Messages

Hi all,

I am encountering this error trying to configure an OpenVPN client:

Code Select Expand

2022-09-03T18:36:09 Notice openvpn Exiting due to fatal error
2022-09-03T18:36:09 Error openvpn Cannot open TUN/TAP dev /dev/tun1: Device busy (errno=16)

I looked at this github issues:

• https://github.com/opnsense/core/issues/3223

and also these other thread:

• Cannot open TUN/TAP dev /dev/tun1: Device busy (errno=16)
• [SOLVED / bug found] OpenVPN - unable to contact Daemon
• [SOLVED / bug found] OpenVPN strange issue (Service not running according to messages, but it works)
• and some other

I can't find out why it is not working.
I checked with ps aux | grep openvpn and there are no running processes
I tried pkill -9 openvpn just in case, but did not help
I tried rebooting the box and did not help

Box is PC Engine APU2 (forgot which revision)

Running OPNsense 22.7.2-amd64

Should I open an issue on github?
Can somebody help me understand what I am doing wrong?

Thank you very much

I saw in NAT/One-To-One there is no virtual IPs.
But I think it should work if you add here the FO IP.

I have still not tested the outbound NAT of the FO IP.

Maybe I will test it next few hours and post a reply here.

(Now I am configuring OpenVPN with RSA ;D)

[/24]

Hi ovizii,

I am using soyoustart which is a branch of OVH and is very similar if not the same (I also have some experience using OVH).
I think I achieved what you are looking for using virtual IPs.

I have a Xen Server 6.5 which takes the primary ipv4.
Then I have 2 failover IP assigned to the same MAC address.

OPNsense is running as a VM inside Xen Server but it should be the same with vmware.

In OPNsense I assigned this very MAC address to the xn0 interface (WAN)
I then configured one of two FO IP to the WAN with /24 subnet (I will look if it is possible to add it as a /32, which I know is working using other firewall appliance) and configured the upstream gateway with .254 ending.

Enabled NAT and internal VM were able to browse internet.

Then I wanted to assign the second FO IP to a specific VM.
I simply added it under Virtual IPs with /32 mask.

I was then able to specify this Virtual IP in NAT/Port Forward and it does work.

There are a lot to improve in my config but I started using OPNsense yesterday, so....