Messages

16

16.7 Legacy Series / Re: After upgrde to 16.7.11 OpenVPN clients cannot connect anymore

« on: December 21, 2016, 10:47:41 pm »

Hi Franco,

This works fine now. I have tried with Typology on and off.

Thanks, great!!

17

16.7 Legacy Series / Re: After upgrde to 16.7.11 OpenVPN clients cannot connect anymore

« on: December 21, 2016, 09:48:36 pm »

@fraenki: It's unchecked. I followed this guide: https://docs.opnsense.org/manual/how-tos/sslvpn_client.html.
If I read correct (here: https://community.openvpn.net/openvpn/wiki/Topology), I should enable this, right?

@franco: If I try this, I get the following messages:
root@OPNsense:~ # pkg install -f https://pkg.opnsense.org/snapshots/openvpn-2.3.14_1.txz
Updating OPNsense repository catalogue...
OPNsense repository is up-to-date.
All repositories are up-to-date.
pkg: No packages available to install matching 'https://pkg.opnsense.org/snapshots/openvpn-2.3.14_1.txz' have been found in the repositories.

I did unlock Openvpn before I tried this. Also rechecked the currect package version, which is 2.3.13_1.

In System/firmware/settings I have both on Default.


Kind regards,
Ray

18

16.7 Legacy Series / Re: After upgrde to 16.7.11 OpenVPN clients cannot connect anymore

« on: December 21, 2016, 11:38:52 am »

Thank you, great!

19

16.7 Legacy Series / Re: After upgrde to 16.7.11 OpenVPN clients cannot connect anymore

« on: December 20, 2016, 03:00:29 pm »

Hi Franco,

I tried to install OpenVPN 2.3.13 with the command you wrote, did not work. I don't recall the exact error, but when I entered the line, it took about 10 minutes and then it said something like: No package created, or no package available... (also pkg update takes long time and does nothing).

For the old version, I installed and updated this appliance on November 7th. According to the releases it should have been 16.7.7.

I now have downgraded with usb stick to 16.7 (.1?). Everything seems to work ok now.

Is it possible to upgrade to 16.7.7, which I know works? I can't do it from the webinterface, which would bring me back to 16.7.11 and (maybe) broken OpenVPN...

Edit: I seem to have a solution now. As you can read above this, I downgraded to 16.7 release. I then locked the OpenVPN package and upgraded to 16.7.11. After reboot OpenVPN (2.3.11) would not start, so I updated OpenVPN to 2.3.13. After this, also OpenVPN would start AND I can connect now! Finally I locked the OpenVPN package again.


Thanks,
Ray

20

16.7 Legacy Series / Re: After upgrde to 16.7.11 OpenVPN clients cannot connect anymore

« on: December 18, 2016, 12:08:50 pm »

Hi Franco,

The appliance is an A10 Quad Core with SSD with OpenSSL.

Actually, I have the same problem with 2 different clients, both A10/OpenSSL.

When I reboot the appliance, I can connect with OpenVPN, but just for 15-30 seconds, then it stops working...

Also, I tried to update to v17, but all shell commands seem to fail, even a pkg update fails...

I now go to my client, to downgrade to 16.7 with memstick, and then I don't upgrade the appliance, which I now should work.


Edit: I tried switching 1 of the appliances to LibreSSL, but same problem.

Edit2: I downgraded 1 of the clients with memstick to 16.7. Restored configuration, OpenVPN worked instantly.

21

16.7 Legacy Series / After upgrde to 16.7.11 OpenVPN clients cannot connect anymore

« on: December 17, 2016, 02:13:10 pm »

Hi,

I just upgraded to 16.7.11, my openvpn client cannot connect anymore. Before upgrade was fine, now it stays on connecting.

Server log:
TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

The firewall rules on wan and openvpn are there, and again, was working fine.

Any ideas?

Downgrade to previous version?

Kind regards,
Ray

22

16.7 Legacy Series / Re: With new A10QC SSD appliance WAN connection dropping frequently

« on: October 05, 2016, 11:24:32 am »

I'll call tomorrow then. Thank you!

23

16.7 Legacy Series / With new A10QC SSD appliance WAN connection dropping frequently

« on: October 05, 2016, 10:01:57 am »

Hi,

Just had a new A10QC SSD appliance.

My WAN PPPOE connection to Xs4all drops frequently (3 - 4 times in the evening). The connection comes back up in a couple of minutes. TV continues to work.

I have a Xs4all fiber connection and followed this guide to set it up:
http://blog.firewallonline.nl/how-to-en-tutorials/xs4all-glasvezel-internet-iptv-op-pfsense-opnsense/

I did have OPNsense before on a computer with a SuperMicro board in it, and my connection never dropped before.

In the log I find this, which might be related?

Oct 4 22:53:29   opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'pppoe1'' failed to execute
Oct 4 22:53:28   opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'pppoe1'' failed to execute
Oct 4 22:53:27   opnsense: /index.php: The command `/usr/local/sbin/ifinfo 'pppoe1'' failed to execute
Oct 4 22:53:27   opnsense: /index.php: The command `/sbin/ifconfig 'pppoe1'' failed to execute

Oct 4 22:51:59   opnsense: /usr/local/etc/rc.linkup: HOTPLUG: Configuring interface opt2
Oct 4 22:51:59   opnsense: /usr/local/etc/rc.linkup: DEVD Ethernet attached event for opt2
Oct 4 22:51:59   configd.py: [0663a837-9193-4ea0-ae80-a856dded3adf] Linkup starting em1_vlan4
Oct 4 22:51:59   devd: Executing '/usr/local/opnsense/service/configd_ctl.py interface linkup start em1_vlan4'
Oct 4 22:51:58   configd.py: [64090e03-9389-447f-ac17-da150e4433cd] updating dyndns opt2

Does anyone have an idea what might be wrong?

Kind regards,
Ray

24

16.7 Legacy Series / Can't get ipv6 to work on Xs4all

« on: October 02, 2016, 12:31:59 am »

Hi,

I have a simular issue as oneman here: https://forum.opnsense.org/index.php?topic=3302.0

I followed the same guide (which I had working on pfsense), but here only a fe80 address on the wan interface, nothing on the lan.

bartjsmit wrote in the same topic to set a static ipv6 from a /64 subnet and enable RA on services, dhcp6, advertisements, unmanaged.

Now, all hosts on the lan get an ipv6 address through slaac, unfortunately, it's not working, I can't ping or anything else with ipv6 on the internet.

On the last part oneman writes that there are errors in dhcp6c_wan.conf and manually starting pd, which worked for him. I have no idea what to do or check!

I'm on 16.7.5-amd64.

Can anyone point me in the right direction?

Thanks,
Ray