[Solved] IPsec: Ping/connection Issues

[jke]

Hi everyone,

i have a IPsec tunnel between my two OPNsense applicances.
It seems to be up and running.
My problem is, from hosts on Site A, i can ping the OPNsense appliance (on the LAN interface) on Site B and vice versa, but from the OPNsenses themselves i cant ping any host (also not the LAN IP of the OPNsenses) on the other side of the tunnel.
I followed the official tutorial for Policy based public key setup.

Does anyone know, how to solve the issue?

[Ralf Kirmis]

Hi,
you have to specify the source IP, which the ping command uses.
On cli use the "-S SRCIP" option on the ping command.
In your case you must set the LAN IP from your source opnsense gateway.

regards,
Ralf

[jke]

Ahh, thanks for your help.
I tried it via the WebUI in The Interface->Diagnostics->Ping menu.
When i do it directly from the console (with the -S flag) it seems to work fine.

[jke]

Do you know, if there is a way to set a "default value" for this?
I want to have a HAProxy on Site B to reverse proxy servers on Site A.

Edit: This post solved my Problem https://forum.opnsense.org/index.php?topic=21553.0