Messages

you can try to reneg-sec 0 in your server.conf (https://duo.com/docs/openvpn)

What happens if you set a fake mac on both interfaces

Would start monitoring the gateway via API / CRON, which is more logical imho.

After that down and up interface

https://forum.opnsense.org/index.php?topic=10924.0

While were at it, to monitor if Sensei service is running

/api/sensei/engine/status

Hi  :D

Does anyone know if it is possible to get the status (Master / Slave) of a Virtual IP on a CARP 'interface via API, that's the only thing missing for me

Solved it for now, using monit

- carp_status_change --> enabled
- /api/monit/status/get/html

Hi  :D

Does anyone know if it is possible to get the status (Master / Slave) of a Virtual IP on a CARP 'interface via API, that's the only thing missing for me

Yeah that's the problem, Captive Portal is interface based, so it's not possible imo. For now ideally would be :

- An unauthorized user should be able to access the internet with the default sensei policy
- An authorized user should be able to access the internet with an assigned sensei policy

We are using RDS 2012 R2 and they are already authorizing (user / pw / 2FA), adding another manual authorization will get me killed  ;D

But the auto AD logon solves it all, thanx.

Thanx MB :-) For now, let me know if I understand correctly

Is the following possible right now?

'default' users (as in : NOT logged in via Captive Portal (AD)) will get the default policy within Sensei
authorized users (as in : logged in via Captive Portal (AD)) will get the 'assigned' policy within Sensei

Meaning, everyone has the default policy, unless they decide to login via Captive Portal (afterwards)

Thanx

Hi,

Any timeframe when we can expect this feature? Able to alpha / beta test if necessary, also volunteering for documentation on that part