Messages

Hi All,

I have a need to configure a VIP on an IPSec VTI, however, when I do this, I cannot see this VIP in the ipsecX interface, nor can I use the VIP in a (S/D)NAT policy. The configured VIP also does not respond to ICMP from the LAN (when an allow all policy exists on the LAN).

Are VIPs on VTI with the new IPSec implementation supported?

Any pointers will be greatly appreciated.

Thanks

Thank you for providing that clarity! Will have another go at it.

Hi All,

pfSense has the following configuration option that allows the filtering to be done on the VTI and that also support NAT on the VTI.

PFsense IPsec Filter Mode

Can someone please tell me what is the equivalent option in 25.7.x and the new VPN/IPsec implementation?

Many Thanks