Kea DHCP Breaks Existing Wireguard/OpenVPN On PfSense 2.7.2
-
Good Day PfSense Collective,
Seems that sense upgrading to PFSense and switching to Kea DHCP the configs for both Wireguard and OpenVPN seems to break connections.
The logs for wireguard cant get pass "Sending handshake initiation to peer" and OpenVPN, similar peer connection issue is also replicated in OpenVPN.
All signs seems to point to the change I made to Kea DHCP after upgrading.
Anyone can offer some direction, it would be more than appreciated. -
@freesparks you can easily switch back off Kea and find out, but you’ve looked into the OpenVPN and OpenSSL algorithm changes?
https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#openssl-upgraded-to-3-0-12
https://forum.netgate.com/topic/170071/heads-up-openvpn-deprecating-shared-key-mode-requires-tls-deprecating-cipher-selection/
-
@freesparks Good Day SteverITS,
thank you so much for the reply. Yes, I had already read about how to revert back to "ISC DHCP (Deprecated)" and have replicated that this fixes the issue.
I have also validated that OpenSSL algorithm changes and can confirm im using SHA256.