Hi OPNsense,
I'm looking into the migration of my IPsec configuration to the new IPsec Connection interface.
Tunnel connection looks OK but I don't get any traffic through it. I remembered that the "Tunnel Isolation" was required in the past but I don't find a way to configure this on the new interface.
Any advice?
Best regards
Christoph
Well, tunnel isolation only works of you have at least two phase 2 and one tunnel should always work (normally only the last one).
In the connections the situation is a bit more specific: clone the connection itself and only use one child per connection.
Cheers,
Franco
Hi Franco,
I have multiple phase twos. But I manage to get it working with the new connections interface.
Have somehow the feeling that I had to delete the old phase 2 from the old tunnel as well as there have been some old SPD entries.
Now the new configuration is working.
Best regards
Christoph