• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Restore config - problem interface assignment

Scheduled Pinned Locked Moved General pfSense Questions
9 Posts 3 Posters 167 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • D
    delfi5
    last edited by Apr 4, 2025, 8:03 AM

    Hi, I have a virtual fw on VMware with 9 network interfaces connected to the machine. There are also 3 virtual interfaces of as many OpenVPN connections configured on the fw.

    244abfa3-f485-4ac1-9ac2-c282a814916b-image.png

    I need to change machines with VMXNET3 network cards and I am trying to restore the configuration on the new vm.

    a1fb8007-b3a5-429a-92ba-0a1423702df9-image.png

    How can I restore the configuration without losing the OpenVPN virtual interface association and the labels of the others? Because if in the assignment procedure I don't assign anything to the OpenVPN interface then it terminates and exit the config. Is there any other procedure? Many thanks

    G 1 Reply Last reply Apr 4, 2025, 9:37 AM Reply Quote 0
    • G
      Gertjan @delfi5
      last edited by Gertjan Apr 4, 2025, 9:41 AM Apr 4, 2025, 9:37 AM

      @delfi5

      03b06d2a-3198-4eb7-8e5e-25e4b4d890a2-image.png

      You can't assign an interface not known to the system at that moment.
      Known are : the ones listed.
      The OpenVPN server will start when the system boots normally, and the OpenVPN server process will created at that moment the 'virtual' interface ovpns1.

      edit :

      "Best practice" is :

      fdc8293e-51dd-4f12-b6df-5527ebd4f075-image.png

      Create an interface under Interfaces > Interface Assignments based upon your "ovpns1" interface.

      The settings are :

      52d793c5-acf3-4ae8-85c9-d345c88425f3-image.png

      so it's just the desciption - nothing else.

      From now on,; you can leave the "OpenVPN" rule set empty :

      ec2d6d54-5d04-4c7e-b75b-1bb781ba6749-image.png

      and put them all - for this server - under :

      413c6db3-b642-4b86-ba9c-9ce6685f54a2-image.png

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      D 1 Reply Last reply Apr 4, 2025, 9:44 AM Reply Quote 0
      • D
        delfi5 @Gertjan
        last edited by delfi5 Apr 4, 2025, 9:48 AM Apr 4, 2025, 9:44 AM

        @Gertjan
        And I totally agree, but-what can I enter at that time? If I go out I lose the association of the β€˜real’ ones that are listed next. Is there something for skip? Unfortunately then I have to deal with VMware's limitation on the 10 maximum network interfaces per vm. Otherwise I could load 12 interfaces and after startup change them, provided OpenVPN does not then complain during creation

        @Gertjan said in Restore config - problem interface assignment:

        and put them all - for this server - under :

        My config is already set up like this

        G 1 Reply Last reply Apr 4, 2025, 9:49 AM Reply Quote 0
        • G
          Gertjan @delfi5
          last edited by Apr 4, 2025, 9:49 AM

          @delfi5

          I'm not a frequent VM user, and never saw that many interfaces ....
          Not sure if its useful info, but I would assign the WAN, the LAN, and have the system started.
          Finish up in the GUI.

          Interface assignment on the console level is - normally - something rather rare.

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          D 2 Replies Last reply Apr 4, 2025, 10:11 AM Reply Quote 0
          • D
            delfi5 @Gertjan
            last edited by Apr 4, 2025, 10:11 AM

            @Gertjan
            Whether it is virtual or bare metal does not matter at this time.
            Potentially there could also be vlan interfaces (and they could be 4096!).
            I understand that this is a non-standard situation so I was asking what is opportune to do and how to proceed.

            @Gertjan said in Restore config - problem interface assignment:

            Finish up in the GUI.

            85df68a4-469d-4a20-a9c0-4a1a24581d11-image.png

            and I lose all the configuration information of the interfaces

            543f072b-0d6c-4378-af13-28502d98fe62-image.png

            1 Reply Last reply Reply Quote 0
            • D
              delfi5 @Gertjan
              last edited by Apr 4, 2025, 10:16 AM

              @Gertjan

              I could edit the backup xml with the new interface names and their mac addresses as it expects it at startup on the new machine.
              Maybe that would work that way?

              G 1 Reply Last reply Apr 4, 2025, 10:19 AM Reply Quote 0
              • G
                Gertjan @delfi5
                last edited by Apr 4, 2025, 10:19 AM

                @delfi5 said in Restore config - problem interface assignment:

                Maybe that would work that way?

                I wouldn't even asked that question, and done it already ^^
                There is just one rule : don't make any 'errors' while editing your xml file.

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                D 1 Reply Last reply Apr 4, 2025, 1:50 PM Reply Quote 0
                • S
                  stephenw10 Netgate Administrator
                  last edited by Apr 4, 2025, 1:24 PM

                  Yeah sub-interfaces like that don't exist at that point so you can't assign them from the console.

                  Either import the old config int the webgui where all the interfaces will be available. Or edit the config to match in advance as suggested.

                  And, yes, it's easy to make a typo. πŸ˜‰ But you can always edit it again and re-import it.

                  1 Reply Last reply Reply Quote 0
                  • D
                    delfi5 @Gertjan
                    last edited by Apr 4, 2025, 1:50 PM

                    @Gertjan

                    It works!

                    You need to turn on the new machine and check in which order the network cards are recognized.
                    You edit the backup file of the old machine with the names of the interfaces in the right order you want and then perform the restore.

                    1 Reply Last reply Reply Quote 1
                    1 out of 9
                    • First post
                      1/9
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                      This community forum collects and processes your personal information.
                      consent.not_received