Messages

1

Virtual private networks / Re: VPN IPSec through LAN nic has no reply-to

« on: May 19, 2023, 09:29:54 pm »

Things I've tried and discovered.

To compare, I installed pfSense with the same configuration and the packets sent to the destination computer were containing the right Destination IP, the pfSense one (is this the Reply-To or it is NAT doing the masquerade?).

So on OPNsense, I tried to add manual NAT outbound rules, which modifies the destination IP in the packet, the receiving computer replies to OPNsense, which then looses the packet, it does not seem to know where to return it!  Maybe the manual NAT outbound rule is just confusing it...

Any suggestions as to what to try next?

2

Virtual private networks / VPN IPSec through LAN nic has no reply-to

« on: May 18, 2023, 04:23:55 pm »

Hello,
I have an IPSec tunnel mounted between two OPNsense routers.  One router is not the main one for internet access for the LAN.  This setup was build before with IPFire and it was working properly.
So the issue is that if I ping from one side to the side where the OPNsense router is only routing VPN, the computer on that side receives the packet but replies to the main router instead of the incoming packet one, which means the packet has no reply-to information!  I tried the option to deactivate Reply-to in OPNsense, but as I would suspect, did not fix the issue.
Any suggestions to have this setup work with a reply-to information in the packet?
Thanks.

3

Hardware and Performance / Re: Poor performance with RTL8156 network adapter

« on: July 16, 2022, 08:10:05 pm »

Why with USB no?
I tried running OPNsense virtually on the laptop wiht Ubuntu, connected the USB adapter to the virtual OPNsense with virtIO type and the performance were what I was expecting them to be...

4

Hardware and Performance / Poor performance with RTL8156 network adapter

« on: July 16, 2022, 08:00:26 pm »

Hello,
I tried OPNsense on a mini computer and plugged a 2.5gbps USB adapter on a USB 3 port.  OPNsense recognized the adapter as being cdc, adapter shows it is connected at 2.5gbps, my isp supports up to 1.5gbps which for now tops at 1.2, tested with a laptop running Ubuntu with the same USB adapter.
OPNsense gets 100mbps up and down, nothing more!  Is there a way to make it run full speed?

Thanks.