Share your Experience


  • Netgate

    This subforum is for TNSR users to share their experiences. We encourage you to let us know the specific business needs you'd like to meet with TNSR so we can understand your requirements better.



  • Interesting product. I was expecting a pfsense with some upgrades and not a completely different system. It seems a lot like Vyos.

    It’s not something I’m interested in because the packages are gone and the GUI is gone.

    I’ll be interested to see what people do with it.



  • @bbrendon said in Share your Experience:

    Interesting product. I was expecting a pfsense with some upgrades and not a completely different system. It seems a lot like Vyos.

    It’s not something I’m interested in because the packages are gone and the GUI is gone.

    I’ll be interested to see what people do with it.

    yeah. Slap a pfsense-like GUI on that puppy for home users and then I'm all over it.



  • Hi,

    hereby I would like to write down my experience with the test version. I was asked by mail to do this here.
    The next lines are personal notes on individual functions. They also contain questions. It would be nice if one of the developers could answer them:

    1) Install
    
    - Default install --> "A start job is running for dev-mapper.. root device.." (LVM)
    
            --> Fixed by assigning more memory (was 4G before).
    
     
    2) First start
    
    - VPP and TNSR Daemon not running.. --> Assign more memory to fix (now 16gb ram)
     
    
    3) Configure NICs
    
    - VRRP IPv6 not working if prefix != /64 (e.g. /48)
    
    - Not possible to define a different interface to sync VRRP states - Rolestate updates/keepalives (?)
     
    
     4) Configure BGP
    
    - Not more than one BGP community configurable (eg. set community 49697:2402 49697:2500 49697:2511)
    
    - "route dynamic bgp --> server 205927 --> neighbor PEERGROUP6 --> enable" does not enable peers related to a peer-group.
            --> fix: neighbor X:X:X:X --> enable
    
    - After "no enable" for a peer-group a "service bgp restart" is requiered to activate the changes (?)
    
    - FRR / BGPd has to be restarted after a route-map has been removed (No reload possible?)
    
    - "no bgp default ipv4-unicast" configurable via vtysh but not via "clixon_cli"
    
    
    5) Misc
    
    - Strange problem after reboot "clixon_backend: Mar  4 15:18:17: tnsr_err_report: 292: Config error: add:vpp/loopback/bgploop, Invalid registration, Add loopback failed"
            --> Solution: reboot ^^
    
    - Adding new NICs during the VPS is online lead vpp to crash.. (KVM add NIC + dataplane dpkg dev XY:XY network)
            --> Solution: Reset the whole VPP/TNSR config to defaults (delete candidate_db, running_db + startup_db)..
    
    - Is it possible to monitor traffic from external tools (e.g. zabbix)? Afais it's possible to use SNMP.. Is this the only option you have?
    
    - Is netflow or sflow available?
    

    Thanks for reading!

    Joey


  • Banned

    This post is deleted!

Log in to reply