Messages

Since nobody seems to be able to help out

Did you not read my post where i gave you the solution???  That's a slap in the face....lol

Do you happen to know where to find the change log.  I did a quick search couldn't find it.

sorry, wrong post, misread your network plan... :-)

LOL I was wondering what that was

When your connecting from opnsense, you are connecting on the same "layer 2" network.

Example:
"some local pc"=1.1.1.2 "
gateway LAN=1.1.1.1, gateway tunnel=2.2.2.1"
"some remote pc"= 2.2.2.2
some remote pc knows how to get to 2.2.2.1 but not 1.1.1.2


I guess you could solve this by Nating traffic going out the l2tp tunnel to the tunnel ip of the router.

That's because "some remote server" does not know how to route the packet back to "some local pc"

There's more. When I try to create site-to-site tunnel, Authentication method options are Mutual PSK/Key/RSA, but my VPN provider is using IKEv2 EAP with username and password.

opnsense is setup weird for this, but go to mobile clients section and enable, then add your phase 1 and 2 settings there

I want my opnsense box work the same way as it does as an openVPN client. Can I accomplish this, configuring the opnsense as an Ipsec client?

Same here, no information in docs. Every doc assumes the box acts as a server.

IPSEC is a point to point protocol, there is not really a server/client.  Note: It does support road warrior setups which would be the closest thing to the server/client style your looking for.   To answer your other question, yes you can send traffic over IPSEC.

EDITED to clarify.

can you get a pcap so we can see what it's looking up, might help with tracking it down.

Check Serivces--> OpenDNS did you enable it there by mistake? (It's not enabled by default)

are you using unbound or dnsmasq?

What plugins do you use?

Have you considered updating your esxi?

None of those tcp/udp packets are duplicated with different mac address's.

EDIT:      LOL, apparently I am retarded I see it now!

Only if there was a place you could look uo the documentation for opnsense....

The router would only be contacting opendns if you have settings that tell it to.

What is configured under Systen-->Settings-->General for dns.