Messages

106

21.7 Legacy Series / Re: dhcp6c crashing on Signal 10

« on: November 08, 2021, 10:40:51 pm »

No other reports of this AFAIK. Firstly, can you set log level to debug for dhcp6c. If there's a core dump, I think it ends up in root, but I may be wrong.

107

21.7 Legacy Series / Re: PPPoE IPv6 Prefix Delegation with Static WAN Assignment

« on: November 07, 2021, 10:05:10 am »

For VPN etc, just use the address of the LAN(s). Unless it's for some really esoteric reason you do not need an address on the WAN. GUAs are just that, the GUAs on the LAN side are global addresses, not natted in any way.

108

21.7 Legacy Series / Dual WAN HE Failover

« on: October 23, 2021, 11:52:28 am »

I have a new FTTH connection, wonderful. 900Mbps symmetrical. The issue I have is that the with new connection everything is dhcp, no statics. Well I can mostly live with that. IPv6 though will cause me issues, so I am using an HE tunnel which gives me static, all good and dandy, works perfectly. I am going to keep my existing VDSL line for a while and I've set up a failover which is working.


The issue I'm coming up against a brick wall with is the HE ( GIF ) tunnel; it uses a fixed parent, so it can either be, in my case, igb0 for the FTTH connection or igb1 for the VDSL connection. Is there a way to make the same tunnel change parent interfaces when WAN 1 fails over to WAN 2?


If not, maybe worth looking into?

109

General Discussion / Re: OPNSense Inter-VLAN Routing - Can't get VLANs to Communicate?

« on: October 18, 2021, 06:54:05 pm »

You just need to set-up rules for each VLAN.
I have three VLANs, pretty small. My Primary VLAN, an IOT VLAN and Server VLAN. Only the primary can access to the other VLANs, they cannot access to the primary. So in the IOT VLAN and Server VLAN I have a rule that allows access from the Primary.


So add the rule as follows:


Action: Pass
Quick: Selected
Interface: IOT
Direction: In
TCP Version: IPv4
Source: Primary_Lan net
Destination: Any


That's it.. should work.

110

21.1 Legacy Series / Re: Dyndns for Godaddy v6 (IPv6/AAAA) failing

« on: October 13, 2021, 01:16:46 pm »

OK, update on this. I have it working from a windows command shell. So this command ( I've removed the keys ) -



 curl -s -X PUT "https://api.godaddy.com/v1/domains/queens-park.com/records/AAAA/gateway" -H "Authorization: sso-key key:key" -H "Content-Type: application/json" -d "[{\"data\" : \"xxxx:xxxx:xxxx:xxxx:4e17:ebff:fe56:1905\"}]"


Works fine on windows, when I run the command from an Opnsense shell I get Unmatched '"'.

111

21.1 Legacy Series / Re: Dyndns for Godaddy v6 (IPv6/AAAA) failing

« on: October 13, 2021, 09:25:02 am »

Having the same issue, something weird going on. I've tried running the curl command from the shell and get the same error, so thought it might be a 'godaddy' issue. Then I ran a powershell script and that works fine. I get the same issue when using curl from a windows command shell.

112

General Discussion / Re: UDP Broadcast Relay

« on: September 15, 2021, 07:08:14 pm »

Glad it's working for you. Sadly I have had no time over the last few months to even look at Opnsense, in fact I've only just updated the system to 21.7 I've been that busy. Fortunately it's very stable and just carries on regardless.

113

Development and Code Review / Re: UDP Broadcast Relay beta package

« on: June 01, 2021, 09:56:32 am »

Not in the short term, up to my eyeballs with my real job. The source is available if you want to try and compile it yourself.

114

Development and Code Review / Re: UDP Broadcast Relay beta package

« on: June 01, 2021, 08:34:12 am »

Just install the package from the plugins. v1.01 is current.

115

21.1 Legacy Series / Re: IPv6 Windows Hosts getting address from other interfaces

« on: May 16, 2021, 05:04:40 pm »

Windows will indeed pick up an address from both the VLANs and parent LAN if there is an advertisement there. The solution if you do not have a managed switch to correctly separate the VLANs is to set the VLAN on the windows NIC itself. If you cannot see the option to set the VLAN ID in the NIC advanced options then for Realtek NICs there is the Realtek Ethernet Diagnostic Utility, if it's an Intel NIC then there is the equivalent Intel tool Intel Advanced Network (Intel® ANS) VLAN. Of course, if you have correctly configured switches in place then you don't need to use these tools.

116

General Discussion / Re: UDP Broadcast Relay

« on: May 10, 2021, 08:11:38 am »

I've done that on my local version already, changed Listen Port etc.. also hidden Source Address. I've just done a clean install on my test machine, it's been a while since it was clean - now I'm struggling to switch to the dev branch.. something odd is going on.

117

General Discussion / Re: Different DUID for different WAN interfaces

« on: May 09, 2021, 11:12:26 pm »

dhcp6c only supports one DUID. It supports multiple WAN interfaces but your ISPs config is a bit unusual.

118

General Discussion / Re: UDP Broadcast Relay

« on: May 09, 2021, 04:07:15 pm »

There are other options, I could remove some of the info from the entry, question is, what should stay and what should be hidden.

119

Hardware and Performance / Re: wifi 6 card compatiility

« on: May 09, 2021, 02:16:21 pm »

There is info on the pfSense website about wifi cards. It's not a limitation of either of the *sense projects that there is no support but a limitation within FreeBSD itself.
https://docs.netgate.com/pfsense/en/latest/wireless/hardware.html#radio-frequencies-and-dual-band-support
As I said in my original message, use an external access point.

120

General Discussion / Re: UDP Broadcast Relay

« on: May 09, 2021, 01:49:18 pm »

No worries. Try it and see if it's an improvement. The only other way is a complete change of interface,