IPSec interface does not show under Interfaces or Firewall rules

[thomasnilsen]

Hi,

I have just configured IPSec and it works very well (up to point where traffic is routed), but when I was going to setup firewall rules for it, it's not there.. I tried to "Assignments" under Interfaces and see if its waiting there, but no luck..

On my dashboard etc the IPSec shows in traffic graphs etc..

best regards
Thomas

[fichtner]

Hi Thomas,

Which version? I think this was permanently fixed in 17.1.1:

https://github.com/opnsense/changelog/blob/master/doc/17.1/17.1.1#L36

Cheers,
Franco

[thomasnilsen]

Hi @fichtner

17.1.2 (installed).

I started at 17.1 but did a update from that to 17.1.1 and then to 17.1.2 if that helps..

best regards
Thomas

[fichtner]

Ok, saving the config in any dialog should fix this. If not we need to take a closer look...

[thomasnilsen]

That does not do it.. Tried refreshing everything but no luck..

[fichtner]

One more in the forum: https://forum.opnsense.org/index.php?topic=4638.0

Maybe it's this: 318426c

Can you try to revert via:

# opnsense-patch 318426c

And save an unrelated page like e.g. System: Setting: General?

Thanks,
Franco

[mircsicz]

I'll check that after a few hours sleep...

[mircsicz]

THX Franco, after patching and saving something somewhere the IPsec interface was back in Firewall > Rules.

But the old problem remains the same, I can't connect to the dev's behind the IPsec. It even got worse, can't connect even with the rules on WAN enabled...

[fichtner]

@mircsicz need to take a look at that config and why it's breaking the expected logic.. the IPsec pass rules could be gone for the moment: try to reapply the firewall rules with the tab and pass rule in place.

[mircsicz]

already done... ;-)

But no change :-/

I could see in the log that traffic is again being recognized on WAN instead of IPSEC... But the rules we created for that problem are in place!

[thomasnilsen]

My IPSec rule tab has re-appeared, but it's still not shown under interfaces src/dst in rules etc. This happened when i created a site-to-site vpn with phase1 and phase2 entry..

I can now successfully hide/unhide the IPSec tab under firewalls by enable/disable Phase1/Phase2 on my site-to-site profile.. So I guess there is some broken logic on the part that decides when to show that tab based on that..

[AdSchellevis]

timeout due to inactivity