Messages

1

High availability / Re: Failover with VPN Tunnel

« on: April 23, 2022, 05:16:29 pm »

For anyone running into this thread, I ended up using a single tunnel instead of two and turning it off/on using hooks as mentioned by spali and jprenken in https://forum.opnsense.org/index.php?topic=25993.0 and https://gist.github.com/jprenken/18ca7bf14ddae547ae0fdf6f56d72573.

2

High availability / Failover with VPN Tunnel

« on: March 26, 2022, 01:21:25 pm »

I've got some local failover using CARP/VIP with my two Opnsenses. Now I'd like to expand this to also get the VPN connectivity to also fail over. Right now it depends on LocalOpn1 to be up. I'm using Wireguard for VPN.

RemotePf1:
LAN IPv4: 192.168.20.1/24
LAN IPv6: 2000:abc:1111::1/64
This machine is also routing the whole 2000:abc::/56

LocalOpn1 (primary):
LAN IPv4: 192.168.5.254/24
LAN IPv6: 2000:abc:2222::254/64

LocalOpn2 (backup):
LAN IPv4: 192.168.5.253/24
LAN IPv6: 2000:abc:2222::253/64

LocalOpn1 gets a /60-net from RemotePf1's /56-net.
I use CARP/VIP on the two locals to assign them 192.168.5.1 and 2000:abc:2222::1
RemotePf1 is the exit node for all IPv6 traffic.

How can I get this two-to-one VPN setup to work?

3

Virtual private networks / Re: Wireguard Mullvad IPv6 selective routing

« on: November 10, 2021, 01:03:19 am »

Can confirm. this works! Thanks for the update.

4

General Discussion / Re: Install OPNsense on Oracle

« on: October 03, 2021, 02:52:22 pm »

Is there any way to do this when it's no longer on the free period?

5

Virtual private networks / Wireguard Mullvad IPv6 selective routing

« on: October 03, 2021, 02:30:28 pm »

I've got Opnsense set up with a Mullvad tunnel over Wireguard and selective sites and clients going out through that tunnel just fine for IPv4. How can I achieve the same thing with with IPv6? As far as I can tell, it's only possible to add one gateway address, which is later used in the System / Gateways -screen.

6

General Discussion / Install OPNsense on Oracle

« on: March 19, 2021, 11:23:18 pm »

I'm looking to install OPNsense on a Oracle Always Free Tier virtual machine to use as an endpoint for my WAN (local OPN on LAN and WG to Oracle) because my ISP puts me behind NAT. The VM specs seem to be fine for this limited usecase. It's not possible to upload ISO's, but apparently it can be done by loading a preinstalled qcow2 file. There is some form of scripted install but I've not figured that out yet.

So... Has anyone else installed OPN on Oracle Cloud and have insights to share?