Topics

1

23.7 Legacy Series / VoIP SIP registration

« on: December 22, 2023, 11:31:42 pm »

Tried searches, google etc nothing helps... been at this for several days, almost decided that OPNsense and SIP don't work together.

I'm in the UK, just moved to fibre and been sent and ATA pre-configured.. ready to go.
I tried the ATA in a draytek router connected to the net elsewhere and the ATA works perfect.

Connect to the OPNsense network, SIP refuses to register.  Nothing at all.
tried the NAT static ports and conservative firewall settings... nothing (maybe have the NAT static port re-write settings wrong...?)
tried siproxd, Upnp, can't get that to work either.

Any help would be much appreciated, as I think I maybe faced with binning OPNsense and getting a draytek.... which I'd prefer not to do.
I'm not a network specialised, but I know my way round a fairly standard setup.
My OPNsense has multiple networks, VLANs, wireguard VPN, etc, bit considered there is a conflict somewhere...
Thanks for any help you can offer.
Chris

2

Virtual private networks / WireGuard IPv6 and starlink

« on: February 15, 2023, 04:47:55 pm »

Hi Guys,
My starlink gateway WAN IPv6 address generally doesn't change.
However occasionally the /56 delegation seems to get moved.

So I changed my LAN, to Tracked interface and set it to {whatever they give me}::0/64
Then the WireGuard IP endpoint for OPNsense I set to ::50:0:0:0:1/64
However, things seems to work weird, it connects using IPv6, but routing over IPv6 doesn't seem to work as expected (from what I can tell)
Does the wireguard interface endpoint not work as a tracked interface on ipv6 ?
If I set the full IPv6 addresses (as they are now) to everything (phone and OPN WG), all seems good.

3

Virtual private networks / ZeroTier with 22.7.4

« on: September 18, 2022, 09:39:05 am »

Hi Guys,
Has ZeroTier stopped working since 22.7.4 ?
My OPNsense box is zerotier-ing from behind a starlink.
It was working fine until recently, now my phone can no longer ping OPNsense (when away from yard using zerotier app)
I can ping other machines that are connected to the zerotier network, so it must be OK at zerotier side.
OPNsense shows as being connected, but nothing routes.
Have tried pressing on the package reinstall, but no different.
I did a reboot the other day and that fixed it for a few hours, then nothing again.
Any ideas ?

4

General Discussion / IPv6 questions

« on: March 09, 2021, 11:43:05 pm »

probably been done to death, but here goes:
I'm just considering whether to move to IPv6, we live in UK (remote location) and broadband is about 1mb up 10mb down.
This will probably never change as we live on a farm in the countryside.
But if I moved to IPv6, then maybe I could eventually use the Starlink Sats for broadband?
I need fixed IP addresses since I need to OpenVPN  to the farm to remotely control machinery (when I'm away).
Currently using Zen internet and have 8 IPv4s.
If I had the network on IPv6 with zen and maybe Starlink offered fixed IPv6 IPs soon, I could test that and move over?

Some of the machinery PLCs use VNC and Modbus and are IPv4 only.  They do not need internet connectivity, but they must work internally on IPv4.  So presumably if I went to IPv6 for the PCs and phones to use Internet, the PLCs would still work (internally)?

If I used my phone to OpenVPN into the site on IPv6 could I get a local IPv4 address (as well as IPv6) to control the directly PLCs?
Or would I have to control a local PC to do it?

Also my knowledge of IPv6 isn't great (yet).  On IPv6 do you not use private addressing anymore (like 192.168.0.0/24), is it all publicly addressed?
If/when we lose internet connectivity (bad broadband etc etc) can the internal IPv6 network still route around the site normally if it's been assigned public IPv6s and the internet connection is broken for hours/days?

If I'm running 2 WANs for awhile for testing, Starlink and Zen on IPv6, the static addressing will change when 1 drops out.  My servers will need static addresses and need to work normally locally, controlling the machinery, could their IP addresses change and break the working network environment? when WANs switch over and/or drop out completely.

Sorry for the long question.  But wondering whether eventually I'll have to go IPv6, been ignoring it for years...