Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - snejball

#1
Cheers,

I am at a loss and need some help troubleshooting my WG Roadwarrior Setup:
One Opnsense Instance configured with two peers: Android Phone and a Fedora 39 Laptop.

Working fine with the android, no problems here. On the Fedora it seems no handshake can be completed.
When running a capture on both laptop and opnsense I see the 148 Byte Handshake leaving the laptop via correct interface and arriving at opnsense WAN Interface. However opnsense just refuses to answer. Kernel Debugging on Fedora shows Handshake timeout after 5 seconds and then tries again and again.
Does anyone have an idea, where to look?

By default both fedora and opnsense use ipv6, but reverting to IPv4 shows no difference :(

Config on Fedora:
[Interface]
Address = 172.16.255.2/32, <somestaticGUA>/128
DNS = 10.0.200.2, 2a02:8106:54:7a82:8c1a:7a3a:7bf5:d89c
PrivateKey = <veryprivatekey>

[Peer]
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = gw.snejball.de:51820
PublicKey = L4A07c4tgkBH79g2gHUbhlMXcNV8NKwBaoTAvTxAiDM=

#2
22.7 Legacy Series / Re: Link flapping on WAN Interface
December 11, 2022, 11:20:45 AM
Hey,

you might have been right on this one:
I swapped Ports on the Fritzbox, from the 2.5 GbE to one of the 1 GbE Ports, and it seems stable now for about 24 hours.
Maybe some incompatibility in the autonegotiation.
Unfortunately logs from the FB side don't show much.

But thank you very much.
#3
22.7 Legacy Series / Link flapping on WAN Interface
December 08, 2022, 09:59:52 PM
Good Evening,

I am running 22.7.9_3 on a qotom q355g4, Intel I211 behind a Fritzbox as exposed host with ipv4 / ipv6 dual stack and delegated prefixes tracking my WAN.

One or two releases ago I started experiencing weird connection drops on my WAN Link igb1 and i am at a loss what could be causing this.
Link is always restored, but it is disruptive enough to break VPN connections, video streaming / conferencing / voip etc.

Sometimes i see SIGTERM for radvd in the logs.
dmesg shows link state changes for WAN interface.
I already changed cabling, which did not help, but at least I got that ruled out now.
- IPS is disabled
- no offloading


Maybe someone is able to point me into the right direction to fix this.