6691
17.1 Legacy Series / Re: CARP Bug in 17.1 resulting in split brains or backup always "master" ???
« on: June 27, 2017, 04:32:14 pm »
Just to isolate further, can you check LAGG without VLANs?
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
6692
16.7 Legacy Series / Re: Netflow export IP address
« on: June 27, 2017, 02:04:14 pm »
Push "Tab" or "Space" after adding the ip address ... known "bug/limitation"
6693
17.1 Legacy Series / Re: Fragmented UPD not send over IPSEC tunnel
« on: June 27, 2017, 11:44:27 am »
When the problem stays with small MTU too your hardware is underpowered.
I also experienced issues when testing with IPerf some ASA 5515 routers, when it reaches the limit packets get dropped.
I also experienced issues when testing with IPerf some ASA 5515 routers, when it reaches the limit packets get dropped.
6694
17.1 Legacy Series / Re: CARP Bug in 17.1 resulting in split brains or backup always "master" ???
« on: June 27, 2017, 10:20:01 am »
Have you tried this setup without LAGG to isolate the problem?
I'd first setup the whole thing without VLANs and without LAGG. If this works as expected I'd add VLANs. If this works as expected I'd add LAGG.
Then you'll see where exactly the error is.
I'd first setup the whole thing without VLANs and without LAGG. If this works as expected I'd add VLANs. If this works as expected I'd add LAGG.
Then you'll see where exactly the error is.
6695
17.1 Legacy Series / Re: Fragmented UPD not send over IPSEC tunnel
« on: June 26, 2017, 10:14:45 pm »
Yep, but normally you should fix the fragmentation issue if possible, this would be best practice.
6696
General Discussion / Re: netflow log
« on: June 26, 2017, 08:23:47 pm »
You should use an external Netflow collector, the local one is not for big data, only to give you an insight whats going on right now.
6697
17.1 Legacy Series / Re: Fragmented UPD not send over IPSEC tunnel
« on: June 26, 2017, 06:52:55 pm »
Firewall / Settings / Normalization
Tick IP Do-Not-Fragment and recheck.
Tick IP Do-Not-Fragment and recheck.
6698
17.1 Legacy Series / Re: NAT specific IPs from WAN ip address space
« on: June 25, 2017, 05:12:12 pm »
Under Firewall go to Virtual IPs and add it as a VIP, then add the nat
6699
German - Deutsch / Re: OPNsense braucht immer wieder einen Neustart
« on: June 25, 2017, 12:09:54 pm »
clog und nicht tail ist das Tool der Dinge 
6700
German - Deutsch / Re: OPNsense Performanceproblem bzw. kein Internet
« on: June 25, 2017, 12:04:37 pm »
Gute Idee mit der Config export/import.
OpenVPN braucht schon etwas mehr Performance, aber da müssen schon viele Connections und Traffic drauf laufen.
OpenVPN braucht schon etwas mehr Performance, aber da müssen schon viele Connections und Traffic drauf laufen.
6701
17.1 Legacy Series / Re: I need to install Bacula client
« on: June 24, 2017, 11:17:22 pm »
ATM there's no pkg available for OPN but you can send a FR at github if you like.
6702
German - Deutsch / Re: OPNsense Performanceproblem bzw. kein Internet
« on: June 24, 2017, 10:28:21 pm »
Die Anzahl von IPSec spielt nur eine untergeordnete Rolle und SSD kann gar nicht so lahm sein.
Wenns geht am besten frisch installieren und noch mal von vorne beginnen und dann nur das machen was auch wirklich benötigt wird.
Wenns geht am besten frisch installieren und noch mal von vorne beginnen und dann nur das machen was auch wirklich benötigt wird.
6703
German - Deutsch / Re: OPNsense braucht immer wieder einen Neustart
« on: June 24, 2017, 12:13:11 pm »
Jo, das ist immer tricky ... so ein "reload in XXX" wie bei Cisco wäre noch geil 
Sag Bescheid wenn du soweit bist.
Sag Bescheid wenn du soweit bist.
6704
17.1 Legacy Series / Re: 2 different configd.py errors!
« on: June 24, 2017, 10:48:31 am »
Try this one https://forum.opnsense.org/index.php?topic=5219.0
6705
German - Deutsch / Re: OPNsense Performanceproblem bzw. kein Internet
« on: June 24, 2017, 10:30:50 am »
Gehts denn wieder schneller wenn du die beiden Howtos wieder rückgängig machst?