Lan port is hosed, can't access gui

[AverageGuy]

I need to get the configuration to new hardware.  What file(s) need to be copied to the new system?  I read something about /conf file but it was confusing.  I am logged in with a keyboard/mouse and monitor as root.  I plan on copying the file(s) to a usb stick unless there is a better way.  I thought about swapping the lan/wan ports but I don't know how.

Hardware is Protectli Vault FW2B
Thanks.
Jim

[AverageGuy]

I've made some progress.  I booted the system up with a Linux stick since I know Linux far better than bsd.  I figured out how to mount the ufs file system and copied the /conf/backup files to another usb stick.  I then installed OPNsense on the new hardware using the same img file (I think) that I used to build the bad one.  I got it up and running with minimal configuration, logged into the web interface on 192.168.1.1, did a restore using the latest backup file from the usb stick and it rebooted automatically as it said it would.  I rebooted the laptop and it can't obtain an IP address.  It's trying but it never succeeds.  The console output indicates the lan is operational on 192.168.2/24 which is what it was under the old hardware so I know the configuration was changed.

Any help here would be appreciated.  I don't really want to go through and reconfigure from scratch.  Way too many things need to change and I probably can't remember what they are.  I really want the restoration of the backup to work.

Thanks,
Jim.

[Demusman]

option 8 in console.
pfctl -d to disable firewall. fix the rules. when you apply the fix it will restart pf but pfctl -e is the enable command.

Keep in mind, this disables the WAN rules also, so maybe disconnect WAN if you're worried.

[AverageGuy]

When you said disable the firewall, I thought that it would then allow the laptop to get an ip address.  It still doesn't.  I logged in as root, did the lpctl -d, rebooted the laptop and it's still trying to get an ip address.  So I started over by reinstalling OPNsense, restoring the backup, logged in as root, disabled the firewall and it's still not working.

I have no idea how to fix a firewall configuration from the command line, if that's what has to be done.

Thanks,
Jim.

[cookiemonster]

Does the new hardware have the same interface types as the old one? Because if they don't match, then the backup needs to be made to match before the restore.

[AverageGuy]

The hardware is  the identical model number.  I suppose that the manufacturer could have made changes but somehow I doubt it.  By the way, I don't have the WAN port connected to anything right now.  I wanted to see if I could get the configuration nailed down first.  To connect the router to the internet would involve taking down the temporary router, wiring in the new hardware and a call to xfinity to have them reset the modem.  For some reason each time I install a new router, they have to reset the modem to get the router to connect to the modem.
 

[cookiemonster]

that makes it easier. Maybe newer revision/step on the nic but most likely the same type.
Just a case of booting it up (the new one without plugging to WAN) and testing with two devices.  One connected to console and one trying to connect and seeing what is that is "not working". It could be anything or even nothing. Imagine two routers with the same dhcp pool in the network at the same time, and a device asking for a lease, funky things can happen.

[AverageGuy]

If I understand you correctly, that's what I have.  A monitor, keyboard and mouse connected to the router and a laptop connected via an ethernet cable.  After installing the OPNsense I was able to connect to the gui at 192.168.1.1 without a problem.  I received an ip address of 192.168.1.100.  After restoration no joy.  No indication of anything going on at the console.  I did look at the firewall log and it was empty.  No chance of two devices.  Just one ethernet cable between the laptop nic and the lan port on the router. 

Is there some sort of log I can access from the console that might give me a bit more information?

[cookiemonster]

yes but we need to get the console giving the output, right?

[AverageGuy]

I think I'll just drown myself.  Somehow I flipped the lan/wan ports during install.   

I guess I'll see if there is a way to correct it via the gui, otherwise I'll just do a reinstall.  I'm getting really good at installing OPNsense. 

Thanks for the help and sorry for the bother.
Jim

[Demusman]

You're better off doing it from the console. Assign interfaces.

AS far as Xfinity, you don't need them to reset the modem.
Cable modems "remember" the MAC of the directly connected device. So if you change that device, just power cycle the modem to clear the old MAC.

[AverageGuy]

Ah, thanks for the power cycle tip.  I'll see if I can figure out what you mean about assigning interfaces from the console.

Great stuff, thanks again.
Jim