OPNsense Forum

Archive => 16.7 Legacy Series => Topic started by: Space on October 01, 2016, 11:24:28 am

Title: [SOLVED] IPsec stopped working with 16.7.5
Post by: Space on October 01, 2016, 11:24:28 am

Hi,

I have been using IPsec to connect some Android devices via VPN to my intranet and this worked fine with 16.7.4. But after the update it does not work any more. In the log file I see errors like these:

Code: [Select]

Oct 1 11:14:30 charon: 13[IKE] no shared key found for '192.168.21.1'[192.168.21.1] - 'user@spacenet'[192.168.21.102]
Oct 1 11:14:30 charon: 13[IKE] <con1|33> no shared key found for '192.168.21.1'[192.168.21.1] - 'intra@spacenet'[192.168.21.102]
Oct 1 11:14:30 charon: 13[CFG] selected peer config "con1"
But in Phase 1 Proposal a PSK is configured. I have not touched the IPsec config inbetween. Any idea what might cause this?

Thanks and best regards,

    Jochen

Title: Re: IPsec stopped working with 16.7.5
Post by: AdSchellevis on October 01, 2016, 11:36:16 am

Hi Jochen,

Your experiencing the same issue as https://forum.opnsense.org/index.php?topic=3740 (https://forum.opnsense.org/index.php?topic=3740), the easiest work-around is to add the psk from your mobile connection manually in vpn_ipsec_keys.php.

Use 0.0.0.0 as identifier.

A fix is already in our codebase and will probably be available in the next release.

Best regards,

Ad

Title: Re: IPsec stopped working with 16.7.5
Post by: Space on October 01, 2016, 12:18:26 pm

Hi Ad,

I had checked that thread but obviously missed the solution ... ok, it's not urgent for me so I will probably wait for the next release.

Thanks and best regards,

   Jochen

Title: Re: IPsec stopped working with 16.7.5
Post by: Space on October 01, 2016, 12:21:19 pm

Correction: workaround is too simple to wait ... I added the key and it works.

Thanks and best regards,

   Jochen

Title: Re: IPsec stopped working with 16.7.5
Post by: franco on October 01, 2016, 01:45:53 pm

I've queued all of this up for 16.7.6, you can apply the patch[1] by running the following command:

# opnsense-patch 23d1e0ff0ca


Cheers,
Franco

[1] https://github.com/opnsense/core/commit/23d1e0ff0ca

Title: Re: [SOLVED] IPsec stopped working with 16.7.5
Post by: Space on October 01, 2016, 10:39:38 pm

Hi,

I can confirm that it's working after applying the patch with removed workaround.

Thanks and best regards,

    Jochen