IPsec binding to wrong interface

[bndt206]

Hi,

I'm having difficulty controlling what policies my IPsec's are hitting.

I have the following networks/interfaces:
WAN x.x.x.x/27
LAN 192.168.0.0/24
DMZ 192.168.140.0/24
GUEST 192.168.10.0/24

IPsec1 = 192.168.6.0/24
IPsec2 = 10.10.100.0/24

I've attached three screenshots, the first shows the traffic from IPsec1 appears to originate from GUEST, thus hitting the "Guest - WiFi" policy. I then disabled the GUEST interface and then traffic now appears to come from DMZ and is hitting my "default" policy. So finally disable DMZ interface and now traffic is comming from LAN interface and not hitting any policy.




When going from LAN to IPsec network, the traffic goes to WAN.



Whats going on???, cause this is really concusing.

[bndt206]

Still suffering from the issue :-(

Has no one seen this behaviour or have been able to replicate it?

I don't understand why traffic physically originating on the WAN interface destined for the LAN interface, is looped over a third interface. The IPsec has been working solidly since I started with untangle and broke after I upgraded from 16.5.2 to 16.6.1.

/Peter

[bndt206]

After upgrading to 17.0.0 the issue has gone and every thing is back to normal.

/Peter