Topics

1

21.7 Legacy Series / getting 500 internal server error

« on: August 27, 2021, 06:00:50 pm »

getting a strange error here, I am on 21.7.1 and am trying to create an internal CA under system -> trust -> authorities, I fill in the fields but when I click save I get:

2

High availability / IPsec with HA and Carp failover issue

« on: August 23, 2021, 10:03:27 pm »

Running into an issue with IPsec: I have a pair of firewalls with HA and a single opnsense firewall, the IPsec tunnel is able to establish on the primary firewall with the WAN1 VIP but when I enter CARP maintenance mode the IPsec tunnel does not establish on the standby firewall when it's active. The only way I can get this to work is utilizing DPD with time of 1 second and action of restart on the stand alone firewall. I do have MOBIKE disabled on the HA pair and the stand alone firewall.

Firewall version: 21.7.1

Any help is appreciated.

3

21.1 Legacy Series / netflow with URLs instead of public IPs?

« on: July 26, 2021, 04:47:47 pm »

Hey guys,

still doing research on my end but figured I would get the ball going here, is there a way to do some kind of active directory integration and allow the opnsense firewall to be user aware with netflow?

4

General Discussion / migrating from Fortigate to opnsense any recommendations are appreciated!

« on: May 03, 2019, 04:54:48 pm »

Hey guys,

I am migrating a Fortigate firewall to Opnsense. Not sure if anyone has ran into this before or has a suggestion for migrating, FYI I haven't poked around or know my way around Fortigate, all I have is the running-config via text.

5

18.7 Legacy Series / Dead Peer detection

« on: December 17, 2018, 04:21:50 pm »

How does dead peer detection work for site to site VPN using IPsec? I have read some articles but the version associated with those articles are for 1.2, but I am on 18.7. Does this utilize ICMP or is it used to detect IKEv1/IKEv2 failure?

6

18.7 Legacy Series / Site to Site VPN failover

« on: December 10, 2018, 08:55:29 pm »

Not sure if this has been addressed but I am looking to configure site to site VPN failover for at least 20 different sites. Not all have a secondary Public IP. I have done much searching and am not finding much information on this or is OPNSense not capable of this?