSense Support] ipsec woes

2008-05-09 Thread Jure Pečar
On Thu, 8 May 2008 16:23:28 -0700 "David Rees" <[EMAIL PROTECTED]> wrote: > What version of pfSense? 1.2 everywhere. > What do you mean "goes blank"? 100% packet loss. > Going to need logs. Of course. Let's debug one by one. This is office1->office2): on office1 i see: May 9 10:30:20 rac

Re: [pfSense Support] ipsec woes

2008-05-08 Thread David Rees
On Thu, May 8, 2008 at 1:24 PM, Jure Pečar <[EMAIL PROTECTED]> wrote: > I inherited three pfsense setups at three locations of the same company. > pfSense itself is working perfectly well, only the ipsec is causing the > troubles. What version of pfSense? > office1 to office2: works most of the t

[pfSense Support] ipsec woes

2008-05-08 Thread Jure Pečar
Helo, I inherited three pfsense setups at three locations of the same company. pfSense itself is working perfectly well, only the ipsec is causing the troubles. Description: office1 - two modern PCs, 20/20mbit link, carp setup office2 - two older PCs, 60/20 link, carp setup servers - two modern