Messages

16

23.1 Legacy Series / Re: FreeRADIUS EAP-GTC Google LDAP

« on: March 06, 2023, 08:30:27 pm »

Actually I just noticed they are 2 parts for freeradius on my OPNsense.
- Plugin: os-freeradius version: 1.9.21_2
- Package: freeradius3 version 3.2.1_1

Did I install too much or one installed the other?
Should that work with Google?

I am still running OPNSense 22.7.11_1 for the time being until the 23.1 bugs are squished enough

17

23.1 Legacy Series / Re: FreeRADIUS EAP-GTC Google LDAP

« on: March 06, 2023, 08:05:12 pm »

Hi,
I am in the process of doing the same.
What's missing in the OPNSense UI for you to make it work the same way?
Is freeradius version 3.0 what's needed to make it work?

On my side,
I have FreeRadius + Unifi working with locally defined users in the OPNSense/FreeRadius service.
Google LDAP works fine with OPNSense System/Access/Server.
But the same LDAP config in FreeRadius doesn't work.
I was blaming my lack of understanding of the User Filter and Group filter that should be used. But maybe it's just the freeradius version?

18

General Discussion / Re: Authentication LDAP

« on: March 04, 2023, 07:27:35 pm »

hello, sorry I don't have an answer for you but I am interested in how you set OPNSense up to make it talk to Secure LDAP properly?
I am having trouble so far. It seems stunnel is working fine but auth can't connect to the ldap server. I don't see documentation for that with OPNsense, just with pfsense.
Do you mind sharing your config of Google, stunnel and the OPNSense authentication server?
Sorry for high jacking your thread/question.


Solved my issue.

19

22.7 Legacy Series / Re: Weird issue with OPNVPN when not on the 1994 port, and Log Live View

« on: September 24, 2022, 08:44:29 pm »

It was clearly just a case of me needing new glasses, sleep and food....
        

Got everything working as expected!

20

22.7 Legacy Series / Weird issue with OPNVPN when not on the 1994 port, and Log Live View

« on: September 24, 2022, 09:35:50 am »

Hello,
I've used OPNSense (and before that pfsense) for many years and have setup multiple OPNVPN servers in the past without problems.
I have installed the latest stable version recently at my new work to support 20 people or so on the network.

While configuring OPNVPN tonight I ran into a weird issue.
My WAN has a main IP, and an Alias IP. My VPN will run on that Alias.

One VPN is on the standard port 1994. One is on another port (1995, 1996 or 1999).
Similar Firewall rules for both on the WAN interface, just the ports differ.

I saw 2 issues tonight:

First one:
- the one on 1994 works perfectly.
- the one on the other port (I tried 1995,1996,1999 just cause I really don't know what's going on) doesn't work.

I see that the firewall blocks the traffic by looking at the Log Live View. It says "Default deny / state violation rule", which is coming from the rule in the Floating section I assume?
But I tried many different crazily permissive Firewall rules on those 3 ports, same protocol, Interface IP etc... I recreated the VPNs multiple times from zero and the firewall rules. So either I am very good at redoing the same mistake over and over again or there is something I don't see somewhere. Any clue where to look? It doesn't seem to be a problem with the VPN configuration per se, cause the traffic is completely blocked before it hits it. Only way to make it work if I recall, was to allow all ports on the WAN interface IPs. I tried the same setup on the primary IP of the WAN interface, same problem.

Second issue :
is in the Live View (maybe related to my problem above?).
When I was filtering the logs using dst_port is "1995" (1996 or 1999), protoname is udp,  no lines were showing up. But without the filter I could see those red lines among the traffic. If I use another port number, I can see the conresponding traffic (the 1994, or any other ports). The filtering problem was always with the lines with port of the problematic VPN. Very helpful to me to debug as if can imagine

So I don't know what kind of bugs I ran into tonight but I need a break now...
Any insight on where to look to understand what can be wrong here? most probably my setup. 
I need to sleep on this

21

Hardware and Performance / Re: Topton N5105 based system

« on: September 07, 2022, 07:42:13 pm »

That sounds strange - the manufacturer says that the hardware is verified to run with OpnSense and you say it works under Proxmox (so no hardware defect).

Did you try under Proxmox first and restored a backup of your OpnSense settings from that installation under your bare-metal OpnSense install? In that case, the interface names do not match. You would have to re-assign the logical interfaces to physical ones via the console menu.

Normally, there is nothing to worry about with these systems - the I225 ports are detected automagically.

It is indeed strange.
PFsense and OPNsense were both tested bare metal installed from a USB stick freshly created from the latest images available online last week.
Is there a way to force the interface to 2.5Gb or to 1Gbps from the CLI ?

I'll try one last time, otherwise I'll stick to using proxmox and dedicating the PCI device to the OPNsense VM.
If the performance is not bad, it's a nice way to get snapshotting capability too!

22

Hardware and Performance / Re: Topton N5105 based system

« on: September 03, 2022, 12:08:30 am »

May I ask how you got OPNsense working?
I have a similar N5105 based PC with 6 ports in my case. Unfortunatelly on OPNsense/pfSense, the cables are not detected, no link up.

For instance on Proxmox it works though.

I've tried the latest 22.7 version from end of July.

that's my hardware
https://www.amazon.com/gp/product/B0B2JXQS1K/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&th=1

23

22.1 Legacy Series / noob question - how to investigate a kernel panic?

« on: February 18, 2022, 01:02:51 am »

Hello everybody,
I am a total newbie on opnsense after many years on pfsense.
I started a few weeks ago, running 22.1 on an old but good spec for opnsense Xeon E5-2665 (16 cores) with 64G of RAM, 500G of SSD

OPNSense is used so far for very light traffic from 1G WAN to 1G LAN, 5 OpenVPN users.
for v4 and v6. It was very reliable.

Unfortunately, it crashed earlier today showing just a kernel panic on the screen.
I don't have more info so far.
A reboot fixed the problem.

Is there a way to find out more, like a crash dump or something? I couldn't find anything on disk or in the logs.

Thanks