Messages

1

Virtual private networks / Re: IKE v2 - cannot get it to work on latest version

« on: September 13, 2023, 09:31:11 pm »

Thank you.
Tried method 1 without success - still getting error 809 in Windows RAS Client.
I use self signed certs like in old manual - is this OK?
Also you omitted local name in Pre-Shared Keys but there is no way to save such a combo...
Another question: does the user name in client should be written as "john" or "john@fqdn"?

2

Virtual private networks / IKE v2 - cannot get it to work on latest version

« on: September 13, 2023, 06:20:35 pm »

Hi, I've got a few OPNsense installations with some VPN (roadwarrior and also site-to-site) but cannot get road warior scenario to work on latest version of OPNsense.
Does the guide is still valid for the new version? I went through using Tunnel Setting (legacy) and it doesn't work for me - I get 809 error on Windows Ras client. I tried two different installations, on two different locations.
Any thoughts?

3

Virtual private networks / AWS IKEv1 IPsec - established but cannot connect to server

« on: December 15, 2022, 04:37:52 pm »

Hi,

I followed some tutorials and established connection to AWS (switched from UniFi USG PRO).
P2 shows as installed but when I try to SSH server on AWS I cannot connect.



What could be the problem?

Code: [Select]

2022-12-15T13:01:21 Informational charon 10[NET] <con1|1> received packet: from 3.x.x.x[4500] to 2.y.y.y[4500] (92 bytes)
2022-12-15T13:01:21 Informational charon 10[NET] <con1|1> sending packet: from 2.y.y.y[4500] to 3.x.x.x[4500] (92 bytes)
2022-12-15T13:01:21 Informational charon 10[ENC] <con1|1> generating INFORMATIONAL_V1 request 2319992086 [ HASH N(DPD) ]
2022-12-15T13:01:21 Informational charon 10[IKE] <con1|1> sending DPD request
2022-12-15T13:01:11 Informational charon 06[ENC] <con1|1> parsed INFORMATIONAL_V1 request 538979389 [ HASH N(DPD_ACK) ]
2022-12-15T13:01:11 Informational charon 06[NET] <con1|1> received packet: from 3.x.x.x[4500] to 2.y.y.y[4500] (92 bytes)

Also I found some tutorials misleading - do I need set any WAN rules or OPNSense take care of this?

The mobile configuration works good - it means I can connect from mobile client to local network and access resources.