Messages

Guess I'll install pfSense and see what happens.

I must be missing something. I hope I'm overlooking something.

Opnsense 21.7.7 running on a Dell R420 with said T520-CR card installed & enabled in /boot/loader.conf.local file.  Interfaces are assigned, cxl0=WAN / cxl1=LAN, with functioning FS SFP-10GLR-31 modules installed.  The T520 interfaces light up when looped together, but when connecting the LAN to a Mikrotik CRS305-1G-4S+IN booting to SwitchOS it will not light up or pass traffic using FS-GB-GE-T SFP modules or the single RJ-45 port.

Any ideas? Am I missing something in the Mikrotik, the Dell BIOS, or in opnsense? The Mikrotik passes traffic on the RJ45 & the SFP ports when feeding it from the built-in copper on the Dell, but not with the TX520.

EDIT: Issue seems to be Mikrotik related. Another firewall with T422-CR cards is exhibiting the same symptoms with the Mikrotik, but not with an Arista switch.

EDIT: Tried using other 10GBASE-LR modules that currently work with the T420-CR card and an Arista switch in another Dell firewall, but still no link.

EDIT: Upgraded T520 boot rom and firmware. Same results. We know light is reaching the destination, but no live link unless we connect SFP to SFP on the card itself.

[EDIT: Solved by editing config file in console.]

A while back I changed my local subnet from the default one-dot to ten-dot, and adjusted my vpn settings accordingly. Recently decided to poke around the vpn log file and found this.

Code Select Expand

foo/216.14.78.144:55280 SENT CONTROL [foo]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0

So I opened up /conf/config.xml and saw this.

Code Select Expand

<tunnel_network>10.10.10.0/24</tunnel_network>
<remote_network>192.168.10.0/24</remote_network>
<local_network>192.168.1.0/24</local_network>

I originally pushed my local network in the Advanced Configuration section on my vpn server, but have long since removed that. But even if I add new statements pushing ten-dot I still see the same old one-dot in my global config and in my vpn log. So, do I need to edit the config from the cli, or am I missing something in the GUI that will write my current settings to the config?

EDIT: Solved by editing config file in console.