Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - arichtman

#2
There was one, https://github.com/opnsense/plugins/issues/4015

Shall I request it reopened?
#3
Sooo looks like the front-end/plugin don't support listen range but if you jam your config into FRR it works fine.
I'm working out which autorun to place a script in that just overwrites the generated `frr.conf`

https://docs.opnsense.org/development/backend/autorun.html
#4
Hi all,

I've got some specific FRR+BGP config that's not possible to do via the web interface but does work if injected manually.
I'll look into contributing to the plugin eventually but for now I just want to automatically overwrite any generated `frr.conf`.

Which is the most appropriate autorun for this? Or should it go in `/etc/rc.conf.d/`?

It essentially only needs to run immediately after the service generates a config file.
Start or Early seem to run before generation of the conf file, and config would run EVERY time a setting changed, which is a lot of service restarts/reloads.

https://docs.opnsense.org/development/backend/autorun.html
#5
Hi - did you find a way to safely and consistently set `listen range` in `frr.conf` to get this to work?
#6
24.1, 24.4 Legacy Series / Re: IPv6 Prefix Alias
January 08, 2025, 09:31:42 PM
Ah rats, I'm doing dynamic prefix delegation internally so grouping interface networks won't cut it. IPv6 Dynamic Host alias type looked close but seems hard-coded to splitting on /64 and the address being /128, boo.

I may try something bodgy like this https://forum.opnsense.org/index.php?topic=43994.msg219298#msg219298
#7
Just a hunch but client DHCP settings are likely just suggestions to the server, your ISP may well be ignoring the lease time override. It does smell like stale DHCP though, as disabling and reenabking the interface probably causes a new DHCP solicitation. Does your ISP have anything to say about it? Fwiw I had what looked like a dead EAN recently and had to call to get them mine to manually release the lease...
#8
Thanks for this post! Exactly what I was looking for! I want to essentially accept any peers on a given internal interface, maybe limit the AS number but that can be done with filtering or whatnot. I might poke about the back end and see if it's configurable at system level, though ideally, yes have it in the plugin/GUI, if for no other reason than it doesn't get wiped on updates/reconfigurations