Messages

571

16.1 Legacy Series / Re: Routing apple Bonjour

« on: July 21, 2016, 12:43:31 am »

Guys you are a rock if you help me get this fixed.
to answer the qustions about MACS and VLANS,
i have Printer on VLAN 20, MAC on VLAN20 but still can't find the printer have to add it with IP.
the VLAN 20 is  10.20.10.0/24 Printer VLAN and the Users are on VLAN 30,  10.30.10.0/24
so the printer IP is
10.20.10.129
255.255.255.0
10.20.10.1 DNS/Gateway

iPad user is 10.30.10.120 / 255.255.255.0/10.30.10.1 DNS , Gateway

the DC and File server is 10.20.10.20 /255.255.255.0 / 10.20.10.1 Gateway 127.0.0.1 DNS

So configuring the DHCP of each VLAN to to have DNS 10.20.10.20 as primary dns and share the printer from that server, would airprint the printer to the iPads users ?

having the printer on the LAN IP would fix it ?
i have a LAN Physicall NiC, 192.168.1.0/24, on that Phiysical adress i have created the VLAN,
everything routes over LAN as i understand so should be a routing issue.

thank you

572

16.1 Legacy Series / Re: Routing apple Bonjour

« on: July 20, 2016, 08:10:15 pm »

Zeitkind thank you for your answer with your explination .
the issue is after we installed the OPNsense the printers doesn't shows on the MAC users  we have to specify the IP adres to get it to work.
We never thought about iPad users who needs to print using their iPad.
we have a Domain controller with some file shares and users .
because the MAC is a pain in the ass to add to the DS, we start sharing dhcp using OPNSesne as gatewy and dns on the dhcp scop.
maybe is this related to the issue ?
in Many PFSENSE and Cisco installation the printers works out of the box without any configurations .
Editing the scoop with the Domain controller as DNS and Forward the DNS request to the firewall would fix this ?
adding the printer to the domain controller and  share it over the network would fix this ?
thank your fast answers

i see that Bonjour users UDP port 5353,
creating a firewall Rules on the Group VLAN Any : to UDP 5353 would make it works ?
i hope someone can help us here before we will be forced to remove the OPNsense firewall.

573

16.7 Legacy Series / Re: notification

« on: July 20, 2016, 06:39:55 pm »

I think that there may be a misconception as the gateway monitoring tool will cause these mails to be sent, not "disabling" the interface, although it could be a language problem we're having.

Pulling the cable is a more effective test.

i am testing this on a virtual infrastructuur.
i couldn't pul the cable,
i've disconnected the NIC but it didnt sent the email either.

574

16.7 Legacy Series / Re: IPSEC + OPENVPN

« on: July 20, 2016, 06:37:25 pm »

WE hve configured openvpn for the clients. we couldnt get it to work.
right now we are set, i hope you guys can have a look at this in the near future.

575

16.1 Legacy Series / Re: Routing apple Bonjour

« on: July 20, 2016, 04:40:00 pm »

The printer are not working because its a DNS issue ?
Our users are suffering from this , and we are deciding to take OPNSENSE offline and put Cisco back.
I can't seem to find a solution for this.
Can someone advise what to do to get this working ?
Bartsmitj opening the ports on the LAN would makes it work ?

Thank you guys

576

16.7 Legacy Series / Re: IPSEC + OPENVPN

« on: July 20, 2016, 08:57:20 am »

Hi Fran o,
I just double check it , the configuration is really one of one,
Didn't miss a step, every step is copy and past.
I did a capture but nothing really there .
Hope there are more steps to troubleshoot this . As our users are leaving today the office for two weeks business trip .

577

16.1 Legacy Series / Re: Migrate from PFsense to OPNsense

« on: July 19, 2016, 11:54:27 pm »

This is my new project after I will finish with some implantation .
Have created a LAB and will test on a VM.
If any one has gotten this working would like to know if it even possible .

578

16.7 Legacy Series / Re: IPSEC + OPENVPN

« on: July 19, 2016, 08:26:23 pm »

Can someone please advise as it become critical for our mobile users.
I can't go to the internet or ping the devices over the LAN
Even can't ping 8.8.8.8
The settings of the tunnels are not descriptor on the Doc so can't seem to configure the tunnel correctly .
PLEASE HELP.
See screenshot those options are not descripte on the Document.
I can ping the connected client from the LAN using the IP of the tunnel. But the client can't ping the LAN.
Please advise

Firewall: NAT: Outbound has two Rules see attached .
One static 500 ISAKMP and one not . Please see attached picture.

579

16.7 Legacy Series / Re: IPSEC + OPENVPN

« on: July 19, 2016, 07:00:27 pm »

Managed to get this working,
When the user is connect over IPSEC , can't ping the LAN or anything.
I've created a Rule on the IPSEC to access the LAN but its not working.
See attached for the firewall rule on the IPSEC Interface.
It doesn't works even with the rules any to any.
I have checked the log there is nothing that says something about the block.
It does shows the process of how the tunnel is build up with no warning.
Please advise

580

16.7 Legacy Series / Re: [SOLVED] L2TP gone and how to upgrade?

« on: July 19, 2016, 06:58:38 pm »

I would convince the customer the security risk they could have .

581

16.7 Legacy Series / Re: [SOLVED] L2TP gone and how to upgrade?

« on: July 19, 2016, 02:51:25 pm »

if i were you i wouldn't use L2TP, i would go for openVPN of IPSEC.

582

16.7 Legacy Series / Re: [SOLVED] can't install opnsense

« on: July 18, 2016, 10:52:23 pm »

we are happy with the External DVD as it mount it automatically.
i never seen it either, nothing on the net to troubleshoot.
glad i could fix it .
thank you guys for your help and for the UEFI driver

583

16.7 Legacy Series / Re: [SOLVED] can't install opnsense

« on: July 18, 2016, 10:19:52 pm »

its appear to works , thank you for the UEFI Drivers on the Version 16.7.
with a external USB DVD it does works.

584

16.7 Legacy Series / Re: [SOLVED] can't install opnsense

« on: July 18, 2016, 10:06:25 pm »

thank you for your answer,
i tried both usb3 and 2 both are rejected.
burned the ISO to a DVD , now its installing with a external DVD, seems to working till now.
80% installing

585

16.7 Legacy Series / Re: [SOLVED] can't install opnsense

« on: July 18, 2016, 09:15:29 pm »

Any suggestions guys ? i am stuck here
somehow the usb won't mount