I have set up a distributed network as in the figure below. The subnet x.15.x is a remote subnet, connected to the internal LAN via IPsec VPN. The Firewall has 3 interfaces, one connected to the net, one connected to the x.2.x subnet and one connected to x.3.x subnet.
- When I ping 192.168.3.25 from 192.168.2.10 I get a response.
- When I try and ping 192.168.3.25 on it's external IP address from 192.168.15.50 I get a response.
- When I try and ping it from a client on the IPsec connection (e.g. 192.168.15.50) I get a request timed out.
Am I missing a principal of IPsec networking? How can I get it to send data to the x.3.x subnet?
The firewall is a pfSense, and the servers are Windows Server 2008 R2. The tunnel is a IPsec tunnel through the internet.