Topics

1

General Discussion / Using OPNsense to override crappy Meraki IPv6 implementation

« on: August 15, 2024, 05:48:33 pm »

So our firewall at work is a Meraki MX95 (which was decided above my pay grade).  It works, the problem is now that I am getting ready to roll out an IPv4 + IPv6 dual stack it is very limiting.  I can't just say let's rip it out and replace it because we just purchased a costly 3-year licensing & support renewal for it.  So I have to figure out a way to make it work.  I'd like to use OPNsense to tell clients to use our domain controllers for DNS, but not override the Meraki when it comes to the default route.  The problem is so far if I enable DHCPv6 on an OPNsense VM I'm using for testing (with one virtual NIC, the next time I'm in the office it will get a passed-through i350 NIC) it advertises itself as a DNS server as well.  With Advertise Default Gateway unchecked hosts also tend to get the MX95 as a DNS server.  Does anyone have any suggestions on how to make this work without telling my boss we just wasted $7250.00 on the MX95?

2

23.7 Legacy Series / Speeds not as stable as pfSense

« on: November 08, 2023, 11:48:56 pm »

I have successfully converted everything from pfSense to OPNsense (but the OpenVPN server I almost never used).  However, I have noticed that my connection speeds are not nearly as stable as they were under pfSense.  In pfSense I'd almost always get close to my provisioned 960 Mbps down and 35 Mbps up (actually 40 Mbps up due to the over-provisioning my ISP does).  But in OPNsense I will get anywhere from 300 Mbps to 950 Mbps down.  Upload is fairly stable.  I just need some ideas on where to look to help resolve this before I start transitioning other people to OPNsense from pfSense as well.

3

23.7 Legacy Series / WAN not getting IPV6 address

« on: November 04, 2023, 10:24:13 pm »

Hello,

I just came from pfSense, and configured my WAN interface the same way.  DHCP & DHCPv6 with a /56 prefix for IPv6.  However, no matter what I do unless I check "Request only an IPv6 prefix" I get no IPv6 information on the WAN.  Same NIC in my router, everything else is the same.  Even got the same IPv4 address.  Any suggestions on where to look and what you need to help me?

4

General Discussion / Problem connecting to Meraki Client VPN

« on: February 01, 2020, 09:06:12 pm »

Hello,

Where I work we use a Meraki MX64 firewall and our VPN access is through their client VPN.  Happens to be L2TP/IPSec.  It worked fine until I switched to OPNsense.  From what I can see nothing is being blocked (I did add a rule to allow anything from the public IP I connect to back into my firewall).

Nothing is being blocked outbound that I can see either.  Any suggestions on what to look at in order to get this working (other than deploying the OpenVPN appliance at work so I can connect using that instead).