Messages

it could be greate because i stop use it since i cannot find how to configure interfaces using failover ip. I got DMZ / LAN + net interfaces but don't find any way to use failover

I've successfully doing it on ipfire but on OPNsense never find the way to doing it if anybody got news about that :(.

I don't know how to use ip failover as ip for net routing to my lan subnet on nic 1 & 2

Hello,

Yesterday i've installed acme plugin & configure everything to create the let's encrypt certificate. Everthing was good, the certificate was created.

Code Select Expand

[Sun Feb 19 18:09:06 CET 2017] code='201'
[Sun Feb 19 18:09:06 CET 2017] 9:Le_LinkCert='https://acme-v01.api.letsencrypt.org/acme/cert/030338cf168be280c0e2cad02e854077f7e9'
[Sun Feb 19 18:09:06 CET 2017] Cert success.
[Sun Feb 19 18:09:06 CET 2017] Your cert is in  /var/etc/acme-client/home/mywebsite.com/mywebsite.com.cer
[Sun Feb 19 18:09:06 CET 2017] Your cert key is in  /var/etc/acme-client/home/mywebsite.com/mywebsite.com.key
[Sun Feb 19 18:09:06 CET 2017] 6:USER_PATH='/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin'
[Sun Feb 19 18:09:06 CET 2017] 10:Le_LinkIssuer='https://acme-v01.api.letsencrypt.org/acme/issuer-cert'
[Sun Feb 19 18:09:06 CET 2017] GET
[Sun Feb 19 18:09:06 CET 2017] url='https://acme-v01.api.letsencrypt.org/acme/issuer-cert'
[Sun Feb 19 18:09:06 CET 2017] timeout
[Sun Feb 19 18:09:06 CET 2017] _CURL='curl -L --silent --dump-header /var/etc/acme-client/home/http.header '
[Sun Feb 19 18:09:07 CET 2017] ret='0'
[Sun Feb 19 18:09:07 CET 2017] The intermediate CA cert is in  /var/etc/acme-client/home/mywebsite.com/ca.cer
[Sun Feb 19 18:09:07 CET 2017] And the full chain certs is there:  /var/etc/acme-client/home/mywebsite.com/fullchain.cer
[Sun Feb 19 18:09:07 CET 2017] 11:Le_CertCreateTime='1487524147'
[Sun Feb 19 18:09:07 CET 2017] 12:Le_CertCreateTimeStr='Sun Feb 19 17:09:07 UTC 2017'
[Sun Feb 19 18:09:07 CET 2017] 13:Le_NextRenewTimeStr='Thu Apr 20 17:09:07 UTC 2017'
[Sun Feb 19 18:09:07 CET 2017] 14:Le_NextRenewTime='1492621747'
[Sun Feb 19 18:09:07 CET 2017] _on_issue_success
[Sun Feb 19 18:09:07 CET 2017] 15:Le_RealCertPath='/var/etc/acme-client/certs/58a873e9882b51.33727695/cert.pem'
[Sun Feb 19 18:09:07 CET 2017] 16:Le_RealCACertPath='/var/etc/acme-client/certs/58a873e9882b51.33727695/chain.pem'
[Sun Feb 19 18:09:07 CET 2017] 17:Le_RealKeyPath='/var/etc/acme-client/keys/58a873e9882b51.33727695/private.key'
[Sun Feb 19 18:09:07 CET 2017] 18:Le_ReloadCmd=''
[Sun Feb 19 18:09:07 CET 2017] 19:Le_RealFullChainPath='/var/etc/acme-client/certs/58a873e9882b51.33727695/fullchain.pem'
[Sun Feb 19 18:09:07 CET 2017] Installing cert to:/var/etc/acme-client/certs/58a873e9882b51.33727695/cert.pem
[Sun Feb 19 18:09:07 CET 2017] Installing CA to:/var/etc/acme-client/certs/58a873e9882b51.33727695/chain.pem
[Sun Feb 19 18:09:07 CET 2017] Installing key to:/var/etc/acme-client/keys/58a873e9882b51.33727695/private.key
[Sun Feb 19 18:09:07 CET 2017] Installing full chain to:/var/etc/acme-client/certs/58a873e9882b51.33727695/fullchain.pem

But this morning, dramaaaaaaa !!! when i configure in Administration -> Settings -> Https & let's encrypt my website for the SSL. The gui was lost and impossible to recover it through LAN or WAN. any idea or how i can reactivate http config to recover the gui ?

