Topics

Hello,

I have an interesting issue with static routes.  I have a static route of 10.96.69.0/24 that resides on another device.  The next hop gateway is 10.206.100.100/32.  All's fine so far, except if I try to disable that route in the web ui, the route is not ever pulled from the routing table.  The only way to remove the route is to delete the entry.  I've tried disabling the route and disabling the gateway to the next hop.  My firewall is currently running the latest 22.1.10.  Is this expected behavior?

Thanks,

Paul

As the title says... cannot add/update/delete any packages via the Web UI since upgrading to 22.1.9_1.  The backend logs have a plethora of entries like this below:

2022-07-03T12:43:53-05:00   Error   configd.py   [1cbda886-7d7c-45a8-98ba-6c7cd24e7d0f] Script action stderr returned "b'Child process pid=46025 terminated abnormally: Abort trap'"   
2022-07-03T12:43:53-05:00   Error   configd.py   [0c75a9d6-7e2d-46ec-83e8-1e8b3b1dc1f3] Script action failed with Command 'pkg rquery "%n|||%v|||%c|||%sh|||0|||0|||%L|||%R|||%o" ' returned non-zero exit status 134. at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 478, in execute subprocess.check_call(script_command, env=self.config_environment, shell=True, File "/usr/local/lib/python3.8/subprocess.py", line 364, in check_call raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command 'pkg rquery "%n|||%v|||%c|||%sh|||0|||0|||%L|||%R|||%o" ' returned non-zero exit status 134.   
2022-07-03T12:41:07-05:00   Error   configd.py   [cf21ddcc-42a5-4bba-9243-7e2c70936480] Script action stderr returned "b'Child process pid=54713 terminated abnormally: Abort trap'"   
2022-07-03T12:41:07-05:00   Error   configd.py   [8a54585d-fb47-423f-b7f7-faf4199ca9fd] Script action failed with Command 'pkg rquery "%n|||%v|||%c|||%sh|||0|||0|||%L|||%R|||%o" ' returned non-zero exit status 134. at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 478, in execute subprocess.check_call(script_command, env=self.config_environment, shell=True, File "/usr/local/lib/python3.8/subprocess.py", line 364, in check_call raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command 'pkg rquery "%n|||%v|||%c|||%sh|||0|||0|||%L|||%R|||%o" ' returned non-zero exit status 134.

Any idea how this can be resolved?  I've tried running a health audit from the frimware status page.  I've tried running a automatic resolver from the same page.  I can install pkg's via the CLI but something is messed up with the UI.

I have a DEC3860 that I've had for about a year now and for the most part it's been rock solid.  The latest firmware update was/is a bit rocky with Zenarmor and a few other issues with aliases in general.  I downloaded the most up to date firmware and loaded it onto a USB disk this afternoon and attempted to re-install the OS.  I could never get the device to fully boot from the USB disk using the serial-to-usb cable attached to the appliance.  I read that I needed to disable legacy UART in the BIOS.

Long story short... I believe I disabled the serial connection all together.  Is there a ways to reset the BIOS settings on this appliance?  I noticed a reset button next to the serial connection on the front of the appliance, but I believe all that does is restart the unit.  I tried holding that button in while powering it on and also pressing it while it was running.  Both attempts just restarts the unit.  I've looked for the hardware documentation and cannot locate it online as there doesn't appear to be anything more than the docs library.

I'm a recent convert from pfSense and had the Web-Gui setup to auth against an external radius (windows server) box.  I noticed with OPNsense that in order to actually log into the OPNsense Web UI that any radius account that needs access has to be also defined as a local account.  Which seems counterproductive to me and doesn't really scale if I have to manager local user accounts in 2 places.

With pfSense I could specify a local group on the firewall and if the radius server returned the exact same name as the local group within the RADIUS AVP Filter-Id then you'd be allowed to log in.  Am I missing something as far as RADIUS is concerned?  If I don't set up a local user, then I get the "No page assigned to this user! Click here to logout." message.

I have a DEC3860 that I recently purchased as a test box for a greater project.  What I am trying to accomplish should be fairly straightforward.  The 2 10G SFP+ Interfaces (ax0 and ax1) bonded using LACP.  These interfaces run back to a Cisco 3560D-12E 10G Switch.  Switch configuration is as follows:

int te0/10-11
switchport trunk
switchport trunk encap dot1q
switchport trunk native vlan 1
switchport trunk allowed vlan 4-4094
switchport mode trunk
channel-group 11 mode active

int po11
***same as ports above***

The firewall has AX0 and AX1 bonded using LACP.  I'm trying to use LACP and tagged VLAN's off of the lagg0 interface.  I can configure the individual ports AX0 and AX1 as trunks and assign vlans that way which works but in a HA Scenario this doesn't work for me.  I've seen several posts on this forum about LACP not working but I havne't seen anything about LACP w/Tagged VLANS hanging off the LAGG interface.  Is this even possible with this hardware?