IPsec config is not generated

[sadperson99]

Hello,

I have followed this guide:
https://forum.opnsense.org/index.php?topic=35840.0

But I can't seem to be able to start strong swan, when I check swanctl.conf it was empty !
I tried recreating the tunnel, I tried searching in the forums but I can't seem to find a solution.
Please help me and thank you for your time !

Best regards,
sadperson 99.

[franco]

It's probably not enabled? Check the bottom of the tunnel settings or connections page for the enable checkbox.


Cheers,
Franco

[sadperson99]

Shame on me, that indeed was the case
Thank you very much !

[franco]

I'll make a ticket to maybe make this more prominent. It was mentioned to me again last week.


Cheers,
Franco

[franco]

FYI https://github.com/opnsense/core/issues/6973

[bimbar]

This is not the only one, HAProxy enable is also fairly well hidden.

[netnut]

I'll make a ticket to maybe make this more prominent. It was mentioned to me again last week.

Yes please, finally had some time to create the 'new' swanctl config style tunnels, took me an hour or so to realize I didn't checked the box...

If IPSec isn't enabled, the Start, Restart and Stop buttons aren't visible (Top Right Header). IMHO this might be a nice place for the enable checkbox. The checkbox itself maybe isn't the nicest visual element to have there, could be an iOS style like on/off switch/slider.