Topics

Also ich bin jetzt mit meinem Latein so ziemlich am Ende..

Mein Opnsense-Installation funktionierte an dem DSL-Anschluss bis zum 13.01. durchgehen fehlerfrei, dann bekam ich ohne Änderung an Konfiguration oder Verkabelung regelmäßig ein LCP-Terminate Request jede 6900/7200 sec, also sofortige Neueinwahl,  neue IP-Adresse, etc.

Das sieht dann so im ppps.log

Code Select Expand

Jan 20 09:16:06 OPNsense ppp: [wan] IFACE: Up event
Jan 20 09:16:06 OPNsense ppp: [wan] IFACE: Rename interface ng0 to pppoe0
Jan 20 09:16:06 OPNsense ppp: [wan] IPV6CP: rec'd Configure Ack #21 (Ack-Sent)
Jan 20 09:16:06 OPNsense ppp: [wan] IPV6CP: state change Ack-Sent --> Opened
Jan 20 09:16:06 OPNsense ppp: [wan] IPV6CP: LayerUp
Jan 20 09:16:06 OPNsense ppp: [wan]   XXX
Jan 20 11:11:06 OPNsense ppp: [wan_link0] LCP: rec'd Terminate Request #105 (Opened)
Jan 20 11:11:06 OPNsense ppp: [wan_link0] LCP: state change Opened --> Stopping
Jan 20 11:11:06 OPNsense ppp: [wan_link0] Link: Leave bundle "wan"
Jan 20 11:11:06 OPNsense ppp: [wan] Bundle: Status update: up 0 links, total bandwidth 9600 bps
Jan 20 11:11:06 OPNsense ppp: [wan] IPCP: Close event
Jan 20 11:11:06 OPNsense ppp: [wan] IPCP: state change Opened --> Closing
Jan 20 11:11:06 OPNsense ppp: [wan] IPCP: SendTerminateReq #44
Jan 20 11:11:06 OPNsense ppp: [wan] IPCP: LayerDown
Jan 20 11:11:06 OPNsense ppp: [wan] IPV6CP: Close event
Jan 20 11:11:06 OPNsense ppp: [wan] IPV6CP: state change Opened --> Closing
Jan 20 11:11:06 OPNsense ppp: [wan] IPV6CP: SendTerminateReq #22
Jan 20 11:11:06 OPNsense ppp: [wan] IPV6CP: LayerDown
Jan 20 11:11:06 OPNsense ppp: [wan] IFACE: Down event
Jan 20 11:11:06 OPNsense ppp: [wan] IFACE: Rename interface pppoe0 to pppoe0
Jan 20 11:11:06 OPNsense ppp: [wan] IPCP: Down event
Jan 20 11:11:06 OPNsense ppp: [wan] IPCP: LayerFinish
Jan 20 11:11:06 OPNsense ppp: [wan] IPCP: state change Closing --> Initial
Jan 20 11:11:06 OPNsense ppp: [wan] IPV6CP: Down event
Jan 20 11:11:06 OPNsense ppp: [wan] IPV6CP: LayerFinish
Jan 20 11:11:06 OPNsense ppp: [wan] Bundle: No NCPs left. Closing links...
Jan 20 11:11:06 OPNsense ppp: [wan] IPV6CP: state change Closing --> Initial
Jan 20 11:11:06 OPNsense ppp: [wan_link0] LCP: SendTerminateAck #22
Jan 20 11:11:06 OPNsense ppp: [wan_link0] LCP: LayerDown
Jan 20 11:11:06 OPNsense ppp: [wan_link0] PPPoE: connection closed

Der TCPdump an der Sensebox-loggt folgendes auf der LCP-Schicht, siehe Attachment.

Da ich auf meiner Seite nichts geändert habe, habe ich bei der Telekom gleich ein Störungsticket eröffnet. Kann man aufgrund des Sachverhaltes ausschliessen, dass es an mir liegt.

Ein anderer User hatte im Onlinekosten-Forum dasselbe Problem (haargenau dieselbe 6900/7200s-Symptomatik) hier: https://www.onlinekosten.de/forum/showthread.php?p=2508765
Der Anwender hat allerdings eine Fritzbox, wo das Problem aus heiterem Himmel eintrat.

Die Telekom will mir jetzt einen Techniker rausschicken, der wohl etwas überfordert vor meinem Draytek Modem und Opnsense-Firewall stehen wird, um voreilig draus zu schliessen, dass es das unbekannte Etwas sein muss, dass den Fehler verursacht ;)

Ich bin der Meinung, dass die Gegenstelle schuld ist, wir werden sehen...

I noticed yesterday after I rebooted my dsl-modem, that both my internal IPv6-tracking interfaces were not getting IPv6-adresses through my dial-up interface (PPPoE). IPv4 was fine. This also happens when my ISP forces a disconnect every once a while, requiring an automatic redial.
The delegated prefix (56) is correctly handed out on the adapter though.

To restore IPv6 functionality I usually open the dial-up interface details, save without any changes, and apply it. Then the IPv6 addresses get handed out on the tracking interfaces.

Currently running on the latest 19.7.5. build.

What can I do to make this more reliable?

Hello there,

I am new in this place, and I am enjoying the project so far very much!

But, as always, there comes questions in mind, when trying to accomodate a firewall to your special needs.

I am using a simple upload/download-pipe with a 95% bandwidth-throttle on my main LAN, for bufferbloat-congestion avoidance with a shaper. now I would like to add a limiter for my guest-lan that reserves a special amount of the bandwidth for the users, that also follows the main-bandwidth-pipe.

Imho this would ask for sort-of nested pipes, which don't exist yet, or have I overlooked something?

Hi there,

I am wondering, if there's a way to automate a restart of the strongswan service after successful cert renewal.
I cannot find a way to do that by the means of the plugins' automation function...

Thanks!
Don