OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: mrunkel on October 26, 2017, 04:52:15 pm

Title: Problem with IPSec config save on a brand new 17.7.7 installation
Post by: mrunkel on October 26, 2017, 04:52:15 pm
Hi there, brand new OPNsense user, but long time M0n0wall user and former employee over at Untangle.  My problem isn't with IPSec, but rather with the WebUI/config.

When I try to configure an IPSec tunnel it doesn't save, even though I get the blue message "The IPsec tunnel configuration has been changed...."  I've looked at /usr/local/etc and ipsec.conf is blank and config.xml contains no references to the data I input.

All other settings did save, so I know it's not a disk writing issue.

Any pointers at what I can look at to figure out the root cause? (ie, where does the GUI code log?)
Title: Re: Problem with IPSec config save on a brand new 17.7.7 installation
Post by: franco on October 26, 2017, 05:00:42 pm
Hi and welcome!

On the bottom of the tunnel settings page, there is an "Enable IPsec" checkbox. Maybe that was missed?

From a quick glance on a new install this works fine, Phase 1 saved ok.


Cheers,
Franco
Title: Re: Problem with IPSec config save on a brand new 17.7.7 installation
Post by: mrunkel on October 26, 2017, 05:06:46 pm
Thanks for the quick response!

No, I tried it by checking it and not checking it.

If I click Enable IPsec and click "Save" the page reloads and Enable IPsec is unchecked.

If I click Enable IPsec and then click + to add a tunnel, it still doesn't save.

If I don't click Enable IPsec and click + to add a tunnel, no joy.
Title: Re: Problem with IPSec config save on a brand new 17.7.7 installation
Post by: mrunkel on October 26, 2017, 05:07:56 pm
The one "odd" thing I have currently is that my LAN is disconnected as I'm just testing.
Title: Re: Problem with IPSec config save on a brand new 17.7.7 installation
Post by: mrunkel on October 26, 2017, 05:11:44 pm
Ok. I found the problem!
Quote
Oct 26 17:05:25 dus-rtr opnsense: /vpn_ipsec.php: WARNING: User mrunkel may not write config (user-config-readonly set)

Sorry to waste your time.
Title: Re: Problem with IPSec config save on a brand new 17.7.7 installation
Post by: franco on October 26, 2017, 05:39:18 pm
That makes sense. ;D


Cheers,
Franco