Bonjour,

Hier tout se passait bien en ssl & co, j'ai décidé d'installer le plugin acme pour bénéficier d'un certificat let's encrypt.

Jusque là tout se passe bien mon certificat est bien créé et reconnu :

Code Select Expand

[Sun Feb 19 18:09:06 CET 2017] code='201'
[Sun Feb 19 18:09:06 CET 2017] 9:Le_LinkCert='https://acme-v01.api.letsencrypt.org/acme/cert/030338cf168be280c0e2cad02e854077f7e9'
[Sun Feb 19 18:09:06 CET 2017] Cert success.
[Sun Feb 19 18:09:06 CET 2017] Your cert is in  /var/etc/acme-client/home/mywebsite.com/mywebsite.com.cer
[Sun Feb 19 18:09:06 CET 2017] Your cert key is in  /var/etc/acme-client/home/mywebsite.com/mywebsite.com.key
[Sun Feb 19 18:09:06 CET 2017] 6:USER_PATH='/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin'
[Sun Feb 19 18:09:06 CET 2017] 10:Le_LinkIssuer='https://acme-v01.api.letsencrypt.org/acme/issuer-cert'
[Sun Feb 19 18:09:06 CET 2017] GET
[Sun Feb 19 18:09:06 CET 2017] url='https://acme-v01.api.letsencrypt.org/acme/issuer-cert'
[Sun Feb 19 18:09:06 CET 2017] timeout
[Sun Feb 19 18:09:06 CET 2017] _CURL='curl -L --silent --dump-header /var/etc/acme-client/home/http.header '
[Sun Feb 19 18:09:07 CET 2017] ret='0'
[Sun Feb 19 18:09:07 CET 2017] The intermediate CA cert is in  /var/etc/acme-client/home/mywebsite.com/ca.cer
[Sun Feb 19 18:09:07 CET 2017] And the full chain certs is there:  /var/etc/acme-client/home/mywebsite.com/fullchain.cer
[Sun Feb 19 18:09:07 CET 2017] 11:Le_CertCreateTime='1487524147'
[Sun Feb 19 18:09:07 CET 2017] 12:Le_CertCreateTimeStr='Sun Feb 19 17:09:07 UTC 2017'
[Sun Feb 19 18:09:07 CET 2017] 13:Le_NextRenewTimeStr='Thu Apr 20 17:09:07 UTC 2017'
[Sun Feb 19 18:09:07 CET 2017] 14:Le_NextRenewTime='1492621747'
[Sun Feb 19 18:09:07 CET 2017] _on_issue_success
[Sun Feb 19 18:09:07 CET 2017] 15:Le_RealCertPath='/var/etc/acme-client/certs/58a873e9882b51.33727695/cert.pem'
[Sun Feb 19 18:09:07 CET 2017] 16:Le_RealCACertPath='/var/etc/acme-client/certs/58a873e9882b51.33727695/chain.pem'
[Sun Feb 19 18:09:07 CET 2017] 17:Le_RealKeyPath='/var/etc/acme-client/keys/58a873e9882b51.33727695/private.key'
[Sun Feb 19 18:09:07 CET 2017] 18:Le_ReloadCmd=''
[Sun Feb 19 18:09:07 CET 2017] 19:Le_RealFullChainPath='/var/etc/acme-client/certs/58a873e9882b51.33727695/fullchain.pem'
[Sun Feb 19 18:09:07 CET 2017] Installing cert to:/var/etc/acme-client/certs/58a873e9882b51.33727695/cert.pem
[Sun Feb 19 18:09:07 CET 2017] Installing CA to:/var/etc/acme-client/certs/58a873e9882b51.33727695/chain.pem
[Sun Feb 19 18:09:07 CET 2017] Installing key to:/var/etc/acme-client/keys/58a873e9882b51.33727695/private.key
[Sun Feb 19 18:09:07 CET 2017] Installing full chain to:/var/etc/acme-client/certs/58a873e9882b51.33727695/fullchain.pem


Le drame apparaît ce matin quand dans la partie administration je set let's encrypt en certificat SSL pour la partie SSL, paf j'ai depuis perdu l'accès la console aussi bien en wan qu'en lan via tunnel ssh... Une idée de comment récupérer la main ?

did you find any solution ?

I've tried to install firewall as vm as pfsense or ipfire based on freebsd :(. But when i try to config the WAN (em0) using an IP Failover for WAN access impossible to configure it.

Does anyone know how i can configure em0 to use IP Failover on a proxmox ?