IPSec vpn between two IPFire devices

Virtual Private Networks IPsec
1

Hello, all. I have made an IPSec vpn between two IPFire, the connections are green. this working.
I can ping the LAN ip address of the second IPFire (10.0.0.1) = gateway. this is working.
But when I ping a Linux server ip 10.0.0.138 I have no response so the connection between 10.0.0.1 and 10.0.0.138 is not working. And in the list of DHCP is standing IP 10.0.0.138
when I log in the IPFire as root and from there do I a Ping to 10.0.0.138 than I have a response.
IPFire version 2.27 (x86_64) - core-Update 171

C:\Users******>tracert 10.0.0.1

Tracing route to 10.0.0.1 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms ipfire.domain.local [192.168.0.231]
2 14 ms 14 ms 14 ms 10.0.0.1

Trace complete.

C:\Users******>tracert 10.0.0.138

Tracing route to 10.0.0.138 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms ipfire.domain.local [192.168.0.231]
2 60 ms 62 ms 65 ms 10.0.0.1
3 * * * Request timed out.
4 * * * Request timed out.
5 * * * Request timed out.
6 * * * Request timed out.
7 * * * Request timed out.

2

Hi @firewall.

if you have the same IPS range on both Green Interfaces, you can have overlap. To avoid this, you should put one interface in the 1.0.0.x range and another in the 10.0.1.x range and configure everything accordingly.

Perhaps this is not your problem and you have misunderstood the statement. English is not my native language.

Surely someone who knows more can shed some light for us.

Regards

3

should this be the 10.0.0.x range ?

1 Like
4

Opsss. Wrong write. Thanks @jon for your correction :wink:

1 Like
5

My fault. :hot_face:
I’ve edited the title and some text ( IP address according to the rest of the post ). Hope my corrections didn’t make more confusion.

1 Like
6

It’s not the Green Interfaces, I ment the status of the vpn is active.

vpn
vpn837×92 9.63 KB

7

@firewall :
Could you describe a bit more your configuration?
How are the two local networks?
How is the IPSec network configurated?

Not using some VPN networking, it would help to have some topics to search to assist you.

1 Like
8

Exoscale
Exoscale1074×705 71.5 KB

maybe that will make it clearer.

2 Likes
9

Did you add firewall rules for vpn <–> green network on both firewalls to allow trafic?

1 Like
10

Thanks for support but I found the problem.
I have to configure the NAT.

2 Likes
11

Could you show the result of the command ip route on Linux server 10.0.0.138 ?

12

We are having a similar problem, can you outline each rule you had to adjust/create to make it work?