IPsec migration: Tunnel Settings to new Connections

[TimmiORG]

Hi OPNsense,

I'm looking into the migration of my IPsec configuration to the new IPsec Connection interface.

Tunnel connection looks OK but I don't get any traffic through it. I remembered that the "Tunnel Isolation" was required in the past but I don't find a way to configure this on the new interface.

Any advice?

Best regards
Christoph

[franco]

Well, tunnel isolation only works of you have at least two phase 2 and one tunnel should always work (normally only the last one).

In the connections the situation is a bit more specific: clone the connection itself and only use one child per connection.


Cheers,
Franco

[TimmiORG]

Hi Franco,

I have multiple phase twos. But I manage to get it working with the new connections interface.
Have somehow the feeling that I had to delete the old phase 2 from the old tunnel as well as there have been some old SPD entries.

Now the new configuration is working.

Best regards
Christoph