Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

OpenVPN diagnostics

For both site-to-site and remote user scenarios, when things are not working as expected, we can try using some valuable tools offered by OPNsense to find possible issues. Let's look at some examples.

OpenVPN is connected but the traffic is not reaching the tunnel's destinations

I have tried to list the more common issues related to OpenVPN troubleshooting based on my personal experience here:

  • The first step is to check your firewall rules and look for packets that have been blocked. Especially check the OpenVPN firewall rules and check all necessary rules have been created.
  • On the client side, it can happen that the operating system is not creating the proper routes. This issue can be related to the user's permissions or some local network problem while creating the tunnel routes. Another common cause is conflicting routes (with existing interfaces or even with an IPsec tunnel).
  • Always check the log file on both sides (server...