31
Tutorials and FAQs / Need help with IPSec and Windows machines
« on: October 15, 2019, 02:24:10 am »
I posted in the 19.7 production forum but looks like people are posting questions here as well so I figured it couldn't hurt since I am completely stuck.
I've also posted on the reddit which includes screen shots here:https://www.reddit.com/r/OPNsenseFirewall/comments/dhjwwz/need_some_ipsec_help_pretty_please/
Basically I'm trying to setup IPSec and have it work with Windows 10 clients, and I am failing miserably. I followed the guide on the wiki, but when I try to connect from my friends laptop (using teamviewer for the remote session) I can't even see the traffic from her public IP hit my firewall.
Key points:
- I followed this guide: https://wiki.opnsense.org/manual/how-tos/ipsec-rw-srv-mschapv2.html
- I downloaded the CA from the firewall and installed it on the client laptop
- I'm using DDNS so people can use a name to reach my public IP. This has worked flawlessly before with other setups
- I can't see the traffic in the live firewall logs when I try to make the connection from my friends laptop
I am assuming I'm doing something stupid, or missing something, but I've been at it for 2 days straight and I'm just lost. Please let me know if I can provide further screen shots or information beyond what is posted in the reddit thread if it will help.
Thank you in advance.
I've also posted on the reddit which includes screen shots here:https://www.reddit.com/r/OPNsenseFirewall/comments/dhjwwz/need_some_ipsec_help_pretty_please/
Basically I'm trying to setup IPSec and have it work with Windows 10 clients, and I am failing miserably. I followed the guide on the wiki, but when I try to connect from my friends laptop (using teamviewer for the remote session) I can't even see the traffic from her public IP hit my firewall.
Key points:
- I followed this guide: https://wiki.opnsense.org/manual/how-tos/ipsec-rw-srv-mschapv2.html
- I downloaded the CA from the firewall and installed it on the client laptop
- I'm using DDNS so people can use a name to reach my public IP. This has worked flawlessly before with other setups
- I can't see the traffic in the live firewall logs when I try to make the connection from my friends laptop
I am assuming I'm doing something stupid, or missing something, but I've been at it for 2 days straight and I'm just lost. Please let me know if I can provide further screen shots or information beyond what is posted in the reddit thread if it will help.
Thank you in advance.