Messages

1

General Discussion / Re: Unable to start Flowd_aggregate service

« on: February 28, 2024, 10:00:11 am »

This worked for me as well.
Netflow was borked after it managed to go from normal to full disk in a day and I had to manually delete the log data to avoid a worse crash

flowd_aggregate.pid resides in /var/run

2

20.7 Legacy Series / Re: updating to 20.7.3 stopped at "reloading template wireguard"

« on: October 14, 2020, 01:46:01 pm »

I had exactly the same. 2.7.0 -> 2.7.3

Reboot from SSH and after that update from SSH. No issues now so far I can tell.

3

20.1 Legacy Series / Re: IPsec - missing automatic tunnel restarts

« on: September 23, 2020, 10:25:18 am »

I have noticed that even with DPD the tunnel sometimes just drops and will not come back, even with ongoing traffic just before the drop. Changing and saving the config does bring back the tunnel.

At one site I have parallel tunnels between Cisco devices and between OPNSense devices and the Cisco devices never drop while the OPNsense needs a bit of encouraging every once in a while.

4

20.1 Legacy Series / IPSec MTU issue

« on: June 30, 2020, 11:18:18 am »

Hello all,

I'm having an issue with a tunnel that seems to be MTU related.
Currently site A and site B are connected via Cisco hardware, everything works.
When I replace Site A with OPNSense the tunnel works, I can access certain devices on site B, but not everything works.
When checking MTU over the Cisco tunnel it gives me 1452 but via OPNSense it gives me 1500, irregardless of interface settings at either site A or B.
To test I have introduced site C to the mix, which can connect to site A via OPNSense but has the same problem to site B.
I suspect MSS clamping isn't working correctly for IPsec traffic.