We have pfSense 2.60 with one ip public
We have a working ipsec tunnel to a customer FortiGate
I need to be able to force routing of packets to/from 10.68.245.200/29 via ipsec interface
we cannot ping 10.68.245.201 from pfSense shell and customer's IT service is NOT blocking pings
Narrowed question: What step should I do to be route traffic to/from 10.68.245.200/29 via ipsec ?
More general goal: I need all traffic from every and each hosts directed to 10.68.245.200/29 must be routed via ipsec tunnel.
I was supposing to find IPSec as interface to be used as a gateway, but in the route definition panel I can see only WAN, LAN1 and LAN2, no ipsec.
All other traffic must be routed (as actually) via WAN
I cannot use VTI, because 3rd party doesn't allow it
I cannot change the customer's policy about phase 2.
I need to resolve only by my side
- I have to force traffic to be routed to ipsec if target net matches, second,
- And I must translate ip from local to assigned ips when usin ipsec and/or when target net matches
I have no idea on how to do both.
Please, so, explain my the first: What step should I do to be route traffic to/from 10.68.245.200/29 via ipsec ?
pfSense itself is not able to ping 10.68.245.201 How can I be able to allow pfSense to ping 10.68.245.201 ?
- I need to exit through ipsec
- I need to present pfSense using an ipaddress in 10.68.245.192/29