Messages

Thanks, tested that now, but seems to still be an issue with dhcp6c to retrieve a prefix.

I see this looping

Code Select Expand


# dhcp6c -c /var/etc/dhcp6c.conf -p /var/run/dhcp6c.pid -fD vtnet1
Dec/06/2024 15:01:27: Sending Solicit
Dec/06/2024 15:01:27: set client ID (len 14)
Dec/06/2024 15:01:27: set identity association
Dec/06/2024 15:01:27: set elapsed time (len 2)
Dec/06/2024 15:01:27: set option request (len 4)
Dec/06/2024 15:01:27: set IA_PD
Dec/06/2024 15:01:27: send solicit to ff02::1:2%vtnet1
Dec/06/2024 15:01:27: reset a timer on vtnet1, state=SOLICIT, timeo=5, retrans=29635


Seeing the same problem here. Did you document the steps to fix it?

For anyone running into this thread, I ended up using a single tunnel instead of two and turning it off/on using hooks as mentioned by spali and jprenken in https://forum.opnsense.org/index.php?topic=25993.0 and https://gist.github.com/jprenken/18ca7bf14ddae547ae0fdf6f56d72573.

I've got some local failover using CARP/VIP with my two Opnsenses. Now I'd like to expand this to also get the VPN connectivity to also fail over. Right now it depends on LocalOpn1 to be up. I'm using Wireguard for VPN.

RemotePf1:
LAN IPv4: 192.168.20.1/24
LAN IPv6: 2000:abc:1111::1/64
This machine is also routing the whole 2000:abc::/56

LocalOpn1 (primary):
LAN IPv4: 192.168.5.254/24
LAN IPv6: 2000:abc:2222::254/64

LocalOpn2 (backup):
LAN IPv4: 192.168.5.253/24
LAN IPv6: 2000:abc:2222::253/64

LocalOpn1 gets a /60-net from RemotePf1's /56-net.
I use CARP/VIP on the two locals to assign them 192.168.5.1 and 2000:abc:2222::1
RemotePf1 is the exit node for all IPv6 traffic.

How can I get this two-to-one VPN setup to work?

Can confirm. this works! Thanks for the update.

Is there any way to do this when it's no longer on the free period?

I've got Opnsense set up with a Mullvad tunnel over Wireguard and selective sites and clients going out through that tunnel just fine for IPv4. How can I achieve the same thing with with IPv6? As far as I can tell, it's only possible to add one gateway address, which is later used in the System / Gateways -screen.

I'm looking to install OPNsense on a Oracle Always Free Tier virtual machine to use as an endpoint for my WAN (local OPN on LAN and WG to Oracle) because my ISP puts me behind NAT. The VM specs seem to be fine for this limited usecase. It's not possible to upload ISO's, but apparently it can be done by loading a preinstalled qcow2 file. There is some form of scripted install but I've not figured that out yet.

So... Has anyone else installed OPN on Oracle Cloud and have insights to share?