OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 16.1 Legacy Series »
  • [SOLVED] Migrate from PFsense to OPNsense
« previous next »
  • Print
Pages: 1 [2]

Author Topic: [SOLVED] Migrate from PFsense to OPNsense  (Read 26907 times)

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 10099
  • Karma: 767
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #15 on: July 23, 2016, 11:05:19 am »
Very odd, does removing another CARP membership help?
Logged

shade73

  • Newbie
  • *
  • Posts: 41
  • Karma: 3
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #16 on: July 25, 2016, 03:13:38 pm »
What do you mean with "removing another CARP memebership" ?
Logged

shade73

  • Newbie
  • *
  • Posts: 41
  • Karma: 3
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #17 on: July 25, 2016, 03:16:42 pm »
Is this correct?

If I on the primary firewall click on "System / HA / Status" it shows:

Backup firewall versions
Firmware   Base   Kernel
16.7.r2-792f54c76   16.7.r-amd64   16.7.r-amd64

and so on.

If I do the same on the backup firewall, click on "System / HA / status" it shows:

The backup firewall is not accessible or not configured.

Is that right? Shouldnt it show that it is in a realtionship with the primary firewall?
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 10099
  • Karma: 767
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #18 on: July 25, 2016, 08:46:24 pm »
Quote from: shade73 on July 25, 2016, 03:13:38 pm
What do you mean with "removing another CARP memebership" ?

It would be helpful to see whether this is a problem of multiple CARP setups interacting in a bad way (in our code), so reducing the CARP to the bad WAN scenario could give hints. I don't expect it to magically start working, but right now we don't know.

The backup not being configured I don't know. There are some people here using HA extensively, maybe they can shed a light. And Ad is our expert on HA. I cannot be of too much help.


Cheers,
Franco
Logged

Julien

  • Hero Member
  • *****
  • Posts: 597
  • Karma: 32
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #19 on: July 25, 2016, 09:31:26 pm »
Hi Guys,
I am more interested in migrating the OPENVPN users and certificate.
Firewall rules can reconfigure them.
I have backed up the openvpn configuration and upload it to a new OPNsense, unfortunately the users and certificate did not  shows up even after couple of reboot.
Am I supposed to do something after import is successfully ?
Logged

shade73

  • Newbie
  • *
  • Posts: 41
  • Karma: 3
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #20 on: July 26, 2016, 12:13:56 pm »
Quote from: Julien on July 25, 2016, 09:31:26 pm
I am more interested in migrating the OPENVPN users and certificate.

I had to drop the certificates, pfsense and opnsense seem to have moved to far away from each other.
« Last Edit: July 26, 2016, 12:17:32 pm by shade73 »
Logged

shade73

  • Newbie
  • *
  • Posts: 41
  • Karma: 3
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #21 on: July 26, 2016, 12:16:39 pm »
Quote from: franco on July 25, 2016, 08:46:24 pm

The backup not being configured I don't know. There are some people here using HA extensively, maybe they can shed a light. And Ad is our expert on HA. I cannot be of too much help.


Do you have a step for step guide to setting up carp/HA on OPNsense? I'm thinking on the small differences there where on the openvpn setup from pfsense to opnsense, if there is some differences here too.
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 10099
  • Karma: 767
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #22 on: July 26, 2016, 12:21:34 pm »
Here you go: https://docs.opnsense.org/manual/how-tos/carp.html
Logged

shade73

  • Newbie
  • *
  • Posts: 41
  • Karma: 3
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #23 on: July 27, 2016, 05:35:54 pm »
Cant find anything off, no errors that stand out.

Do you think this will help me? https://www.deciso.com/business-support/ (as in they can solve the problem)
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 10099
  • Karma: 767
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #24 on: July 27, 2016, 05:46:08 pm »
I think so, yes. :)
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 10099
  • Karma: 767
    • View Profile
Re: Migrate from PFsense to OPNsense
« Reply #25 on: August 03, 2016, 12:39:43 am »
Could it be this? https://github.com/opnsense/core/issues/1100
Logged

shade73

  • Newbie
  • *
  • Posts: 41
  • Karma: 3
    • View Profile
Re: [SOLVED] Migrate from PFsense to OPNsense
« Reply #26 on: August 09, 2016, 04:16:09 pm »
No, it was not related to that in fact I had no errors in the HA setup.

I created business support ticket, and got help from Deciso. It was a good experience, very friendly and knowledgeable people. Jos helped me and found the cause quickly.

It turns out that our internet router with dual business connection, does not allow/accept the carp traffic between the 2 wan interfaces. Therefore can the secoundary OPNsense box not see that the primary WAN interface is up and thinks it is down and then puts its own as master and ends up with 2 masters on the WAN.

We have "injected" a switch between the OPNsense boxes and the internet router, and now it works just fine with failover and everything.
Logged

Wayne Train

  • Full Member
  • ***
  • Posts: 194
  • Karma: 12
    • View Profile
Re: [SOLVED] Migrate from PFsense to OPNsense
« Reply #27 on: June 14, 2017, 12:54:41 pm »
Hi,

I'm experiencing a similar issue. My backup-node shows:

"The backup firewall is not accessible or not configured."

While the master-node shows details about the backup-node. I always thought, that it's right like that, since the backup-node has no other backup-node and the config is always synced only from the master-node to the backup node. Or am I wrong?

By activating the OPNsense "help" on the HA-Config page it shows

"Do not use the Synchronize Config to IP and password option on backup cluster members!"

...so I assume the error message that the backup firewall is not accessible or configured is confusing, but not wrong? Right?

It would really be great if someone could clarify this issue.

Thanks in advance
CS


Logged

  • Print
Pages: 1 [2]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 16.1 Legacy Series »
  • [SOLVED] Migrate from PFsense to OPNsense
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2021 All rights reserved
  • SMF 2.0.17 | SMF © 2019, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2