Project

General

Profile

Bug #9183

OpenVPN Lagg Interface not working after restart or new start

Added by Alexander H. about 2 months ago. Updated about 1 month ago.

Status:
New
Priority:
Very Low
Assignee:
-
Category:
Interfaces
Target version:
-
Start date:
12/08/2018
Due date:
% Done:

0%

Estimated time:
Affected Version:
2.4.4_1
Affected Architecture:

Description

I configured a LAGG Interface with 4 openvpn tap connections with round robin mode.

After a reboot or if i start the pfsense first time the interface is not working well.
But if i go to the configuration page and change nothing but press save its working great immediately.

does someone have i workaround how i could press the save button with a cron script until the problem is fixed ?

Regards
Alex

History

#1 Updated by Jim Pingle about 2 months ago

  • Subject changed from Lagg Interface not working after restart or new start to OpenVPN Lagg Interface not working after restart or new start
  • Priority changed from Urgent to Very Low
  • Target version deleted (2.4.5)

LAGG is not technically supported for OpenVPN. It may happen to work by coincidence, but it's not a configuration we encourage/endorse/support/etc.

There may be a way to improve this, but it isn't a priority.

#2 Updated by Alexander H. about 2 months ago

What ? Really why is it possible to choose a openvpn interface in the lagg config if it is not supported ?

Who make the decision what is supported and what not, i think this is a open source project ?

I try to fix it by myself i think its only a timing problem or initalisation was broken or not done.

Does anybody have a hint how i find the php section in which the save button is located ?

i think i would spend now more time in this project and also help to integrate the softether part.

i think this is a good alternativ to openvpn laggs !!! whst's the status für the softether client implementation ?

#3 Updated by Alexander H. about 1 month ago

So i take some time to find out how the config work but now i have a workaround !!!

no thanks to all developer for no help nice community here :(

if echo "$(/usr/local/sbin/pfSsh.php playback /etc/phpshellsessions/gatewaystatus)" | grep -i 'BOND_WIESBADEN' | grep -q "down"; then
   dt=$(date '+%d/%m/%Y %H:%M:%S');
   echo "$dt reset bond" > /var/log/check.log
   /usr/local/sbin/pfSsh.php playback /etc/phpshellsessions/checkgw >> /var/log/check.log
fi

checkgw

require_once("ipsec.inc");
require_once("functions.inc");
require_once("filter.inc");
require_once("shaper.inc");
require_once("rrd.inc");
require_once("vpn.inc");
require_once("xmlparse_attr.inc");

parse_config(true); 

$lagg = array();
$lagg['members'] = $config["laggs"]["lagg"][0]["members"];
$lagg['descr'] = $config["laggs"]["lagg"][0]["descr"];
$lagg['laggif'] = $config["laggs"]["lagg"][0]["laggif"];
$lagg['proto'] = $config["laggs"]["lagg"][0]["proto"];

$lagg['laggif'] = interface_lagg_configure($lagg);
if ($lagg['laggif'] == "" || !stristr($lagg['laggif'], "lagg")) {
    $input_errors[] = gettext("Error occurred creating interface, please retry.");
} else {
    if (isset($id) && $a_laggs[$id]) {
        $a_laggs[$id] = $lagg;
    } else {
        $a_laggs[] = $lagg;
    }
    write_config();

    $confif = convert_real_interface_to_friendly_interface_name($lagg['laggif']);
    if ($confif != "") {
        interface_configure($confif);
    }

    // reconfigure any VLANs with this lagg as their parent
    if (is_array($config['vlans']['vlan'])) {
        foreach ($config['vlans']['vlan'] as $vlan) {
            if ($vlan['if'] == $lagg['laggif']) {
                interface_vlan_configure($vlan);
                $confif = convert_real_interface_to_friendly_interface_name($vlan['vlanif']);
                if ($confif != "") {
                    interface_configure($confif);
                }
            }
        }
    }
}

i installed the cron package and setting up this script to check every minute the state of the lagg0.

now after a reboot the lagg seem to be automaticly working and everything work fine !

so it looks like a timing or reconfiguring problem.

I have pppeo wan connections with openvpn tunnels tap on it.

Also available in: Atom PDF