Messages

I am a noob. The problem is that I have to do a power switch to reset WG.  How do I reset WG more easily? Somethings I have to do several reboots to get WG connect.

How do restart wireguard from the dashboard lobby widget?

Fixed. Surricata was blocking the ssh connection.

24.7.9_1 I can longer putty in,
If I reset to factory settings and enable ssh, there are no problems.
Diffed current *.ml and factory *.xml and looked at the ssh section. There are no diffrences.


Used the following settings:
System -> Settings -> Administration -> Secure Shell is enabled and LAN is in the "Listen Interfaces".


System: Log Files: Audit
2024-11-22T09:53:37-05:00   Error   sshd-session   error: kex_exchange_identification: read: Operation timed out   
2024-11-22T09:51:43-05:00   Notice   audit   user root@10.59.11.213 changed configuration to /conf/backup/config-1732287103.1748.xml

in /api/syslog/settings/set /api/syslog/settings/set made changes   
2024-11-22T09:51:40-05:00   Error   sshd-session   error: kex_exchange_identification: read: Operation timed out



Yes, I am running wireguard,surricata,zenarmour, and adguard.
Never had issues ssh  into opnsense.

Is  my deployment mode and WG interface selection correct? On the lan,  I am using intrusion detection with Surricata.

Updated to 24.7
WG goes into loop and need to use monit

Followed the link
https://forum.opnsense.org/index.php?topic=35919.0

I needed to use lower case 's' and not upper case

/usr/local/sbin/pluginctl -S wireguard

Start: /bin/sh -c '/usr/local/sbin/pluginctl -s wireguard start xxxx-xx-tt-yy-uuuuuuu'
Stop: /bin/sh -c '/usr/local/sbin/pluginctl -s wireguard stop xxxx-xx-tt-yy-uuuuuuu'

I get a monit status error

Any suggestion ?

How did u setup the WG monitor? I used this link
https://forum.opnsense.org/index.php?topic=35919.0

I am getting an error in the audit health log. What is it?
Running wireguard, intrusion detection,zenarmour.
It was not there after I  started from 24_1-> 24_1_6.  Only after I restored my Opnsense-config.xml file


>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
   size (299, 364)
   sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x69344d6e7acbd6e60e93c10865e489c54293af7143ef5cc58127aa67175d0dd2)
>>> Check installed repositories

Thanks

Has anyone tried to integrate this wifi 7 card into their opnsense system?

Just found this amazing item on AliExpress. Check it out! $29.87 | Comfast 8774Mbps WiFi 7 Intel BE200 Pcie Wireless Wifi Adapter Bluetooth 5.4 Tri Band 2.4G/5G/6GHz Wifi7 Card Win10/11 Linux
https://a.aliexpress.com/_mrvOh70

Hansen97124
Is it in between    <reservations> and  </reservations> tags?
Does the reservations show up in the kea reservation gui?
Are u sure the reservation subnet uuid is correct for your network?
Search on the subbnet uuid. 19b11319-3d95-40c0-8668-56b15a05a6c0

It should match ur network u declared earlier.

Open the ur config-OPNsense*.xml, the reservation uuid is unique per reservation and should have one subnet uuid if they belong to that subnet.

      </reservations>
          <reservation uuid="6a688941-02f8-46aa-abc6-8121fa434809">
            <subnet>7046c7cb-a9fb-4a50-8a49-3b6e77d42809</subnet>
            <ip_address>192.168.1.100</ip_address>
            <hw_address>90:a1:b1:c1:d1:e11</hw_address>
            <hostname/>
            <description/>
       </reservations>
   

I have a new issue. This morning the client could not do nslookup 8.8.8.8, the Firefox browser on max protection (nextDNs) said pick a new selection. I restarted the wireguard service and no dns. I had to reboot opnsense and everything worked. Any suggestions? The w11 nic connectivity always said it had internet  access.

@CJ
I fixed my Firefox browser and selected maximum protection and selected NextDNS in the security and privacy settings. Thank u.

@Valentinas
What rule did u add to the wireguard ip pool? Can post a pic or provide details?