Rosa-Luxemburgstiftung-Berlin / ansible-opnsense

Ansible role to configure OPNsense firewalls
18 stars 8 forks source link

improve openvpn handler #74

Closed zerwes closed 5 months ago

zerwes commented 5 months ago

relates #63

# /usr/local/opnsense/scripts/openvpn/ovpn_service_control.php 
Usage: ovpn_service_control.php [-a] [-h] [stop|start|restart|configure] [uuid]

    -a all instances
zerwes commented 5 months ago
tun0: flags=8010<POINTOPOINT,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    groups: tun
    nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
tun1: flags=8002<BROADCAST,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    groups: tun
    nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>

....

# /usr/local/opnsense/scripts/openvpn/ovpn_service_control.php -a stop
# /usr/local/opnsense/scripts/openvpn/ovpn_service_control.php -a configure
# /usr/local/opnsense/scripts/openvpn/ovpn_service_control.php -a start

...

tun0: flags=8010<POINTOPOINT,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    groups: tun
    nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
tun1: flags=8002<BROADCAST,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    groups: tun
    nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
tun2: flags=8010<POINTOPOINT,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    groups: tun
    nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
tun3: flags=8002<BROADCAST,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    groups: tun
    nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
tun4: flags=8010<POINTOPOINT,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    groups: tun
    nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
tun5: flags=8002<BROADCAST,MULTICAST> metric 0 mtu 1500
    options=80000<LINKSTATE>
    groups: tun
    nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>

to many tun interfaces and no ovpns1 interface

zerwes commented 5 months ago

current implementation works