Messages

1

General Discussion / Re: Allow multicast between two NIC's / IP Ranges.

« on: August 22, 2024, 12:50:38 pm »

Thanks.

I think udpbroadcastrelay may be what I need.
I'll install it an see how I get on.

Regards

2

General Discussion / Allow multicast between two NIC's / IP Ranges.

« on: August 22, 2024, 09:34:13 am »

Hi,

My OPNsense is currently configured with multiple interfaces, I need to allow multicast between two of them.

LAN  192.168.1.x
OPT1 10.10.10.x ( wifi )

Routing of traffic between these interfaces is working well, but I have devices in both ranges that send and receive multicast so I need this to pass between the two.

Ideally I'd like to specify what multicast IP addresses and ports are allowed, but it's not an issue if I have to allow all multicast.

Can someone advise how to do this, or are there any guides on how to set this up.

Thanks.

3

21.7 Legacy Series / 21.7.2_1 flowd aggregate died

« on: May 01, 2022, 08:15:07 pm »

Hi,

My dashboard is showing Insight Aggregator as stopped.

Looking at: SYSTEM: LOG FILES: GENERAL I get:

Code: [Select]

flowd aggregate died with message Traceback (most recent call last): File "/usr/local/opnsense/scripts/netflow/flowd_aggregate.py", line 160, in run aggregate_flowd(self.config, do_vacuum) File "/usr/local/opnsense/scripts/netflow/flowd_aggregate.py", line 80, in aggregate_flowd stream_agg_object.add(copy.copy(flow_record)) File "/usr/local/opnsense/scripts/netflow/lib/aggregates/interface.py", line 75, in add super(FlowInterfaceTotals, self).add(flow) File "/usr/local/opnsense/scripts/netflow/lib/aggregates/__init__.py", line 185, in add self._update_cur.execute(self._update_stmt, flow) sqlite3.DatabaseError: database disk image is malformed
I've gone into REPORTING: SETTINGS and tried Repair Netflow Data, and then Reset Netflow Data.  Neither have made a difference.

Any idea how I resolve this ?

thanks.

4

21.7 Legacy Series / Re: Intermittent issue on all gateways when one has packet loss.

« on: March 18, 2022, 11:38:14 am »

Hi,

The checkbox is called 'Disable State Killing on Gateway Failure' that suggests ticking it will stop the states being killed.

However I may be misreading this !

5

21.7 Legacy Series / Re: Intermittent issue on all gateways when one has packet loss.

« on: March 18, 2022, 11:16:17 am »

Hi Franco,

I'm currently running OPNsense 21.7.2_1-amd64
I do plan to update either this afternoon or tomorrow.

I've ticked 'Kill states on gateway failure' and re enabled the Gateway Monitor and will see how things go.

Thanks

6

21.7 Legacy Series / Re: Intermittent issue on all gateways when one has packet loss.

« on: March 17, 2022, 08:40:15 pm »

Hi Franco.

Thanks for the reply.
I'm thinking about swapping the VPN back to the original server and see if I start getting packet loss again.

If I do are there any logs I can capture that may help narrow down what is happening ?

Thanks

7

21.7 Legacy Series / Re: Intermittent issue on all gateways when one has packet loss.

« on: March 17, 2022, 07:57:10 pm »

Hi

Has anyone any ideas on this ?
How can I find out what happens when one gateway has high packet loss ?

Thanks

8

21.7 Legacy Series / Intermittent issue on all gateways when one has packet loss.

« on: March 16, 2022, 09:42:01 am »

Hi

I had some strange network issues yesterday when one gateway had packet loss.

My WAN is PPPoE and I have a Wireguard VPN to Private Internet Access

OPT1 LAN - 192.168.1.x
OPT3 Wifi - 10.10.1.x

All LAN devices use the WAN as there default route, all wifi devices use the PIA wireguard VPN.
This is all working well and has been stable for quite a long time.

Yesterday all devices started having intermittent issues accessing the internet. My PC connected to the LAN had issues with putty sessions and SIP Phones which would disconnect and instantly re connect.  Ping would drop a couple of packets and then carry on as normal. My WAN connection has been up for 32+ days and all looks fine.

