[SOLVED] Status - IPSec

[Aergan]

Hi there,

I've seeing an issue with the IPSec Status within: OPNsense 15.7.18_1-amd64

The widget on the homepage doesn't report the status correctly anymore (inactive tunnel, danger) and the status page itself now doesn't report the configuration properly or status.

The IPSec tunnel itself is actually working fine.

[franco]

Hi Aergan,

This looks like the same regression being reported in the German forum: https://forum.opnsense.org/index.php?topic=1601.0

So far we haven't been able to track it down. I've looked over the commit history between 15.7.17 and now but did not see something suspicious yet. Did you upgrade from 15.7.17 or earlier?

The only hint we have is that is affects both the devel and the release version, a common denominator is the strongswan package update, which had a config change, but it doesn't look related at first glance.

Would you try reverting to an older setup to verify? If so, I need your SSL flavour and arch to give you the right commands for the package replacement.


Cheers,
Franco

[AdSchellevis]

Hi Aergan,

I've updated / rewrote the ipsec status page and the widget to use the new VICI interface, which very likely will be in the next release of OPNsense.
The only thing that's not there (yet) is the leases information for mobile clients, but that has been broken from the beginning.

Regards,

Ad

[franco]

Yeah, Ad just went ahead and fixed it all. Expect VICI-backed IPsec status to hit the shelves with 15.7.19 next week.

[Aergan]

Hi there, sorry was a busy weekend so couldn't get back to you with the extra information. Thanks for fixing the issues, I'll eagerly await the next release.