2

I'm trying to create a VPN connexion between my firewall (a pfsense 2.0.1) and my Amazon Virtual Private Cloud (VPC). Amazon provides two peers endpoints to mount two IPsec tunnels on the same VPC.

At this moment, I'm able to mount an IPSec tunnel between my public IP and one of the Amazon endpoints. The idea is to avoid a "disconnection" on Amazon side in case of the main tunnel fails and to switch on a backup tunnel (failover on our side is managed with CARP).

I'm trying to mount two IPsec tunnels on the same pfsense gateway (one public IP), just like the following graph: a VPC

Is it possible to do so with pfSense?

a VPC

The full scenario with a cisco router example is available here: http://docs.aws.amazon.com/AmazonVPC/latest/NetworkAdminGuide/Cisco_NoBGP.html

Thank you in advance for your help,

Improve this question
1
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin ♦
    Commented Aug 10, 2017 at 4:55

1 Answer 1

Reset to default
2

I dont think it possible : Pfsense doc : Both locations must be using non-overlapping LAN IP subnets. And no "ip virtual-reassembly" seen.

btw, pfsense 2.0.1 is outdated, and more recent support IPSec+L2TP

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.