IPsec is going crasy

[sainar]

Colleagues, please help i cannot understand the situation.

I have configured an IPv4 tunnel from Host A to host B
all configs on both sides are identical.
So, what happen exactly Ipsec is connected and all working fine accept that it`s working one way only,
like from side A to B all good (all services are working) from side B (Nothing work) no ping no RDP!
and the most interesting thing it goes down but on IPsec=>Status overview all good
what can it be?

[Patrick M. Hausen]

Firewall rules on the LAN interfaces of both locations, please.

[ianch]

Hi

if the IPsec tunnel is up and connected this sounds more like a routing issue.

I am assuming side A is a completely different subnet to side B?

On both sides have you checked the routing table such that the device on side B has a route to the subnet on side A, and visa versa the device on side A has a route to the subnet on side B?

[sainar]

IPsec rules
Protocol   Source     Port   Destination   Port     Gateway          
IPv4          ICMP     *         *              *   wan_gateway               
IPv4          TCP/UDP     *         *              *   wan_gateway               
IPv4 *   IPsec net     *         *                 *   wan_gateway   

LAN rules
Default

WAN
Protocol        Source        Port    Destination     Port   
IPv4 ESP        IPsec net    *          WAN address   *
IPv4 TCP/UDP IPsec net       *          WAN address   500 (ISAKMP)
IPv4 TCP/UDP IPsec net       *          WAN address   4500 (IPsec NAT-T)
 

[schnipp]

Maybe its a similar issue like I had in the past.

https://forum.opnsense.org/index.php?topic=32997.0

Are the communication endpoints on dedicated clients or on the VPN endpoints (opnsense) itself?

[sainar]

Thanks for answer yeah maybe you are right.
but i manage to make it work and when i changed the server hardware the appeared once more.