Project

General

Profile

Actions
Copy link

Bug #4818

closed
MK CB

IPSec makes worse in some cases - since 2.2.3 Update

Bug #4818: IPSec makes worse in some cases - since 2.2.3 Update

Added by Marvin Kamm about 11 years ago. Updated about 11 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Chris Buechler
Category:
IPsec
Target version:
2.2.4
Start date:
07/06/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.2.3
Affected Architecture:
amd64

Description

Since updateing pfsense from V2.1.5 to V2.2.3, I´ve some issues with the IPsec VPN.
I´ve configured about 20 IPsec vpn connections to customers.

Four of them use Lancom routers for IPsec connections.
Exactly those four are not operational after updateing.

Connection parameters haven´t changed.
I tried to connect with 3DES encryption instead of AES but won´t work too.
Error I often see is "invalid ID_V1 payload length, decryption failed?".

Annexed an extract from the pfsense log.
I set IKE SA, IKE Child SA and Configuration backend in Diag mode at the IPsec Debug page.

Many Thanks!

Files

Download all files
IPsec_log.csv (25.8 KB) IPsec_log.csv Marvin Kamm, 07/06/2015 10:19 AM
IPsec_log1.csv (18.4 KB) IPsec_log1.csv Marvin Kamm, 07/07/2015 09:38 AM

CB Updated by Chris Buechler about 11 years ago Actions
Copy link
 #1

  • Status changed from New to Feedback

this likely overlaps with the changes made as part of fixing #4811, which some have confirmed fixed things for them that regressed from 2.2.2 to 2.2.3. Please try the latest 2.2.4 snapshot from https://snapshots.pfsense.org and report back.

MK Updated by Marvin Kamm about 11 years ago Actions
Copy link
 #2

Thanks for your quick response Chris!
I tried the last "nighty build" -> pfSense-Full-Update-2.2.4-DEVELOPMENT-amd64-20150706-2039.tgz.
Unfortunately my problem is not solved.
Still same behavior, vpn to lancom routers are not available, all other are OK.
Do you need further configs or logs?

JT Updated by Jim Thompson about 11 years ago Actions
Copy link
 #3

  • Assignee set to Chris Buechler

MK Updated by Marvin Kamm about 11 years ago Actions
Copy link
 #4

Since upgrading to pfSense-Full-Update-2.2.4-DEVELOPMENT-amd64-20150712-1215
I´m able to use all vpn tunnels again! Even to Lancom routers!

Thanks a lot!
#4818 can be closed!

CB Updated by Chris Buechler about 11 years ago Actions
Copy link
 #5

  • Status changed from Feedback to Resolved

fixed

Actions
Copy link

Also available in: Atom