Messages

1

24.1 Legacy Series / Re: [Solved] Wireguard Issues After Upgrade

« on: February 03, 2024, 09:25:40 pm »

Seemed like a wireguard issue to me.  Wireguard was unresponsive to web interface changes, the latest handshake on dashboard was blank, the "VPN/Wireguard/Diagnotics" was blank.  As another possible hint, I was getting errors under Dashboard, Interface Statistic, Road_Warrior; those are not happening anymore. 

Hope that helps, thanks for the great software,JT

2

24.1 Legacy Series / Re: [Solved] Wireguard Issues After Upgrade

« on: February 03, 2024, 08:03:11 pm »

Worked, everything back to normal.

3

24.1 Legacy Series / Re: Wireguard Issues After Upgrade

« on: February 03, 2024, 04:56:31 pm »

Any test I should run to debug whatt is going on to see if some in upgrade script can be improved?

Everything is working great, except wireguard.

I restored my config from backup, so I have all interfaces and gateways back. 

I'll fresh install 24.1 shortly and restore setting from backup again.

4

24.1 Legacy Series / [Solved] Wireguard Issues After Upgrade

« on: February 03, 2024, 06:47:34 am »

I upgraded to 24.1.  I had a road_warrior setup and two outgoing wireguard VPNs with policy based routing.  Everything has been working for years before the upgrade, but nothing works since. 

I ended up removing gateways and interfaces and removing all wireguard instances and peers.  I now cannot even create an interface without manually creating my own keys via console commands wg genpsk and wg genkey.  The gear button for "Generate New Keypair" does not work. 

I then create a peer and add it.  Then I go to interfaces, assignments, select wg1 click add and get, "The following input errors were detected:The interface "wg1" does not exist. Make sure to apply its configuration first."  So I go back to wireguard and try disabling all and enabling all again, but error repeats.
Is there something obvious I am doing wrong or any suggestions to get wireguard to work again? 

Also, when I go to the dashboard, it says, "No WireGuard instance defined or enabled."  But there is one defined and enabled.
Suggestions please. 

5

23.7 Legacy Series / Re: Re-application of firewall rules needed to allow Wireguard routing after reboot

« on: November 28, 2023, 02:42:42 pm »

I have this or similar problem too.  My post was here:  https://forum.opnsense.org/index.php?topic=36942.msg180942 

There is a suggestion to diagnose there, but I have not had time to do that yet.

6

23.7 Legacy Series / Re: Outbound Nat on WG Tunnels

« on: November 14, 2023, 01:28:00 am »

I don't think it is related, but how do I test?

7

23.7 Legacy Series / Re: Router Not Always Able to Access LAN

« on: November 14, 2023, 01:25:59 am »

Any help or suggestions for your troubled friend here?    :'(

8

23.7 Legacy Series / FIXED: GUI Issue on Firefox (Fix: disable uBlock Origin)

« on: November 11, 2023, 04:22:17 pm »

Ugh, that was it, apologies. 

9

23.7 Legacy Series / [Solved] GUI Issue on Firefox (Solution: disable uBlock Origin)

« on: November 11, 2023, 02:26:39 pm »

On Firefox, http://router/ui/diagnostics/firewall/statistics#info does not work correctly.  Looks fine on Chrome.

10

23.7 Legacy Series / Router Not Always Able to Access LAN

« on: November 11, 2023, 02:16:42 pm »

I found this as my router's git backup keeps failing.  It has been happening since 27.7 and same problem exists in 27.7.8.  (Note: could be me)

My router is mostly unable to connect via TCP to my LANs.  In other words, the GIT backup works sometimes, but mostly not.

To confirm it is not some firewall rule, I created a first firewall rule in my floating rules to allow any direction on any interface the network on a relevant LAN.  I enabled logging and the rule is hit, but cannot access the LAN.  I confirmed same problem on another LAN (a vLAN) and same problem.  I am able to connect from one lan to the other no problem.  I am able to PING from the router to the same LAN ip no problem.

Suggestions please. 

11

23.7 Legacy Series / Re: Wireguard problems with 23.7.8 (TCP Retransmission, Ping works)

« on: November 11, 2023, 01:51:46 pm »

Try going into Firewall, NAT, Outbound and hit save.  I have a similar problem. 

12

23.7 Legacy Series / Outbound Nat on WG Tunnels

« on: November 11, 2023, 01:50:04 pm »

Since I believe 27.7.7, my wireguard tunnels do not work on reboot until I go into GUI/Firewall/NAT/Outbound and hit Save.  I have "Hybrid outbound NAT rule generation" selected by no manual rules

I figured 27.7.8 would fix, but does not.  Maybe it is me though too.

Suggestions, please. 

13

21.7 Legacy Series / Re: Interfaces randomly go down/unroutable

« on: November 30, 2021, 05:20:32 pm »

I am not using Suricata and have an unstable WAN interface (dmesg above).  I'm not certain my issue is the same, but the unstable interface is new and not seeing complaints of similar issues in the dslreports forum for my ISP.

I am now getting this new messages in dmesg
arpresolve: can't allocate llinfo for redacted on ixl0
arpresolve: can't allocate llinfo for redacted on ixl0

14

21.7 Legacy Series / Re: Interfaces randomly go down/unroutable

« on: November 30, 2021, 01:52:15 am »

I'm also having problems with WAN link going down and up.  This has not happened in the past, though I cannot be certain it is not my ISP.  dmesg attached