Messages

91

Hardware and Performance / Re: SOHO hardware recomendations: Economic, 5(+?) Lan ports & Wifi hardware rec's

« on: March 21, 2018, 09:21:36 pm »

The cheapest I could find with 6 NIC is the MINISYS IBOX-501 N13 with celeron 3865u (Kaby Lake). But this slightly is higher in price.

92

Hardware and Performance / Re: SOHO hardware MINISYS

« on: March 21, 2018, 09:03:05 pm »

Thank you.

Looks like there is no significant difference between i5 and i7, at lest by benchmarks.

But still I do not understand why the newer Kaby Lake is more expensive if there is no advantage to the older generations.

93

18.1 Legacy Series / Re: VPN road worrier IKEv2 and DNS for local domain not working

« on: March 21, 2018, 08:59:23 pm »

IKEv2 in iOS does not have the selective split tunneling option (Send all traffic via vpn) and all traffic is by default routed via VPN

You are sure?

The routing of the outside traffic for me is not important, so I have not loocke deeply on it. You are right that there is no option on iOS to set-up the rooting. But when my VPN is enabled and I go to any "sho my IP" page I get the IP from mobile network and not from IP of OPNsense. So the outside traffic is not routed via OPNsense. It goes directly from the phone to to the internet

But my original question was not regarding routing. It was regarding the DNS server to be able to resolv the local net behind the VPN. Here I still have no idea how to realise it.

94

18.1 Legacy Series / Re: VPN road worrier IKEv2 and DNS for local domain not working

« on: March 19, 2018, 08:20:15 pm »

i  would say works as designed, but could mismatch.

OK. But why I have to posibility in IPsec seetings of server to give DNS server to the clients when it is not used anyway? Looks like I need to read more. Maybe a gap I do not yet understand.

you would have to route the complete traffic from your vpn through your Network.

If this is the solution it will be fine for me. In the first step I want to connect to local recources. The routing of the other trafic for me has no preference.

95

Hardware and Performance / Re: QOTOM -- confused

« on: March 18, 2018, 09:25:53 pm »

I have two both the i5 and i7

I run a 500/250 FTTP service on the i7 and even when I’m giving the link some real heavy work the cpu has never gone over 5%
The i5 is used on a FTTC 80/20 service and rarely hit more than 3%

Can you estimate how a Celeron 3865u (Kaby Lake) or a Core i3 7100u (Kaby Lake ) compares to the Core i5-5250U of Qotom is in regards of power consumption and power?

The MINISYS IBOX-501 N13 that is availiabe with Kaby Lake i3 Kaby Lake Celeron and  mentioned above looks interesting to me.

See also here:
https://forum.opnsense.org/index.php?topic=7637.0

96

Hardware and Performance / SOHO hardware MINISYS

« on: March 18, 2018, 09:16:36 pm »

Hello,

currently my OPNsense is running under Hyper-V. But I am planning to move it to a dedicated hardware.

Qotom is the company some are recommending also for pfsense. Qotom Q355G4 has CPU from Broadwell generation. The MINISYS IBOX-501 N13 has Kaby Lake CPU generation.

I am not familiar nowadays anymore with this big variety of different CPU types for mobile, embedded, desktop and server. Is here anybody with experience of different CPUs in combination with OPNsense?

Is there any significant difference in power and power consumption between Core i5-5250U of Qotom Q355G4 and Celeron 3865u and Core i3 7100u of MINISYS IBOX-501 N13?

Thanks.

97

18.1 Legacy Series / VPN road worrier IKEv2 and DNS for local domain not working

« on: March 18, 2018, 07:49:56 pm »

Hello,

I finally could set-up road worrier VPN with IKEv2 to work with iPhone (iOS). On OPNsense "Mutual RSA" and on iPhone cert-based authentication was the only IKEv2 based combination I could get running. Firewall setting and access to OPNsense ubound is set-up and seems to me correct by now. (IPSEC is in virtual network 192.168.200.0/24 and LAN is 192.168.100.0/24)

Everything so far works fine except of DNS for local network. In "mobile clients" of IPSEC settings in OPNsense the local DNS server 192.168.100.1 is set-up. By using a network tool on iPhone I can get DNS resolution for clients on LAN from DNS server of OPNsense on 192.168.100.1. But by using standard without giving explicit DNS name the iPhone is not contacting the local DNS for local domain.

Configuration issue or bug on OPNsense or on iPhone with iOS 11?

Thank you.