OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 16.1 Legacy Series »
  • [SOLVED] OPENVPN Daemon won't start
« previous next »
  • Print
Pages: [1]

Author Topic: [SOLVED] OPENVPN Daemon won't start  (Read 7852 times)

Julien

  • Hero Member
  • *****
  • Posts: 646
  • Karma: 32
    • View Profile
[SOLVED] OPENVPN Daemon won't start
« on: July 12, 2016, 11:23:54 am »
Hi Guys,
is there is away to start the openvpn daemon without have to reboot the firewall ?
i keep click on Play but it won't start.

thank you
« Last Edit: July 16, 2016, 09:12:48 pm by franco »
Logged
An intelligent man is sometimes forced to be drunk to spend time with his fool.

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12575
  • Karma: 1073
    • View Profile
Re: OPENVPN Daemon won't start
« Reply #1 on: July 12, 2016, 04:33:59 pm »
Are you talking about the OpenVPN status page on 16.7.r1?

If yes, please apply this patch:

# opnsense-patch 0ba0986a
Logged

Julien

  • Hero Member
  • *****
  • Posts: 646
  • Karma: 32
    • View Profile
Re: OPENVPN Daemon won't start
« Reply #2 on: July 12, 2016, 06:57:37 pm »
no i am on this production 16.1.
can i apply the same patch on 16.1 ?
i hope you can reply tonight so i can apply and if needed to reboot the firewall as there is no one on production.

thank you
« Last Edit: July 12, 2016, 08:24:04 pm by Julien »
Logged
An intelligent man is sometimes forced to be drunk to spend time with his fool.

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12575
  • Karma: 1073
    • View Profile
Re: OPENVPN Daemon won't start
« Reply #3 on: July 12, 2016, 10:29:07 pm »
No, this is for 16.7 only. The OpenVPN log file can help you pinpoint your issue. It won't start because it's misconfigured (setting missing or typo in one of the fields that is not caught by the GUI).
Logged

Julien

  • Hero Member
  • *****
  • Posts: 646
  • Karma: 32
    • View Profile
Re: OPENVPN Daemon won't start
« Reply #4 on: July 12, 2016, 11:05:47 pm »
Quote from: franco on July 12, 2016, 10:29:07 pm
No, this is for 16.7 only. The OpenVPN log file can help you pinpoint your issue. It won't start because it's misconfigured (setting missing or typo in one of the fields that is not caught by the GUI).
if i disable the openvpn server the daemon stops, after i enable it it won't starts.
where can i see the logs ? maybe update to 16.7 would fix the issue ?
those are the logs i could find about the openvpn.

Jul 11 18:26:39 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:34 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:34 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:28 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:28 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:22 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:22 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:17 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:17 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:11 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:11 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:10 opnsense: /index.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:10 opnsense: /index.php: The command `/sbin/ifconfig 'openvpn'' failed to execute



i noticed the Disable hardware checksum offload is not selected, do i have to select this or is just on a virtual appliance ?
i am using the A10 hardware .
« Last Edit: July 12, 2016, 11:28:23 pm by Julien »
Logged
An intelligent man is sometimes forced to be drunk to spend time with his fool.

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12575
  • Karma: 1073
    • View Profile
Re: OPENVPN Daemon won't start
« Reply #5 on: July 13, 2016, 11:42:44 am »
This is the wrong log. It's under VPN: OpenVPN: Log file.
Logged

Julien

  • Hero Member
  • *****
  • Posts: 646
  • Karma: 32
    • View Profile
Re: OPENVPN Daemon won't start
« Reply #6 on: July 13, 2016, 12:09:09 pm »
thank you Franco,
i thought i saved the log but somehow it didn't save the right log.
below is the correct log :

Jul 13 04:12:39 openvpn[71203]: Use --help for more information.
Jul 13 04:12:39 openvpn[71203]: Options error: --server directive network/netmask combination is invalid
Jul 13 04:10:37 openvpn[27735]: Use --help for more information.
Jul 13 04:10:37 openvpn[27735]: Options error: --server directive network/netmask combination is invalid
Jul 12 20:11:56 openvpn[64920]: Use --help for more information.
Jul 12 20:11:56 openvpn[64920]: Options error: --server directive network/netmask combination is invalid
Jul 12 19:36:25 openvpn[65363]: Use --help for more information.
Jul 12 19:36:25 openvpn[65363]: Options error: --server directive network/netmask combination is invalid
Jul 12 19:35:08 openvpn[17316]: Use --help for more information.
Jul 12 19:35:08 openvpn[17316]: Options error: --server directive network/netmask combination is invalid


i've noticed the tunnel IP was wrong,  now is fixed .
thank you Franco,
one last questions,
i have 6 VLANS now, i want one VLAN5 to be blocked accessing the other VLANS,
i want to do the next
creating a  group interfaces and add the VLANS 1,2,3,4,6 and call it Productions
Create a group interface and add VLAN5 to it and Call it guest.
on the firewall Production create a rules to block source production , destination Guest and the opposite

would fix this ?

thank you
« Last Edit: July 13, 2016, 12:13:35 pm by Julien »
Logged
An intelligent man is sometimes forced to be drunk to spend time with his fool.

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12575
  • Karma: 1073
    • View Profile
Re: OPENVPN Daemon won't start
« Reply #7 on: July 16, 2016, 09:12:36 pm »
Hi Julien,

Yes you can do "Interfaces: Other types: Groups" to do what you said and apply policies for these interface groupings.


Cheers,
Franco
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 16.1 Legacy Series »
  • [SOLVED] OPENVPN Daemon won't start
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2022 All rights reserved
  • SMF 2.0.18 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2