1
Development and Code Review / Re: UniFi Controller
« on: June 21, 2021, 03:52:23 am »
https://github.com/unofficial-unifi/unifi-pfsense
bump po 6.2.26
bump po 6.2.26
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
2
21.1 Production Series / Re: 21.1.7: Updates tab is hanging
« on: June 18, 2021, 11:55:52 am »
upgraded to 21.1.7_1
firefox no issues after upgrade
chrome, same issue as above(upgrade web UI hang), but clearing cache also solved the issue
firefox no issues after upgrade
chrome, same issue as above(upgrade web UI hang), but clearing cache also solved the issue
3
21.1 Production Series / captive portal force disconnect user
« on: May 08, 2021, 04:43:45 pm »
using the following
System Information
Name OPNsense.onghocgan.net
Versions OPNsense 21.1.5-amd64
FreeBSD 12.1-RELEASE-p16-HBSD
OpenSSL 1.1.1k 25 Mar 2021
CPU type Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz (8 cores)
going to captive portal session
select the chexkbox and click the trash icon
show a dialog box confirimng the action but click yes does nothing.
does not rove the user/ip
also having constant disconnect even if i set the hard idle timedout at 600minutes...
so mow I set it to zero for the moment.
System Information
Name OPNsense.onghocgan.net
Versions OPNsense 21.1.5-amd64
FreeBSD 12.1-RELEASE-p16-HBSD
OpenSSL 1.1.1k 25 Mar 2021
CPU type Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz (8 cores)
going to captive portal session
select the chexkbox and click the trash icon
show a dialog box confirimng the action but click yes does nothing.
does not rove the user/ip
also having constant disconnect even if i set the hard idle timedout at 600minutes...
so mow I set it to zero for the moment.
4
21.1 Production Series / Re: Multi WAN & Unbound
« on: April 07, 2021, 04:42:12 pm »
in each gateway you can assign a monitor ip. which opnsense uses to detect if the gateway is down(if option is selected)
in system-setting-general
1) you need to allow gateway switching
2) for each gateway assigned a unique dns server(external, like google, open, fast dns, ubound will use this as a forwarding dns server, if selected)
3) you need to have a local dns server for your client which is ubound. you bound will then use the assign dns for each gateway as a forwarding dns (you can choose a restrictive dns server if say you want to block porn or malware)
of course you will still need to define which gateway to use... by default opnsense will choose 1 (not multiwan, hence you need a multiwan group to tell opnsense how the gateways will interact with each other
in system-setting-general
1) you need to allow gateway switching
2) for each gateway assigned a unique dns server(external, like google, open, fast dns, ubound will use this as a forwarding dns server, if selected)
3) you need to have a local dns server for your client which is ubound. you bound will then use the assign dns for each gateway as a forwarding dns (you can choose a restrictive dns server if say you want to block porn or malware)
of course you will still need to define which gateway to use... by default opnsense will choose 1 (not multiwan, hence you need a multiwan group to tell opnsense how the gateways will interact with each other
6
Development and Code Review / Re: UniFi Controller
« on: April 04, 2021, 02:21:21 am »
i have both,
you may want to check out the trouble shooting section for fixing java
you may want to check out the trouble shooting section for fixing java
7
General Discussion / facebook wifi login
« on: April 03, 2021, 04:40:32 pm »
is there a plugin or could facebook wifi login be accepted as an authentication mode.
this is not really a authentication but rather a "recording" of login via wifi
https://www.facebook.com/facebook-wifi
this is not really a authentication but rather a "recording" of login via wifi
https://www.facebook.com/facebook-wifi
8
General Discussion / Re: Multi-WAN with VPN and Sticky Connections
« on: March 25, 2021, 02:02:53 am »
create a rule that will specifically target that domain to use a spefiic gateway
this would be ofcourse tedious if there are alot of domain you need to be
or if the server IP changes regularly
mapped aliad of domain might help...
this would be ofcourse tedious if there are alot of domain you need to be
or if the server IP changes regularly
mapped aliad of domain might help...
9
21.1 Production Series / Re: Issue with Multi-Wan and Sticky Connections?
« on: March 25, 2021, 01:57:23 am »
some thing like that
there is a thread here where in disableng sticky connection would actually make multiwan connection FAR stable than using sticky...
