Recent posts

#1

26.7, 26.10 Series / Re: Upgrade to 26.7.8 broke Ga...

Last post by oc - Today at 10:13:15 PM

I upgraded from 26.7.7 to 26.7.8_1 and then 26.7.8_2 and experienced no issues (and I have a pretty diversified gateways setup, policy based routing, etc.) - thanks OPNsense team!

#2

26.7, 26.10 Series / Re: WAN_DHCP6 learns OPNsense ...

Last post by franco - Today at 09:02:01 PM

Network loop between WAN and LAN?

#3

26.7, 26.10 Series / WAN_DHCP6 learns OPNsense LAN ...

Last post by noclue68 - Today at 08:32:46 PM

Hello,

I'm facing a very strange IPv6 issue and after extensive troubleshooting I cannot explain the behaviour anymore.

Topology:

Internet
  |
FRITZ!Box
  |
OPNsense WAN
  |
OPNsense LAN
  |
GS308E Switch
  |
Clients

Environment:

- OPNsense running as VM on Proxmox
- WAN and LAN are on separate virtual NICs
- WAN and LAN are connected to separate Proxmox bridges
- FRITZ!Box configured with Exposed Host
- DHCPv6-PD enabled

OPNsense NICs:

LAN:
MAC BC:24:11:89:92:3C

WAN:
MAC BC:24:11:E3:15:CE

FRITZ!Box:

MAC B4:FC:7D:50:16:A5

Problem:

System > Gateways shows:

WAN_DHCP6 (active)

Gateway:
fe80::be24:11ff:fe89:923c

However, fe80::be24:11ff:fe89:923c belongs to the LAN interface of OPNsense itself.

NDP confirms:

OPNsense LAN:
fe80::be24:11ff:fe89:923c
MAC bc:24:11:89:92:3c

FRITZ!Box:
fe80::b6fc:7dff:fe50:16a5
MAC b4:fc:7d:50:16:a5

The FRITZ!Box is visible and reachable via NDP, but OPNsense still installs its own LAN link-local address as the active WAN_DHCP6 gateway.

Additional log message:

RA with a lower CurHopLimit sent from
fe80::be24:11ff:fe89:923c
(current = 255, received = 64)
Ignored.

Already tested:

- Fresh OPNsense installation
- GS308E factory reset
- Same behaviour after reinstall
- WAN and LAN are separated
- FRITZ!Box link-local address visible in NDP
- Issue reproducible

Expected gateway:

fe80::b6fc:7dff:fe50:16a5

Actual gateway:

fe80::be24:11ff:fe89:923c

Has anyone seen OPNsense learning its own LAN link-local address as WAN_DHCP6 gateway before?

I would appreciate any ideas regarding DHCPv6-PD, Router Advertisements or gateway discovery in this setup.

Thanks.

#4

Tutorials and FAQs / Re: [HowTo] OPNsense Boot Load...

Last post by Lucid1010 - Today at 08:04:47 PM

https://forum.opnsense.org/index.php?topic=51959.0
https://forum.opnsense.org/index.php?topic=29304.0
https://forum.opnsense.org/index.php?topic=48145.0
https://www.reddit.com/r/opnsense/comments/1v7qqhn/26111_267x_upgrade/

Here are some links and bookmarks I kept from earlier.

Code Select Expand

sha256 /boot/loader.efi /boot/efi/efi/boot/bootx64.efi /boot/efi/efi/freebsd/loader.efi

Code Select Expand

efibootmgr -v

Code Select Expand

strings /boot/efi/efi/freebsd/loader.efi | grep "EFI loader"
Those commands look like they will be helpful as well.
However, what is the reason OPNsense itself doesn't update the bootloader when performing a firmware upgrade?

#5

Development and Code Review / Re: netflector available as pl...

Last post by UnicronHD - Today at 07:48:03 PM

Thanks everyone! I'm surprised it has released already. I was expecting to wait until 27.x :).

#6

Tutorials and FAQs / Re: [HowTo] OPNsense Boot Load...

Last post by nero355 - Today at 07:18:47 PM

Couldn't have said it better.

Thanks!

I did a small edit while you posted :)

#7

Tutorials and FAQs / Re: [HowTo] OPNsense Boot Load...

Last post by Patrick M. Hausen - Today at 07:15:06 PM

- You don't need to, but you could just in case.
- Doing it anyway can prevent having issues with upgrading OPNsense/FreeBSD in the future after not having upgraded the Boot Loader for many years in a row as written in some posts here on the forum.
- If you are using ZFS as the File System and you want to update/upgrade your ZPOOL then you need to update/upgrade the Boot Loader first to make sure your OPNsense/FreeBSD will boot succesfully after the next reboot !!

Couldn't have said it better.

#8

Tutorials and FAQs / Re: [HowTo] OPNsense Boot Load...

Last post by nero355 - Today at 07:13:31 PM

It looks like the bootloader upgrade went smoothly.

NICE! :)

Do I need to upgrade the bootloader with every OPNsense major upgrade? (ex. v26.7 -> v27.1)

I am considering creating a F.A.Q. part with that kind of questions in the future :)

There are multiple answers to that question :
- You don't need to, but you could just in case whenever the underlying FreeBSD Release changes like it did this year : 14.x to 15.x
- Doing it anyway can prevent having issues with upgrading OPNsense/FreeBSD in the future after not having upgraded the Boot Loader for many years in a row as written in some posts here on the forum.
- If you are using ZFS as the File System and you want to update/upgrade your ZPOOL then you need to update/upgrade the Boot Loader first to make sure your OPNsense/FreeBSD will boot succesfully after the next reboot !!

That's all I can think of right now...

#9

Tutorials and FAQs / Re: [HowTo] OPNsense Boot Load...

Last post by Lucid1010 - Today at 07:02:40 PM

It looks like the bootloader upgrade went smoothly.
Do I need to upgrade the bootloader with every OPNsense major upgrade? (ex. v26.7 -> v27.1)

#10

Zenarmor (Sensei) / Re: CPU spikes from Elasticsea...

Last post by mlenje - Today at 05:24:44 PM

I heard back from Zenarmor support.... "Our team is currently reviewing the findings and plans to include a fix in the upcoming maintenance release."