Topics

Hello,

My datacenter provider is providing me with a /48 IPv6 address block that I can request using DHCPv6 Prefix Delegation.

The issue is that the datacenter provider also provide the SLAAC method for WAN interface autoconfiguration.

SLAAC cannot be disabled from Provider side.

I have found a command that seems to be doing what I'm looking for :

# ifconfig vtnet0 inet6 -autoconf

However. according to FreeBSD ifconfig documentation ( https://man.freebsd.org/cgi/man.cgi?ifconfig(8) ) this kind of change is lost after a reboot.

So, my question is, how to apply permanently the "-autoconf" flag on my WAN vtnet0 interface ?

Thank you.

Hello,

I have installed the latest OPNSense version 23.1.11 and dhcpc6 doesn't seem to start when I configure DHCPv6 Prefix delegation on my WAN interface.

Please find the logs bellow :

<13>1 2023-07-15T16:46:11+02:00 OPNsense.mydomain.com configctl 58563 - [meta sequenceId="2"] event @ 1689432371.02 exec: system event config_changed
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com dhcp6c 24749 - [meta sequenceId="3"] RTSOLD script - Sending SIGHUP to dhcp6c
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="4"] /interfaces.php: ROUTING: entering configure using 'wan'
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="5"] /interfaces.php: ROUTING: configuring inet default gateway on wan
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="6"] /interfaces.php: ROUTING: setting inet default route to REDACTED
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="7"] /interfaces.php: ROUTING: configuring inet6 default gateway on wan
<11>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="8"] /interfaces.php: ROUTING: not a valid default gateway address: ''
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="9"] /interfaces.php: plugins_configure monitor (,WAN_GW)
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="10"] /interfaces.php: plugins_configure monitor (execute task : dpinger_configure_do(,WAN_GW))
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="11"] /interfaces.php: plugins_configure monitor (,WAN_DHCP6)
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="12"] /interfaces.php: plugins_configure monitor (execute task : dpinger_configure_do(,WAN_DHCP6))
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="13"] /interfaces.php: plugins_configure ipsec (,wan)
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="14"] /interfaces.php: plugins_configure ipsec (execute task : ipsec_configure_do(,wan))
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="15"] /interfaces.php: plugins_configure dhcp ()
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="16"] /interfaces.php: plugins_configure dhcp (execute task : dhcpd_dhcp_configure())
<11>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="17"] /interfaces.php: The command '/bin/kill -'TERM' '88971'' returned exit code '1', the output was 'kill: 88971: No such process'
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="18"] /interfaces.php: plugins_configure dns ()
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="19"] /interfaces.php: plugins_configure dns (execute task : dnsmasq_configure_do())
<13>1 2023-07-15T16:46:13+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="20"] /interfaces.php: plugins_configure dns (execute task : unbound_configure_do())
<13>1 2023-07-15T16:46:15+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="21"] /interfaces.php: ROUTING: entering configure using defaults
<13>1 2023-07-15T16:46:15+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="22"] /interfaces.php: ROUTING: configuring inet default gateway on wan
<13>1 2023-07-15T16:46:15+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="23"] /interfaces.php: ROUTING: keeping current inet default gateway 'REDACTED'
<13>1 2023-07-15T16:46:15+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="24"] /interfaces.php: ROUTING: configuring inet6 default gateway on wan
<11>1 2023-07-15T16:46:15+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="25"] /interfaces.php: ROUTING: not a valid default gateway address: ''
<13>1 2023-07-15T16:46:15+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="26"] /interfaces.php: plugins_configure monitor ()
<13>1 2023-07-15T16:46:15+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="27"] /interfaces.php: plugins_configure monitor (execute task : dpinger_configure_do())
<13>1 2023-07-15T16:46:16+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="28"] /interfaces.php: plugins_configure newwanip (,wan)
<13>1 2023-07-15T16:46:16+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="29"] /interfaces.php: plugins_configure newwanip (execute task : dnsmasq_configure_do())
<13>1 2023-07-15T16:46:16+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="30"] /interfaces.php: plugins_configure newwanip (execute task : ntpd_configure_do())
<13>1 2023-07-15T16:46:16+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="31"] /interfaces.php: plugins_configure newwanip (execute task : opendns_configure_do())
<13>1 2023-07-15T16:46:16+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="32"] /interfaces.php: plugins_configure newwanip (execute task : openssh_configure_do(,wan))
<13>1 2023-07-15T16:46:16+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="33"] /interfaces.php: plugins_configure newwanip (execute task : unbound_configure_do(,wan))
<13>1 2023-07-15T16:46:17+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="34"] /interfaces.php: plugins_configure newwanip (execute task : vxlan_configure_do())
<13>1 2023-07-15T16:46:17+02:00 OPNsense.mydomain.com opnsense 15676 - [meta sequenceId="35"] /interfaces.php: plugins_configure newwanip (execute task : webgui_configure_do(,wan))


This configuration worked fine on older OPNSense versions.

Thank you.

Hello,

I have tried to boot the DVD ISO installer in UEFI mode when creating the VM for OPNSense on my Proxmox server and I've noticed that only Legacy boot is working.

Steps to reproduce :
Try to boot the DVD ISO in UEFI mode from Proxmox 8.0.3 using a VM in UEFI mode.

Older Proxmox and OPNSense ISO files do not have this issue.

Thank you.

Hello,

I'm running OPNsense 22.7.10_2-amd64 and I have an issue with the firewall GUI.

I cannot select multiple items in the Host Overrides section of the Unbound configuration panel

Is this a known issue ?

Thanks.

Hello,

I have upgraded to the latest 22.7 version.

In the new IPSec status page, the status of the tunnels shows "Connected" regardless of the real status of the tunnels.

Step to reproduce :
- Bring one side of an IPSec tunnel down and check the status page

Expected result :
- Tunnel should not be displayed as Connected.

Thank you.

Hello,

I have setup an IPSec VPN between Debian 11 with Libreswan and my OPNsense box.

Phase 2 config is allowing one /24 subnet to talk to a remote /24 subnet.

So far, from the Libreswan side, I can ping and RDP to remote machines attached to the OPNSense LAN just fine.

However, there's no communication from OPNSense LAN to Libreswan LAN.

Only one side of the tunnel seems to work.

Libreswan configuration :

https://hastebin.milkywan.fr/isopitazit.apache

OPNSense configuration is the following.

IKEv2 Phase 1 :





Phase 2 :





Child SA status on OPNSense :



Routing table for remote Libreswan subnet from OPNSense :



Firewall configuration for IPSec interface :



Thank you.

Hello team,

I'm running OPNsense 20.1.4-amd64 on Proxmox.

I'm trying to setup IKEv2 with EAP-MSCHAPv2.

I'm following the official tutorial available here :
https://wiki.opnsense.org/manual/how-tos/ipsec-rw-srv-mschapv2.html#ipsec-setup-opnsense-for-ikev2-eap-mschapv2

Unfortunately, I cannot do the configuration mentioned in Step 3 because the Phase 2 creation button is missing from the GUI :



Are you aware if this bug yet ?

How can I solve this issue ?

Thank you very much.