What I noticed was the PIA Gateway was reporting packet loss, once that hit 20% the PIA connection went down and the network devices, LAN & wifi, had a short session of issues.  Once PIA connected again it all worked fine until the next session of packet loss.

I disabled Gateway monitoring on the PIA gateway and that seemed to stop the issues. I've since changed the PIA server I connect to and that seems to have resolved the issue and Gateway monitoring is working fine.

While this was happening CPU usage on my firewall was around 10%, memory @ 6% and no issues with disk space.

Why would one gateway having packet loss affect another gateway ?
Any ideas how I can investigate this ?

Thanks

9

Virtual private networks / Script to setup and manage VPN like FingerlessGlov3s ?

« on: March 15, 2022, 10:10:29 pm »

Hi
I currently use the wireguard PrivateInternetAccess script from FingerlessGlov3s to manage my PIA connection.

I've started seeing a lot of packetloss regardless of which server I connect to, so I was hoping there may be a similar script for another VPN provider.

Is anyone aware of such a script ?

Thanks

10

General Discussion / WireGuard List Configuration

« on: May 06, 2021, 02:41:57 pm »

Hi,

Once a connection is established with WireGuard the peer appears with data in the List Configuration.

Once the connection has been terminated the peer remains and shows the same as when connected, but the
'latest handshake' time obviously increases.

Is there any way to reset the peer details when the client has disconnected and the latest handshake is above xx minutes ?

I think this would make it easier to see if the client is still connected to the server.

Thanks

11

Virtual private networks / WireGuard client not disconnecting.

« on: May 03, 2021, 09:00:09 pm »

Hi.

I've installed and configured WireGuard on my android phone. On the phone I enable the VPN and in OPNSense VPN / WireGuard / List Configuration I see my 4G IP Address showing and the VPN connection appears to be fine.

On the phone I disable the VPN, but List configuration shows it still active and data is still passing and I can connect via the VPN even though it is turned off on the phone.

On the handset how do I disable the VPN connection so it actually goes off ?

Thanks

12

Virtual private networks / Re: Create Remote Access VPN

« on: May 03, 2021, 08:40:23 pm »

I've gone through this again and now its working.
Looks like the issue was between the keyboard & the chair ! 

13

Virtual private networks / Create Remote Access VPN

« on: May 03, 2021, 01:58:57 pm »

Hi.
I'm trying to setup remote access into my LAN and have had no luck with openVPN or Wireguard.
Currently I have an IPSEC Site to Site VPN setup and a WireGuard VPN to PIA. These work fine.

I'm now trying to allow two users access into the LAN.

With openVPN when I ran through the wizard I got the following error:

Code: [Select]

Fatal error: Uncaught ArgumentCountError: Too few arguments to function cert_create(), 7 passed in /usr/local/etc/inc/plugins.inc.d/openvpn/wizard.inc on line 631 and exactly 8 expected in /usr/local/etc/inc/certs.inc:212 Stack trace: #0 /usr/local/etc/inc/plugins.inc.d/openvpn/wizard.inc(631): cert_create(Array, '608f2359d911a', '2048', '397', Array, 'sha256', 'server_cert') #1 /usr/local/www/wizard.php(155) : eval()'d code(1): step12_submitphpaction() #2 /usr/local/www/wizard.php(155): eval() #3 {main} thrown in /usr/local/etc/inc/certs.inc on line 212
I re tried and each time got the same error.

So I decided to try wireguard. I've followed this guide: https://www.youtube.com/watch?v=gNyIACWc60w and all seemed well but there was no connection. Looking in the logs I don't even see an attempt to connect. So I've removed the settings and tried again.

Following this guide https://www.youtube.com/watch?v=FglE8aQua5o, I can get so far, but when it shows the auto added WAN rule, that doesn't happen for me and I'm not sure what to add.

Does anyone have a guide to setup either openVPN or WireGuard so I can allow a couple of family members remote access ?

Thanks

14

Hardware and Performance / Re: J1900 is it suitable ?

« on: April 27, 2021, 12:36:43 pm »

Hi,

I've moved over to the GX-420CA box and all seems to be working fine.

Thanks

15

Virtual private networks / Re: Strange VPN issue.

« on: April 25, 2021, 05:26:32 pm »

This appears to be an MTU/MSS issue.
fingerlessglov3s has helped a lot and things are improving, but still having issues.