Project

General

Profile

Search

Results (116)

Bug #16881 (Feedback): Auto-added routes for IPsec remote gateways are not removed after P1 deletion for any interface assigned to "wan"
A route is automatically added for remote gateways of IPsec P1 entries. These routes are only removed when deleting the IPsec P1 configuration if the P1 interface is assigned to something other than @wan@ (e.g. @opt1@). 06/08/2026 10:25 PM
Feature #16880 (Feedback): Extend the LAN bypass option for IPsec to all LAN subnets
The option "Auto-exclude LAN address" at VPN > IPSec > Advanced Settings only applies to a single ... auto-exclude subnets from any LAN interface. 06/08/2026 10:20 PM
Bug #16868 (Confirmed): Static route with Ali ... lf in the routing table under some conditions
Steps to reproduce the issue: 1) HA cluster with a routed IPSec to a remote host. IPSec tunnel source IP is the CARP; 2) Firewall alias type Network with some network in it; 3) routed IPSec assigned as the interface, resulting gateway ... ith type Network, with gateway set as routed IPSec unmonitored gateway; 5) the route is instal ... walls attached CARP: 192.168.254.33 Routed IPSec gateway: 10.15.0.1 Firewall alias with type ... s_dst_route Static route: to 192.168.33.0/24 06/05/2026 11:53 AM
Bug #16833 (New): UDP Socket Binding Failure / "Network Error" on VTI Interfaces with BGP
Environment: OS/Software: pfSense 2.8.1 / ... 14-STABLE based) Networking: Route-based IPsec (VTI) with BGP (via FRR) Hardware: Bare-m ... Firewall rules are set to "Pass" on both the IPsec and assigned VTI tabs (rule bytes increment, ... Error" despite a valid route in netstat -rn. 05/09/2026 02:12 PM
Bug #16764 (Incomplete): IPSec VTI assigned interfaces generating an incorrect table for /32 addresses
If I create an IPSEC VTI tunnel and assign it as interface using ... interface network table in pf would be /30. 03/27/2026 06:40 PM
Todo #16707 (Feedback): Improve gateway status consistency
Currently there are several places where the ... ateway status is consistent across all pages. 02/18/2026 10:30 PM
Regression #16649 (New): dpinger (gateway montoring) fails for IPv6 on VTI routed IPSec causing false gateway‑down and internal block rules
h1. Environment * *Site A* : pfSense CE 2.8.0 * IPsec Phase 1: IPv4 * Phase 2 (VTI): * IPv4 VTI: ... 7‑CE. h1. Steps to Reproduce # Create an IPsec tunnel between pfSense 2.8‑CE and 2.7‑CE # ... irewall logs show: <pre> Block OFFICELINK_IPSEC gateway monitoring (1000006961) fd00:1::2 ... rce Address” field for dynamic VTI gateways 01/19/2026 10:56 PM
Bug #16532 (New): The calculation of online leases IPs is incorrect.
Hi, PfSense Plataform: CE 2.8.0 and 2.8.1 *The generated list by the Status/IPsec/Leases page appears to be including clients ... 26 online 'johnk' *Comparison:* Status/IPsec/Leases page output: 200 leases on line sw ... STABLISHED | wc -l 121 Thanks, Geovane 11/11/2025 09:35 PM
Bug #16454 (Feedback): IPv6 CARP events initiated by HA/pfsync
Hello, I've just upgraded from a very old ... ses, ca, cert, crl, dhcpd, dnshaper, filter, ipsec, nat, openvpn, schedules, shaper, unbound, w ... php (pfsense.restore_config_section). </pre> 09/29/2025 01:22 PM
Feature #16438 (New): IPSEC VPN - support VTI tunnel to other firewall that doesn't do selector narrowing
Currently, whenever you try to create a vti IPSEC tunnel to another firewall pfSense automatic ... fication: <pre> diff --git a/src/etc/inc/ipsec.inc b/src/etc/inc/ipsec.inc index ba66ff9195..9f5c106ff8 100644 --- a/src/etc/inc/ipsec.inc +++ b/src/etc/inc/ipsec.inc @@ -2361,8 +2361,8 @@ function ipsec_setup_vtireq(& $child, & $ipsec_vti_cleanup_ifs, $p1, $reqid = 0) } /* This interface will be a valid IPsec interface, so remove it from the cleanup list. */ $ipsec_vti_cleanup_ifs = array_diff($ipsec_vti_cleanup_ifs, array(ipsec_get_ifname($p1, $reqid))); - $child[' ... ion (checkbox, etc) and submit it for review. 09/20/2025 03:16 AM
(1-10/116)