Messages

Hello,

I have setup an IPSec VPN between Debian 11 with Libreswan and my OPNsense box.

Phase 2 config is allowing one /24 subnet to talk to a remote /24 subnet.

So far, from the Libreswan side, I can ping and RDP to remote machines attached to the OPNSense LAN just fine.

However, there's no communication from OPNSense LAN to Libreswan LAN.

Only one side of the tunnel seems to work.

Libreswan configuration :

https://hastebin.milkywan.fr/isopitazit.apache

OPNSense configuration is the following.

IKEv2 Phase 1 :





Phase 2 :





Child SA status on OPNSense :



Routing table for remote Libreswan subnet from OPNSense :



Firewall configuration for IPSec interface :



Thank you.

Hello team,

I'm running OPNsense 20.1.4-amd64 on Proxmox.

I'm trying to setup IKEv2 with EAP-MSCHAPv2.

I'm following the official tutorial available here :
https://wiki.opnsense.org/manual/how-tos/ipsec-rw-srv-mschapv2.html#ipsec-setup-opnsense-for-ikev2-eap-mschapv2

Unfortunately, I cannot do the configuration mentioned in Step 3 because the Phase 2 creation button is missing from the GUI :



Are you aware if this bug yet ?

How can I solve this issue ?

Thank you very much.