I think it was somethign to do with how it was implimented, based on the previous thread sticky was sort of a workaround... then again it made it worst...
EDIT:
it was the "shared connection" that is making issues
https://forum.opnsense.org/index.php?topic=19977.msg93076#msg93076
https://forum.opnsense.org/index.php?topic=17116.msg93965#msg93965
there is a thread here where in disableng sticky connection would actually make multiwan connection FAR stable than using sticky...
I think it was somethign to do with how it was implimented, based on the previous thread sticky was sort of a workaround... then again it made it worst...
Quote
It's a limitation of OPNsense when combining shaping/captive portal and loadsharing (with sticky).by: Mimugmail
EDIT:
it was the "shared connection" that is making issues
https://forum.opnsense.org/index.php?topic=19977.msg93076#msg93076
https://forum.opnsense.org/index.php?topic=17116.msg93965#msg93965
10
21.1 Production Series / Re: Multi WAN & Unbound
« on: March 25, 2021, 01:54:57 am »
you need to use local DNS else your conenction will go crazy
it will be OPNsense that will negotiate the connection I believe
it will be OPNsense that will negotiate the connection I believe
11
Hardware and Performance / Re: newbie hardware recomendations
« on: January 22, 2021, 01:22:33 am »Thanks for the reply tong2x.
MY use case is a just a regular home fiber connection, nothing fancy but I'd like the solution to handle gigabit fiber. I'm trying to avoid a pc form factor , ideally I want a small enclosure with just network ports.
for gigabit id suggest anything higher than or at least I5 core (and gigabit lan on specs)
my celeron box, does seem to consistently transfer gigabit
12
General Discussion / Re: Migrate to a new machine. How to get old configuration
« on: January 21, 2021, 01:20:30 pm »
currently I think there is no direct way to "import" configs
if the interface do not match
maybe they will work it out in the future
if the interface do not match
maybe they will work it out in the future
13
Hardware and Performance / Re: newbie hardware recomendations
« on: January 21, 2021, 01:17:32 pm »
I have the following
I7 desktop clone PC, 16GB ram, running 24x7, with add on 4 port giga lan card
celeron I3 mini PC box, 4GB ram (small box with 6lan, usb and monitor interface)
I5 mini PC box, 8GB ram (small box with 6lan, usb and monitor interface)
pretty much as long as it is a supported hardware you should not have any problem
if you want to support alot of users, you may need more power though
if you have a spare, intel or amd machine, you may want to "try" it out first
I7 desktop clone PC, 16GB ram, running 24x7, with add on 4 port giga lan card
celeron I3 mini PC box, 4GB ram (small box with 6lan, usb and monitor interface)
I5 mini PC box, 8GB ram (small box with 6lan, usb and monitor interface)
pretty much as long as it is a supported hardware you should not have any problem
if you want to support alot of users, you may need more power though
if you have a spare, intel or amd machine, you may want to "try" it out first
14
General Discussion / Re: Separate Wifi SSIDs via VLAN & Wifi AP recommendations
« on: January 06, 2021, 02:11:01 am »
what I have is
opnsense server
ubiquiti managed switch
and ubiquiti ap (ACLR and ACPRO)
ubiquiti controller (could be installed in a existing PC, or buy there controller device)
simple setup, the ubiquiti ap is capable of assigning vlan id to siid. then opnsense will just catch that.
you just need a manage switch(ubiquiti or not) so the vlan tags will not be lost (unmanaged switch may remove the vlan tags).
opnsense server
ubiquiti managed switch
and ubiquiti ap (ACLR and ACPRO)
ubiquiti controller (could be installed in a existing PC, or buy there controller device)
simple setup, the ubiquiti ap is capable of assigning vlan id to siid. then opnsense will just catch that.
you just need a manage switch(ubiquiti or not) so the vlan tags will not be lost (unmanaged switch may remove the vlan tags).
15
General Discussion / Re: export traffic shaper settings (pipes, queues and rules?)
« on: January 06, 2021, 01:58:29 am »
it is possible to backup the config
system-> backups
check the restore section if you could restore the sections you want
system-> backups
check the restore section if you could restore the sections you want