-
Notifications
You must be signed in to change notification settings - Fork 23
Open
Description
legacy OpenVPN config is deprecated and will be removed in version 26.1:
This component is reaching the end of the line, official maintenance will end as of version 26.1****
I switched my OpenVPN config from legacy to instances and now there is no data for the OpenVPN tunnels in the checkmk-opnsense-agent output.
old config style was like that:
<openvpn>
<openvpn-server>
<mode>server_user</mode>
<protocol>UDP</protocol>
<dev_mode>tun</dev_mode>
<local_port>31194</local_port>
<description>OpenVPN</description>
<digest>SHA1</digest>
<tunnel_network>192.168.150.0/24</tunnel_network>
<local_network>192.168.151.0/24</local_network>
<compression>lz4-v2</compression>
<topology_subnet>yes</topology_subnet>
<local_group>OpenVPN</local_group>
<netbios_ntype>0</netbios_ntype>
<verbosity_level>3</verbosity_level>
<tlsmode>crypt</tlsmode>
<vpnid>1</vpnid>
<disable>1</disable>
<authmode>Local Database</authmode>
<interface>lo0</interface>
<custom_options/>
<caref>65234227abae</caref>
<crlref/>
<certref>65cc69f4b28ad</certref>
<cert_depth>1</cert_depth>
</openvpn-server>
</openvpn>
the new config looks like that:
<OpenVPN version="1.0.1">
<Overwrites/>
<Instances>
<Instance uuid="bafb33fc-2165-41cb-d27f-c046d7a9119b">
<vpnid>1</vpnid>
<enabled>1</enabled>
<dev_type>tun</dev_type>
<verb>3</verb>
<proto>udp</proto>
<port>31194</port>
<local>127.0.0.1</local>
<topology>subnet</topology>
<remote/>
<role>server</role>
<server>192.168.150.0/24</server>
<server_ipv6/>
<bridge_gateway/>
<bridge_pool/>
<route/>
<push_route>192.168.151.0/24</push_route>
<cert>653669f4ccc37</cert>
<crl/>
<ca/>
<cert_depth>1</cert_depth>
<remote_cert_tls>1</remote_cert_tls>
<verify_client_cert>require</verify_client_cert>
<use_ocsp>0</use_ocsp>
<auth>SHA512</auth>
<data-ciphers/>
<data-ciphers-fallback/>
<tls_key>7c69aac3-d53e-406a-9120-52330f72d211</tls_key>
<authmode>Local Database</authmode>
<local_group>2001</local_group>
<various_flags/>
<various_push_flags/>
<push_inactive/>
<username_as_common_name>0</username_as_common_name>
<strictusercn>1</strictusercn>
<username/>
<password/>
<maxclients/>
<keepalive_interval/>
<keepalive_timeout/>
<reneg-sec>14400</reneg-sec>
<auth-gen-token/>
<auth-gen-token-renewal/>
<auth-gen-token-secret/>
<provision_exclusive>0</provision_exclusive>
<redirect_gateway/>
<route_metric/>
<register_dns>0</register_dns>
<dns_domain/>
<dns_domain_search/>
<dns_servers/>
<ntp_servers/>
<tun_mtu/>
<fragment/>
<mssfix>0</mssfix>
<carp_depend_on/>
<description>OpenVPN GLT</description>
<compress_migrate>0</compress_migrate>
<ifconfig-pool-persist>0</ifconfig-pool-persist>
<http-proxy/>
</Instance>
</Instances>
</OpenVPN>
would be wonderful if you could switch your tool to use the new config style.
great work at all!
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels
