OPNsense Forum

English Forums => Virtual private networks => Topic started by: sadperson99 on November 01, 2023, 07:40:14 AM

Title: IPsec config is not generated
Post by: sadperson99 on November 01, 2023, 07:40:14 AM
Hello,

I have followed this guide:
https://forum.opnsense.org/index.php?topic=35840.0

But I can't seem to be able to start strong swan, when I check swanctl.conf it was empty !
I tried recreating the tunnel, I tried searching in the forums but I can't seem to find a solution.
Please help me and thank you for your time !

Best regards,
sadperson 99.
Title: Re: IPsec config is not generated
Post by: franco on November 01, 2023, 08:02:42 AM
It's probably not enabled? Check the bottom of the tunnel settings or connections page for the enable checkbox.


Cheers,
Franco
Title: Re: IPsec config is not generated
Post by: sadperson99 on November 01, 2023, 08:05:01 AM
Shame on me, that indeed was the case :(
Thank you very much !
Title: Re: IPsec config is not generated
Post by: franco on November 01, 2023, 08:06:28 AM
I'll make a ticket to maybe make this more prominent. It was mentioned to me again last week.


Cheers,
Franco
Title: Re: IPsec config is not generated
Post by: franco on November 01, 2023, 08:08:13 AM
FYI https://github.com/opnsense/core/issues/6973
Title: Re: IPsec config is not generated
Post by: bimbar on November 01, 2023, 01:02:13 PM
This is not the only one, HAProxy enable is also fairly well hidden.
Title: Re: IPsec config is not generated
Post by: netnut on November 13, 2023, 09:28:29 PM
Quote from: franco on November 01, 2023, 08:06:28 AM
I'll make a ticket to maybe make this more prominent. It was mentioned to me again last week.

Yes please, finally had some time to create the 'new' swanctl config style tunnels, took me an hour or so to realize I didn't checked the box...

If IPSec isn't enabled, the Start, Restart and Stop buttons aren't visible (Top Right Header). IMHO this might be a nice place for the enable checkbox. The checkbox itself maybe isn't the nicest visual element to have there, could be an iOS style like on/off switch/slider.