Cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1

Raul Chiarella

2/15/24, 10:57 PM

As the title say, I cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1.

Phase 1 and Phase 2 is UP. Phase 2 Remote IP is 192.168.1.248 and Local IP is 172.16.250.10 (VIP)

I created a NAT 1:1 both on LAN interface and IPSec interface which says: External IP 172.16.250.10 (VIP...) Internal IP 192.192.168.1.253 (Actual pfSense IP)

To test this out I am trying only SSH at the moment. I created two rules on the Firewall, one for ICMP and one for SSH.

ICMP works fine - Not sure why. Here is the rule and the Packet Capture respectivelly, of the ICMP and the SSH:

Rules:

Packet Capture of the ICMP - Blurred some info because I am not sure what is it for...:

And here is a Packet Capture of a SSH attempt - Which is unsuccessful, with both a telnet test and SSH test itself on log:

As you can see, pfSense did not responded like when doing the ICMP. This also happens even if I allow all rules on IPSEC and LAN, and also happens in other services like Zabbix ports. For clarification: Yes, SSH is enabled.

I want to also inform beforehand that I created a static route for IN → OUT (Which works fine.)

I went here because I am really out of ideas and need some help. Can someone give me some light on this?

Thank you.

1 + 0

vpn

nat

ipsec

port-forwarding

pfsense

Score:0

Server

Raul Chiarella

6/30/24, 7:52 PM

Solution was to create a BINAT on one of the sides, in order to prevent conflict for networks with the same adresses ranges.

+ 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.