Messages

Thanks for clarification

Will do  :)

Arg, thanks, absolutely correct. Used always nping for that.

Would still be nice to be freely set a source ip at "Interfaces: Diagnostics: Ping".

Hi,

is there any tool for opnsense equal to e.g. nping to forge the source ip for testing via icmp?

Thanks,
Thomas

Hi,

when we go to /status_graph.php, Report Traffic and select IPSec, the top list is empty, although traffic is active.
Anyone experiencing the same issue?

Settings the Interface to e.g. LAN works fine, and the top list is shown.

Thx

Thx, then we have to go the default way.

yes, we also used it for that. Maybe @Franco can enlighten us?

Could we maybe work with "Manual SPD entries"?

Strongswan automatically creates SPD policies for the networks defined in this phase2. If you need to allow other networks to use this ipsec tunnel, you can add them here as a comma seperated list.

Thanks, not really what we expected.

The VPN "partner" insists on every single small subnet routing

We have 10 subnets on left and 12 subnets on right. How to add that via the GUI, when for every SPD the local network and the remote network must be entered?

left and right subnets, quite a lot - would be at the ipsec.conf just two lines.

Hi,

we have for one VPN connection many subnets to route and via GUI its hard to add them.

Is it possible to edit directly the ipsec.conf or where is OPNsense storing its own configuration for strongswan?

Thanks

Hi,

we are running our OPNsense on Hyper-V for month, and every x weeks, the GUI is no longer working and access via ssh is broken (seems the ssdh daemon is down).

Firewall routing is still fine, also openswan is working as expected.

So far we also cant login via console, it hangs after entering "root" for the login.

The console output only shows:

hvvss0: Unknown opt from host: 4

Did anyone experience a similar behavior?

OPNsense version = 18.7.5

Thanks,
Thomas

Hi,

we setup OPNsense (latest version of today) with OpenVPN, which works fine so far.

OpenVPN -> Servers -> Server Certificate, we use the internal OPNsense for "Server Certificate".

Error on the windows client:

Code Select Expand


Jun 09 14:46:41: OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed


Client: openvpn-install-2.4.6-I602.exe, latest version from openvpn.net. Same issue with Viscosity as openvpn-client.

Solution: On client export use "Inline Configuration", "other" and NOT Archive.

Hopefully also for someone else.

Best