[SOLVED] L2TP kernel panic

[macafee]

The l2tp services is out of services since opnsense16.1.4. The l2tp services led to kernel panic. You must disable the l2tp services if you want to use the new version of opnsense. The image of attachment is the infomation of kernel panic.

[franco]

Please mail me at franco at opnsense dot org for further assistance, I will need to take a look at your config

[macafee]

Sorry Franco. The config file includes a lot of sensitive information so that I can't email it to you.

[franco]

That's ok. I don't necessarily need the config. I can provide:

(a) assistance in restoring an older opnsense version that works
(b) debug the issue so that it's fixed in the next version

I've not been able to reproduce this. I've done a lot of work on L2TP recently and never saw this. It may be related to the interface type that you run the L2TP on.

I need to know which version change caused this. I looked at the 16.1.3 -> 16.1.4 shift and it did not turn up anything. The rework was done later.

Any help here is greatly appreciated.

[franco]

FWIW, the kernel patch below most likely fixes this. I'm saying "most likely" because I have heard nothing back to troubleshoot.

This will be in 16.1.9 or 16.1.10 along with the porting of PPTP/L2TP/PPPoE to MPD5. Let me know if you want a test kernel.

https://github.com/opnsense/src/commit/56b3d8393e8f7d2e6bbd7753e2c8e3e5925f9b11

[macafee]

The problem is still existence. I will retest this problem because I see the new image is released.

[franco]

Due to sparse feedback the fix is not yet shipped. We're at 16.1.8, note that I said it will be in 16.1.9.

FWIW, there's a test kernel that has the fix in it, you can install via:

# opnsense-update -kr 16.1.8-aslr && /usr/local/etc/rc.bootup

It's a test release, but it's stable. Read more about it here:

https://forum.opnsense.org/index.php?topic=2690.0

[macafee]

Ok, I see. Thank you.

[macafee]

I updated the opnsense to 16.1.9 and enable the l2tp services again. Now everything is ok. Thank you.

[franco]

Hi macafee,

There is a larger rework coming bringing L2TP (as well as PPTP and PPPoE Servers) to MPD5. Some things have changed there, mostly related to having a server IP that is an actual IP on the box (a Virtual IP will suffice too).

Biggest change, however, will be the moving of those services into a VPN plugin that must be installed if needed, as well as the removal of associated kernel patching.

I'm holding those changes off completely until 16.7, but I appreciate all the help in testing and feedback sooner than release date.

Thanks for letting us know this works as expected again.


Cheers,
Franco