Topics

1

Hardware and Performance / FYI: Mikrotik CCR2004-1G-2XS-PCIe is working as expected with opnsense

« on: January 05, 2024, 03:55:00 pm »

Hi,
I couldn't find any definate information if the CCR2004-1G-2XS-PCIe is working with opnsense.
So I tried it with 23.7.10_1 & 23.7.11 and can report success.
The 4 network interfaces over the PCIe interface appear as "alc0" til "alc3" in the web UI under "Interfaces > Assignments".

This way you can have 2 physical router in a box.

BR

2

Development and Code Review / opnsense-shell loginshell option is missing for new and existing users

« on: January 01, 2024, 11:54:38 am »

Hi,
when adding a new user to the firewall or an editing existing one the option to set the OPNsense console (/usr/local/sbin/opnsense-shell) as a loginshell is not available. This behaviour is observed on multiple current (2023.7.10_1) installations.
Can you please have a look at your installation(s) if it's the same?
Is it wanted behaviour?


BR

3

High availability / switching carp interface based on multiple upstream availabiity

« on: December 31, 2023, 09:27:36 pm »

Hi everyone,
There is a HA setup with two identical machines.
The upstream interfaces are monitored by the builtin monit service on both machines in addition to the gateways.

This way I hope to switch the internal carp interfaces to the machine with more uplinks, but can't find a solution.
Has anyone done a smilar thing or know how to change the carp interface over to an other machine via monit?

If you have other ideas for this please mention them.
Thanks
BR

4

German - Deutsch / Hardware für VPN router

« on: April 10, 2022, 05:05:44 pm »

Hi,
ich bin auf der Suche/Bitte um Hinweise für Hardware welche diverse wireguard VPN tunnel aufbauen/terminieren soll.

Geplante Nutzung ist Terminierung der Tunnel, Firewall, routing (FRR).

Wunschliste:
Hub:
* VPN Durchsatz 1GBit
* lüfterlos

Spokes:
* VPN Durchsatz 200MBit
* kompakte Hardware
* lüfterlos

Nach einiger Suche im Forum & Internet sind diese Systeme aufgefallen:

* apu4d4
* ipu613 <- Hub?
* LES v3
* fitlet3
* fitlet2

Danke im voraus für Hinweise und Tipps

opnsensuser

5

General Discussion / reset access to useraccount via cli

« on: February 11, 2022, 08:26:21 pm »

Hi,
I have the situation that the password for the WebUI useraccount is lost.
The root account can't login via the webUI even after the reset via the "opnsense-shell password" in singleuser mode with rw remounted root.
Reseting the useraccount with passwd in singleuser and @runtime did not change the situation. 
Is there any way to reset the passwords of "normal" Webusers via the cli.

BR
opnsenuser   

6

19.1 Legacy Series / export aliases from cli

« on: July 13, 2019, 08:39:54 pm »

Hi,
since I can't access the webUIs any longer on my OPNSenses > https://forum.opnsense.org/index.php?topic=13402.0,
I'm on the lookout for a way to export my aliases.
Since these are not included in the xml backup and the webUI is not accessible the only way is to get them is thru the cli.
Where are the aliases stored?
Any ideas ??

greetings
opnsenuser

7

19.1 Legacy Series / no access to the webGUI from outside the opnsense

« on: July 06, 2019, 11:24:09 am »

Hi everyone,
on my 2 opnsense boxes (both supermicro E300-8D) I can't access the webGUI from the outside world (management network)

setup for testing external access:
laptop with static address in the same subnet directly connected to the managementinterface
* access the ip with a browser (https://$ip) -> can't connect
* curl the interface ip (curl -k https://$ip) -> timeout

What I've tried:
* checked /var/log/lighttpd.log -> server started
* verify that lighttpd listens on the required interfaces -> managementip :443, loopback :443
* curl the interface address from the opnsense locally -> the loginpage shows up

the above options don't show any errors

what's weird is this:
* ping from the opnsense to the laptop (with icmp allowed) -> destination can not be reached
* forwarding works just as ever
* no incoming connections in pftop with filter to the laptops static ip

Am I missing something?

thanks for your ideas

opnsenuser

8

19.1 Legacy Series / DHCPv6 ports open but no service configured

« on: March 04, 2019, 10:57:18 am »

Hi everyone,
I'm running the latest release 19.1.2...
In the pfinfo, Tab: Rules I have some rules that have the following comment @ the end "allow access to DHCPv6 on LAN", but there is no DHCPv6 server active. Is this a Bug??

greetings
opnsenuser