Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - larsd

#1
reverting in the repo, as suggested by Archanfel80.

cheers
#2
sure, yes locking is an option, but in this case there seems to be something weird with zerotier and the suggestion to revert the package to 1.8.6 would still make sense, not everyone might notice zerotier misbehaving.

cheers
#3
I second that
#4
"opnsense-revert -r 22.1.6 zerotier" did the trick for me (downgrading zerotier to 1.8.6 from 1.8.9)
#5
Hi there,

Feels like https://forum.opnsense.org/index.php?topic=27970.0 as I have to hit 'save' in the interface configuration to get the tunnel up and running.

Cheers
#6
could be a multitude of reasons, but check if the disk is full, it could also be that the fs limit for hardlinks has been reached. Check what's in /var/cache/opnsense-update.

cheers
#7
policy based
#8
my tunnels are setup this way and the clients can reach the remote networks, as well as the firewalls ...
#9
FIREWALL: SETTINGS: ADVANCED -> Disable Force Gateway
VPN: IPSEC: ADVANCED SETTINGS -> Do not install routes
SYSTEM: GATEWAYS: SINGLE -> create a GW with the same IP address as your LAN interface
SYSTEM: ROUTES: CONFIGURATION -> add needed routes

cheers
#10
Firewall->Settings->Advanced->Disable force gateway should do the trick.
#11
is your pbx replying?
#12
unless "opnsense" is stated as subject or subjectAlt in the certificate your browser will not trust the system. Look at your browsers address bar, it reads "https://opnsense/" I doubt thats what's in the cert.

cheers
#13
is your client requesting option 42?
#14
Same here, looks like that particular function was never tested. You should open an issue at github if you can.

cheers
lars
#15
Quote from: franco on May 21, 2021, 08:23:43 PM
On the firmware status page you probably have multiple repositories enabled.

We don't ship Java so now you have at least two third party repositories pushing conflicting packages... Isn't this wonderfully unchartered territory. ;)


Cheers,
Franco

nope, just one third party repo. SunnyValley.


cheers
lars