Messages

1

24.1 Legacy Series / RPKI Implementation

« on: June 30, 2024, 08:19:45 am »

As per the current OPNsense version 24.1.9, it appears that RPKI functionality is available on the platform:

In packages: rtrlib-0.8.0_1 - Open-source C implementation of the RPKI/Router Protocol client

If this is the case, where is this configured? The official documentation does not include any guide to setting up RPKI and establishing the router as a ROA.

Iceknight.

2

Virtual private networks / Re: IPsec tunnel 23.1.1_2 manual SPD entries

« on: July 28, 2023, 11:39:31 pm »

I just tried the recommended settings and they worked, no need of reboot or Ipsec restart, just need to bring down each tunnel individually, disable old IPsec tunnels, and enable new Connections tunnels and it worked like a charm. I also setup the manual SPDs using the new "Child" option instead of setting a numeric Reqid.

For anyone else looking to implement this don't forget to first remove the existing SPDs by looking up their Reqid in the "Manual" tab and then removing those entries from the "Installed" tab list of the SP database, before bringing up the migrated tunnels.

3

Virtual private networks / Re: IPsec tunnel 23.1.1_2 manual SPD entries

« on: July 28, 2023, 10:30:35 pm »

Thanks for the confirmation on this. I was looking at this option but wasn't sure it would work. Let me give it a shot. Did you have to reboot the firewall to get it to work or just restating ipsec?

4

Virtual private networks / Re: IPsec tunnel 23.1.1_2 manual SPD entries

« on: July 28, 2023, 08:16:18 pm »

Hello,

Did you find a solution to this problem? I also need to add manual SPD entries to the Connections[new] tunnels and have not found where to do so.
Thanks,
Iceknight