Topics

Hey,

I couldn't find any API documentation about the new feature for downloading the latest configuration directly via /api/core/backup/download/this. I tested it successfully with: curl -u "key":"secret" -o backup.xml https://opensense/api/core/backup/download/this

Is there a parameter for getting the configuration encrypted, as it is possible through the WebUI?

Thanks

Hi,

I created two OpenVPN servers following the documentation of OPNsense.

I defined the remote networks that should be reachable from the OpenVPN clients during the connection, but I was suprised to see that there were two group rules in the FW rules for OpenVPN that allow a connection to all networks (see attached screenshot). I am also not able to remove these two group rules.

How can I remove these two rules?

Thanks

Hi,

I found this topic regarding the certificate to be used for RADIUS:

To use WPA3 enterprise, the RADIUS servers must use one of the permitted EAP ciphers:

    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

Could someone please tell me, which options in the GUI for creating a server certificate reflect to these ciphers?

I would like to create such a server certificate for the RADIUS server in order to use it with a Unifi AP for setting up a WPA3 enterprise WLAN.

Thanks

Hi,

ich hätte eine Frage bzgl. folgendem Netzwerk-Setup:

Code Select Expand


             FRITZ!Box                                                 OPNsense
  +-----------------------------+                           +-----------------------------+
  | IP/GW/DNS:192.168.178.1  P1 |192.168.178.0/24 ----------| ig0 WAN 192.168.178.2       |
  |                             |                           |                             |
  | IP/GW/DNS:192.168.179.1  P4 |192.168.179.0/24 ----------| ig1 DMZ 192.168.179.2       |
  +-----------------------------+                           |                             |
                                                       +----| ig2 VLAN178: WANoverVLAN178 |
                                                       |    |     VLAN179: DMZoverVLAN179 |
                                                       |    |     VLAN10:  LAN            |
                                                       |    +-----------------------------+
                                                       |
                                                       |               L2 Switch
                                                       |    +-----------------------------+
                                                       +----| P1 TRUNK                    |
                                   +--+                     |                             |
                                   |PC|---------------------| P2 ACCESS (VLAN 178)        |
                                   +--+                     |                             |
                                                            | P3 TRUNK                    |
                                                            |                             |
                                                            | P4 ACCESS (VLAN 10)         |
                                                            +-----------------------------+


Es geht um die Interfaces WAN & WANoverVLAN178 in OPNsense. Die Ziele sind wie folgt:
- wenn ein PC am Port 2 auf dem "L2 Switch" angeschlossen wird, dann sollte er genauso funktionieren, als ob er an die FRITZ!Box direkt angeschlossen wurde (d.h. auch dass DHCP direkt von der FB kommt)
- Firewall Rules in OPNsense sollen für den Traffic zwischen WAN <-> WANoverVLAN178 möglich sein, z.B. Deny Rules für SMTP vom PC ins Internet (WANoverVLAN178  -> SMTP -> WAN)

Ist sowas möglich?

Danke,
Steve

Hi,

I have implemented an internal CA and an intermediate CA...and everything works fine with the generated internal server certificates :).

Trying to configure a switch for HTTPS, I found out that it needs a BASE64 certificate. When an internal certificate is created, then there are a .crt, a .key, and a .p12 files that can be downloaded. How can I generate a BASE64 certificate and key (?!) using those files?

Regards,
Steve